Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ET8zM9CYvxHjxZHaU3C9LgrSndySL4XbLhgV8N3e9vS4/0/323830343a3733343a3a2f33322d313238203d3e20323632363234.roa
File:                     323830343a3733343a3a2f33322d313238203d3e20323632363234.roa (raw, json)
Hash identifier:          TERANMHNxiitWRr0QykNWO623iMYkBOXfZ+z6eHIS1c=
Subject key identifier:   51:06:4E:D7:33:FD:C6:D2:75:D6:D2:4F:46:50:E4:F5:27:23:D0:B9
Certificate issuer:       /CN=4418672372D7B89BAF5317B3C66BDA9B0F826423
Certificate serial:       5F16BBAEC6F19CA69AB5FC9BA155D7753E5283A9
Authority key identifier: 44:18:67:23:72:D7:B8:9B:AF:53:17:B3:C6:6B:DA:9B:0F:82:64:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4418672372D7B89BAF5317B3C66BDA9B0F826423.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET8zM9CYvxHjxZHaU3C9LgrSndySL4XbLhgV8N3e9vS4/0/323830343a3733343a3a2f33322d313238203d3e20323632363234.roa
Signing time:             Fri 25 Oct 2024 19:17:22 +0000
ROA not before:           Fri 25 Oct 2024 19:12:22 +0000
ROA not after:            Fri 24 Oct 2025 19:17:22 +0000
asID:                     262624
IP address blocks:        2804:734::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ET8zM9CYvxHjxZHaU3C9LgrSndySL4XbLhgV8N3e9vS4/0/4418672372D7B89BAF5317B3C66BDA9B0F826423.crl
                          rsync://rpki-repo.registro.br/repo/ET8zM9CYvxHjxZHaU3C9LgrSndySL4XbLhgV8N3e9vS4/0/4418672372D7B89BAF5317B3C66BDA9B0F826423.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4418672372D7B89BAF5317B3C66BDA9B0F826423.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 14:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:16:bb:ae:c6:f1:9c:a6:9a:b5:fc:9b:a1:55:d7:75:3e:52:83:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4418672372D7B89BAF5317B3C66BDA9B0F826423
        Validity
            Not Before: Oct 25 19:12:22 2024 GMT
            Not After : Oct 24 19:17:22 2025 GMT
        Subject: CN=51064ED733FDC6D275D6D24F4650E4F52723D0B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:90:fe:71:f7:7a:0f:2b:84:39:07:3b:9d:88:
                    cf:df:83:7a:9d:ed:b7:13:e4:02:12:10:ea:fb:8e:
                    ba:81:97:0c:d3:fb:25:66:30:af:3f:bc:2a:66:01:
                    a3:52:3b:5b:1d:c0:ef:36:59:24:cb:a7:80:1a:f7:
                    58:68:e1:0f:47:24:eb:17:1e:49:4d:b4:ab:65:20:
                    62:83:f5:ac:71:1a:27:a8:d7:ae:d4:15:d4:79:0d:
                    74:bd:b5:38:59:bc:52:72:bc:5d:ad:1b:b7:b2:15:
                    f2:28:27:48:64:98:38:bd:65:6e:6e:86:05:fe:b2:
                    1f:be:84:98:21:64:23:32:ef:9f:83:a6:77:03:bc:
                    54:4b:ef:32:96:38:e7:74:8e:e6:97:60:c3:fe:cf:
                    86:1b:a1:a1:a3:9b:55:8b:45:db:82:55:e7:e1:44:
                    2c:e0:37:e4:64:81:90:3a:c4:be:18:f3:ef:91:5c:
                    cc:c8:39:83:ac:76:eb:6b:f6:4a:85:8f:83:97:d3:
                    a2:8c:29:82:d8:58:47:ee:c8:cf:3b:fd:be:0f:ee:
                    64:c5:b5:ee:7e:92:73:86:7e:48:63:9d:2d:2b:30:
                    2e:99:9e:17:61:de:1b:9e:f3:a7:34:d9:54:dd:ca:
                    03:d5:07:1b:3e:27:db:66:84:86:51:91:30:f8:b7:
                    2b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:06:4E:D7:33:FD:C6:D2:75:D6:D2:4F:46:50:E4:F5:27:23:D0:B9
            X509v3 Authority Key Identifier:
                keyid:44:18:67:23:72:D7:B8:9B:AF:53:17:B3:C6:6B:DA:9B:0F:82:64:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET8zM9CYvxHjxZHaU3C9LgrSndySL4XbLhgV8N3e9vS4/0/4418672372D7B89BAF5317B3C66BDA9B0F826423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4418672372D7B89BAF5317B3C66BDA9B0F826423.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET8zM9CYvxHjxZHaU3C9LgrSndySL4XbLhgV8N3e9vS4/0/323830343a3733343a3a2f33322d313238203d3e20323632363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:734::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:86:93:09:7c:c5:08:cb:ab:a5:d6:86:f4:c2:fc:a6:fd:90:
         87:6f:62:86:e4:4d:95:09:82:e4:96:2f:f1:34:42:df:91:c2:
         25:ec:b3:a6:37:de:44:a4:52:96:6b:78:86:31:ea:c5:b4:29:
         d0:22:aa:f8:fd:68:b4:ee:b3:fb:e6:29:bb:27:2a:2e:88:9a:
         c5:65:77:af:b3:22:d6:27:1a:4b:6b:2c:72:f9:d6:c1:8d:54:
         d7:bd:ea:8f:09:2c:ce:f1:1b:93:65:6a:91:1a:44:b1:c2:da:
         ec:75:39:d9:d9:63:6e:05:81:e0:0e:fa:7e:e1:5a:8a:0b:ef:
         84:22:04:ac:a7:38:26:39:e3:25:71:1a:b9:18:0c:39:ad:69:
         d8:e9:5e:1e:84:2a:f1:f0:24:5f:bf:a2:2d:d8:6c:86:e8:b3:
         b1:a4:54:cf:2c:ea:1e:b0:47:50:7a:1c:ee:e5:64:dc:af:05:
         3d:d3:2a:8f:1f:87:15:4d:86:95:04:9e:a2:80:be:33:35:2f:
         7d:02:2b:80:b0:5c:1d:da:6a:66:ed:ce:df:01:8a:8e:32:03:
         39:a9:32:14:08:7c:d7:49:e9:93:6c:81:c9:c0:73:4e:0f:86:
         ba:05:1d:e2:75:f9:37:fe:db:bf:1c:5c:5a:6b:b2:dc:be:b8:
         7e:b9:b3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 14:49:06 2024 by rpki-client on console-fra.rpki-client.org