Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/1/323830343a3563343a3a2f33322d3438203d3e20323632353430.roa
File:                     323830343a3563343a3a2f33322d3438203d3e20323632353430.roa (raw, json)
Hash identifier:          Y6+Gf88Mxv3LkQWhiSqdLU5NmB0TIoJOHn1VkmfaPLU=
Subject key identifier:   8F:3C:2C:4A:74:F9:45:64:51:05:C0:23:DA:D8:0A:95:BE:AB:03:90
Certificate issuer:       /CN=47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271
Certificate serial:       5B82C864E7B3324A7B83E6C3C73EBE31C6D71A6E
Authority key identifier: 47:C9:37:9E:E2:F8:BD:5D:FA:D7:0F:B9:3B:FB:C9:B4:F2:11:A2:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/1/323830343a3563343a3a2f33322d3438203d3e20323632353430.roa
Signing time:             Thu 04 Apr 2024 17:09:07 +0000
ROA not before:           Thu 04 Apr 2024 17:04:07 +0000
ROA not after:            Thu 03 Apr 2025 17:09:07 +0000
asID:                     262540
IP address blocks:        2804:5c4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/1/47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271.crl
                          rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/1/47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:82:c8:64:e7:b3:32:4a:7b:83:e6:c3:c7:3e:be:31:c6:d7:1a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271
        Validity
            Not Before: Apr  4 17:04:07 2024 GMT
            Not After : Apr  3 17:09:07 2025 GMT
        Subject: CN=8F3C2C4A74F945645105C023DAD80A95BEAB0390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5e:70:a6:5b:66:19:45:db:da:fb:d2:b5:63:
                    9f:a9:1d:29:0e:7c:c4:1c:68:57:ba:19:ee:1f:40:
                    f8:24:81:c1:27:7f:02:09:4d:ce:b4:d6:99:40:01:
                    ea:d1:69:40:fd:58:dd:c3:ae:9d:32:3f:3e:cf:04:
                    48:c8:c6:41:c7:80:8c:5c:af:5f:86:e4:bb:68:50:
                    9d:34:17:5b:0c:ae:c6:e5:b9:2f:50:b8:bf:be:0a:
                    10:60:7e:7b:2b:57:23:da:01:f7:e0:de:7d:e9:14:
                    28:fd:6f:b3:9c:7a:b8:e4:31:dc:92:09:a3:95:66:
                    44:8a:11:e6:7a:ba:fa:a0:b7:45:ae:d5:b8:80:27:
                    94:aa:f2:fe:4e:35:10:44:08:ae:07:4a:cd:07:0a:
                    e7:09:eb:22:ec:8f:8c:49:48:69:17:a6:39:f9:61:
                    78:ea:91:ac:ef:c0:80:5a:7b:5b:b0:60:83:6e:7e:
                    4b:6a:9f:bf:ce:41:46:14:50:f0:b2:e2:6b:03:c9:
                    e0:29:4b:a9:c6:a9:77:52:06:1c:30:e1:7f:15:99:
                    71:ea:ce:b4:4f:69:a7:36:70:1b:d3:c6:f7:06:9a:
                    63:3a:2e:45:8f:47:97:7a:15:b2:bd:b8:c2:ce:19:
                    74:c9:79:41:02:3c:cd:ef:1d:b4:b1:60:60:2b:8e:
                    3e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3C:2C:4A:74:F9:45:64:51:05:C0:23:DA:D8:0A:95:BE:AB:03:90
            X509v3 Authority Key Identifier:
                keyid:47:C9:37:9E:E2:F8:BD:5D:FA:D7:0F:B9:3B:FB:C9:B4:F2:11:A2:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/1/47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/1/323830343a3563343a3a2f33322d3438203d3e20323632353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:42:96:44:50:d8:ec:e1:5f:ac:1a:d9:5f:14:f3:0d:eb:8e:
         68:94:3e:08:28:94:55:d3:a2:6d:15:65:b1:ee:28:d3:00:d1:
         dc:21:ce:b3:18:4f:c0:14:cc:fc:8c:56:d2:c0:5e:95:64:cd:
         fb:10:e8:97:c2:cf:a4:d8:70:93:18:7e:bb:eb:7f:ff:97:f8:
         49:0b:7b:ea:be:c6:d8:a1:5b:d1:75:69:b6:97:96:da:b9:3c:
         a7:54:96:ac:5b:7b:5c:48:79:4b:25:b8:01:38:8f:3e:f3:1f:
         42:71:99:d4:56:1b:2c:c5:ca:19:a2:e2:1b:5b:0b:f3:e5:20:
         44:09:13:cb:d1:11:db:1f:c4:2d:44:28:3e:9b:65:84:33:8e:
         9d:3a:a9:c1:79:7c:ed:5a:aa:b8:fc:3f:f7:44:87:fd:54:7b:
         af:4c:f8:6a:a7:92:54:01:88:ed:47:07:d9:0b:94:d8:80:46:
         a2:e8:da:0d:5e:48:c1:58:02:a3:7c:c7:da:2e:7b:00:a4:45:
         3f:23:c8:a1:60:e3:f8:64:36:1a:b9:70:26:cc:12:c3:60:2d:
         bc:16:f3:ad:7c:2f:e9:86:6f:e7:56:a5:f3:e8:ca:e2:a0:74:
         2d:3a:a7:4d:cd:a6:bd:53:bc:a8:c3:93:c3:85:88:64:18:dd:
         c2:a4:19:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:53 2024 by rpki-client on console-fra.rpki-client.org