Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/323830343a323333633a3a2f33322d3438203d3e20323634313530.roa
File:                     323830343a323333633a3a2f33322d3438203d3e20323634313530.roa (raw, json)
Hash identifier:          TUvPG6+HFgMSr2xRjOO7nk8Yr7gp6fqoaT8AKtjRLmA=
Subject key identifier:   30:AF:59:CF:FE:49:62:A4:DC:DD:FC:30:A5:B1:B6:22:78:C9:E6:85
Certificate issuer:       /CN=9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17
Certificate serial:       656CCE554B862D798DA7F8F42808E2BE9563C409
Authority key identifier: 99:27:C1:4E:A3:5B:CE:9F:2B:73:6A:DD:CC:0D:E0:B1:A0:7C:9E:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/323830343a323333633a3a2f33322d3438203d3e20323634313530.roa
Signing time:             Thu 04 Apr 2024 12:54:29 +0000
ROA not before:           Thu 04 Apr 2024 12:49:29 +0000
ROA not after:            Thu 03 Apr 2025 12:54:29 +0000
asID:                     264150
IP address blocks:        2804:233c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.crl
                          rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6c:ce:55:4b:86:2d:79:8d:a7:f8:f4:28:08:e2:be:95:63:c4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17
        Validity
            Not Before: Apr  4 12:49:29 2024 GMT
            Not After : Apr  3 12:54:29 2025 GMT
        Subject: CN=30AF59CFFE4962A4DCDDFC30A5B1B62278C9E685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:7a:91:c8:09:ed:25:f6:7a:e7:45:2a:15:72:
                    c2:c2:43:4a:dd:69:4b:48:01:77:10:76:ec:64:ac:
                    df:a5:06:65:77:73:a8:02:71:3b:37:e4:b0:b8:2d:
                    45:d2:35:9d:d5:b5:3e:0d:4b:9f:27:7a:2e:49:1e:
                    a5:38:83:58:98:a5:c6:78:80:56:a1:26:d9:34:92:
                    c8:19:b6:5c:f2:7b:20:fa:2e:bc:4c:45:47:99:ca:
                    8f:d5:71:62:84:7b:8d:e5:0f:c7:f1:28:e0:25:85:
                    5c:2a:63:1c:02:de:5a:9c:13:a5:a2:08:70:24:af:
                    31:19:d9:b8:ee:94:d3:a3:d1:9d:9f:76:36:fa:5d:
                    d9:58:33:f8:93:f8:b7:ad:5c:9a:08:0c:6a:e6:25:
                    9b:7c:9d:94:8a:57:f2:b1:81:d2:46:18:8c:bc:f4:
                    d2:db:44:60:fb:e9:d5:af:4a:83:c8:bb:d5:3b:7f:
                    2f:63:f6:10:40:59:ef:0e:2e:ab:00:47:9e:e2:88:
                    59:40:3a:61:ee:f3:43:d2:17:02:78:a0:fd:6f:8d:
                    ac:53:5b:98:a4:25:2c:16:2d:2b:b6:b6:a5:71:5a:
                    05:0e:8b:11:07:96:3b:43:65:f9:fd:ae:67:a1:2a:
                    3c:d8:a2:53:f3:ac:a8:65:c5:2e:de:4b:fa:da:d3:
                    0a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AF:59:CF:FE:49:62:A4:DC:DD:FC:30:A5:B1:B6:22:78:C9:E6:85
            X509v3 Authority Key Identifier:
                keyid:99:27:C1:4E:A3:5B:CE:9F:2B:73:6A:DD:CC:0D:E0:B1:A0:7C:9E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/323830343a323333633a3a2f33322d3438203d3e20323634313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:233c::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:ca:7d:f2:f5:46:27:7a:06:a0:40:f3:49:2c:e4:c1:02:d1:
         29:25:f9:d0:4c:d3:e1:14:85:65:fa:06:08:8e:d3:37:14:af:
         11:68:9e:c1:5e:ea:a9:3f:08:7e:5f:d7:ec:c6:ce:11:ef:4a:
         55:50:55:77:e6:96:8b:54:a7:0f:f6:65:a7:15:04:f0:24:ed:
         ab:b9:be:69:3d:93:f9:88:78:b1:9c:ed:99:b5:0e:8d:12:2d:
         f6:d3:e6:59:7f:4e:b0:1e:12:4d:dc:eb:4a:eb:3d:2c:a8:db:
         0f:48:29:e5:a0:01:18:7e:d4:b6:bb:66:85:7f:fe:76:a2:bf:
         dc:3d:bd:d8:ab:a0:62:3c:c1:80:89:20:b8:67:42:e3:fe:fb:
         17:25:88:75:43:be:da:11:10:d3:59:3c:e0:3d:7e:5b:f0:64:
         62:89:3e:b1:7c:f3:89:f4:05:e7:9a:23:7b:d4:63:e2:7a:48:
         a4:23:a1:5e:10:31:b2:ef:1a:a0:3d:77:e8:86:9c:c8:ff:20:
         c5:e6:c8:d3:5f:9c:62:56:80:95:09:d0:d9:20:c1:1a:9e:32:
         89:f0:55:04:a4:13:a8:c1:74:ec:0d:dd:0e:3a:61:2f:1c:a2:
         ea:ba:29:43:76:3b:38:5a:fa:0e:e8:fe:5a:9f:b8:0e:41:36:
         96:2d:00:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:35 2024 by rpki-client on console-fra.rpki-client.org