Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/323830343a323430343a3a2f33322d313238203d3e20323634313937.roa
File:                     323830343a323430343a3a2f33322d313238203d3e20323634313937.roa (raw, json)
Hash identifier:          OcUPXFN5LlSVzNGXmpy973SVl+333FWVLgBTZfC0W24=
Subject key identifier:   04:FF:00:D1:4B:5A:91:C0:D2:B1:D4:31:D9:4C:6C:C1:77:90:BE:47
Certificate issuer:       /CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
Certificate serial:       4FD9E8E60B9F5DE94601C5EFABEB167F79635726
Authority key identifier: AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/323830343a323430343a3a2f33322d313238203d3e20323634313937.roa
Signing time:             Thu 04 Apr 2024 18:08:16 +0000
ROA not before:           Thu 04 Apr 2024 18:03:16 +0000
ROA not after:            Thu 03 Apr 2025 18:08:16 +0000
asID:                     264197
IP address blocks:        2804:2404::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.crl
                          rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 12:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d9:e8:e6:0b:9f:5d:e9:46:01:c5:ef:ab:eb:16:7f:79:63:57:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
        Validity
            Not Before: Apr  4 18:03:16 2024 GMT
            Not After : Apr  3 18:08:16 2025 GMT
        Subject: CN=04FF00D14B5A91C0D2B1D431D94C6CC17790BE47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ef:d3:a0:16:1d:1b:89:5f:15:71:18:46:47:
                    42:7e:23:5e:24:76:af:a7:75:24:0e:ae:7f:47:bc:
                    c8:48:93:11:91:83:42:f2:33:e1:be:77:4d:53:c8:
                    63:5a:85:2f:43:d5:60:1b:92:b5:02:f5:7d:8b:82:
                    f8:6a:fa:96:00:1b:09:f2:09:80:c0:27:ea:24:6c:
                    06:7c:dc:75:5e:f7:2f:88:c9:78:21:00:5a:7e:90:
                    bd:6f:5f:44:92:a5:f0:62:b4:41:37:f0:79:76:73:
                    d4:3b:82:aa:6e:01:22:b5:41:a5:6d:74:71:4f:62:
                    f0:4f:cb:3f:96:00:ff:09:e6:4f:1c:c9:f0:82:c6:
                    5d:9a:8f:01:c6:4c:e4:ea:6d:09:56:aa:ac:5a:3a:
                    a3:b3:f1:5a:92:93:66:ec:1b:58:5b:fa:50:1d:22:
                    4a:fe:e7:75:12:05:dc:9c:a3:b1:6d:0b:49:a5:26:
                    0d:e3:b9:af:5a:4f:e9:b0:e9:2c:7c:16:44:d5:8f:
                    cb:b2:16:ad:34:24:74:55:4b:78:3d:92:94:dd:ad:
                    1d:c7:e0:b1:65:5a:f4:70:e9:62:5c:81:81:72:20:
                    3a:d1:16:6b:8e:e9:44:9e:bb:04:e5:05:17:f9:0b:
                    2f:c8:6d:3e:ce:d8:6b:e5:c6:b5:79:38:ce:a9:5b:
                    bc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FF:00:D1:4B:5A:91:C0:D2:B1:D4:31:D9:4C:6C:C1:77:90:BE:47
            X509v3 Authority Key Identifier:
                keyid:AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/323830343a323430343a3a2f33322d313238203d3e20323634313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2404::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:d3:3f:96:e5:9f:14:78:6a:04:c1:71:4a:ce:68:05:88:e7:
         e8:33:c9:83:4b:73:63:6a:26:7a:cb:69:c8:2a:be:19:26:b6:
         ab:44:d4:6f:a1:f1:7a:e9:f3:5c:ae:ef:e0:b1:ae:cf:66:75:
         50:d5:b8:64:d8:15:9c:e0:ff:7e:77:32:e0:cd:03:95:d1:48:
         fc:e4:4f:14:8f:fd:d8:1c:e4:f9:24:75:0e:5e:5d:a6:1e:d0:
         75:65:a0:db:01:ff:16:fc:a0:34:d8:51:f2:57:d3:ae:c6:87:
         41:22:02:a7:f9:8f:e5:8c:c8:50:73:ae:a0:1b:70:48:f2:ac:
         09:79:9c:cc:e6:b0:a4:50:da:6f:f8:e9:8c:b0:30:65:2e:24:
         9b:94:bc:f9:c9:7a:fc:cc:e3:22:69:7b:ab:10:55:e9:4c:04:
         98:28:00:6d:56:96:af:2d:73:f1:28:79:29:06:69:9f:54:0b:
         2f:44:b2:e4:65:4c:c9:fe:90:5a:c6:a1:5e:79:97:d8:00:53:
         9a:ae:64:e2:2b:7f:60:2f:94:ce:5c:4e:b1:98:93:e0:48:bb:
         78:78:4c:e9:80:3e:62:0d:6c:07:bd:e9:11:6f:7a:d1:99:7f:
         89:9b:3b:b5:ac:db:89:02:b4:79:de:44:05:cb:84:9c:7c:3d:
         80:33:fd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:54 2024 by rpki-client on console-fra.rpki-client.org