Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/323830343a3830633a3a2f33322d3438203d3e20323632333433.roa
File:                     323830343a3830633a3a2f33322d3438203d3e20323632333433.roa (raw, json)
Hash identifier:          wsKdtx1VU4B5UkGTRuXm0xHDCeKJy3wRALeqr5GZAWE=
Subject key identifier:   49:7B:04:2E:D5:75:0B:41:83:E6:A2:89:C4:94:E3:20:25:37:FD:B0
Certificate issuer:       /CN=A5455EE25C6FEB15A12789F15E975474289CE800
Certificate serial:       698B872015589B7A5B298DF2EA85D530F47DDA8B
Authority key identifier: A5:45:5E:E2:5C:6F:EB:15:A1:27:89:F1:5E:97:54:74:28:9C:E8:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/323830343a3830633a3a2f33322d3438203d3e20323632333433.roa
Signing time:             Thu 04 Apr 2024 08:02:45 +0000
ROA not before:           Thu 04 Apr 2024 07:57:45 +0000
ROA not after:            Thu 03 Apr 2025 08:02:45 +0000
asID:                     262343
IP address blocks:        2804:80c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.crl
                          rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8b:87:20:15:58:9b:7a:5b:29:8d:f2:ea:85:d5:30:f4:7d:da:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5455EE25C6FEB15A12789F15E975474289CE800
        Validity
            Not Before: Apr  4 07:57:45 2024 GMT
            Not After : Apr  3 08:02:45 2025 GMT
        Subject: CN=497B042ED5750B4183E6A289C494E3202537FDB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f7:81:a9:fd:4a:d2:32:82:ae:56:e1:88:79:
                    5f:70:d2:50:b1:9c:46:db:d4:26:88:23:c3:b2:fe:
                    5a:db:37:9d:5a:51:8e:49:c1:71:e5:cc:aa:c2:46:
                    9c:9b:8f:85:e6:ec:20:30:8b:c3:ca:fe:48:69:fe:
                    ab:5e:f8:a8:e3:80:90:6b:b5:0f:b2:79:b6:63:62:
                    af:5c:96:e5:b6:a3:64:3d:ef:23:03:5a:a5:13:ec:
                    06:95:cd:2b:58:08:18:75:97:28:a1:dc:53:38:68:
                    e1:7f:b6:f9:a2:09:aa:1c:c4:a4:0b:23:f6:93:28:
                    e4:e1:93:6a:df:df:1a:5d:8e:53:5f:73:66:4c:26:
                    2b:60:4c:5b:75:cd:2d:54:77:99:1d:dc:2a:21:41:
                    d8:86:03:dc:0e:cb:0f:71:ad:91:9b:b9:71:76:51:
                    62:38:d4:f6:ed:1c:4b:36:ed:49:0a:72:d2:a6:4b:
                    64:b8:0d:37:50:97:d2:62:58:ad:69:e7:de:08:aa:
                    7d:10:f3:df:5c:60:1b:dd:f9:64:2b:3e:47:66:bf:
                    1f:db:9f:48:e4:9d:f2:74:54:bf:f5:72:26:c6:b3:
                    78:52:67:e9:94:25:c0:c1:10:42:42:fe:ee:9b:ff:
                    95:51:bc:cb:4f:f6:3d:78:c6:fd:20:02:5c:22:2a:
                    4d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7B:04:2E:D5:75:0B:41:83:E6:A2:89:C4:94:E3:20:25:37:FD:B0
            X509v3 Authority Key Identifier:
                keyid:A5:45:5E:E2:5C:6F:EB:15:A1:27:89:F1:5E:97:54:74:28:9C:E8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/323830343a3830633a3a2f33322d3438203d3e20323632333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80c::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:b2:55:e3:db:85:73:ca:15:f4:90:02:ed:13:14:d8:32:80:
         f3:74:12:3b:db:26:64:46:b3:6c:51:17:7c:cf:79:7c:13:dc:
         2f:58:87:65:3b:39:30:39:3f:ac:c9:06:ed:f3:43:96:8c:6e:
         05:5a:fc:37:53:e4:4d:dd:00:66:09:04:f8:22:93:ce:b9:dc:
         72:0a:8d:02:17:ab:5f:52:c4:18:e0:29:e1:98:9a:23:39:ad:
         e6:d7:99:9f:dc:3d:cf:dd:e7:d3:5f:26:34:da:12:04:1c:9b:
         d3:df:1c:5e:5d:0d:1f:29:5c:67:08:2a:f9:19:0f:49:5d:06:
         6b:f7:c5:9a:51:ae:6c:85:67:36:b9:8b:3f:62:ed:4e:c7:e8:
         7b:96:2b:20:0b:7e:dc:76:84:ae:9e:cd:73:4b:aa:3f:ab:70:
         c7:dc:62:50:7a:55:3f:24:47:e2:87:53:4e:a9:3f:26:01:dd:
         27:2f:74:b1:f3:00:0f:dc:36:88:50:93:ac:8a:1f:ce:e5:bd:
         af:ff:0e:5f:1f:86:68:46:3e:8e:de:fc:79:dd:73:78:e9:c4:
         f0:81:7c:a6:f6:e5:35:09:bf:f3:b1:31:ab:bc:c9:86:01:10:
         ae:9b:89:ee:35:90:b4:f0:d3:0f:4d:f6:ad:17:6f:9a:8c:86:
         37:80:ad:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:00 2024 by rpki-client on console-fra.rpki-client.org