Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/323830343a386434303a3a2f33322d3438203d3e20323733333435.roa
File:                     323830343a386434303a3a2f33322d3438203d3e20323733333435.roa (raw, json)
Hash identifier:          ljeelOpDRLuwsd8nDOnI47JOIme5d7o0kyzaFeLLxpg=
Subject key identifier:   04:90:9F:75:2E:9C:42:F2:96:73:08:61:D9:71:40:8E:30:CB:78:70
Certificate issuer:       /CN=A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4
Certificate serial:       3FB38B72FC247DCB88B1A2044EC7763DF77B46FE
Authority key identifier: A0:A8:EF:33:7A:CF:86:96:4B:1E:46:A7:D6:BA:5B:0F:94:D8:74:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/323830343a386434303a3a2f33322d3438203d3e20323733333435.roa
Signing time:             Thu 04 Apr 2024 17:55:25 +0000
ROA not before:           Thu 04 Apr 2024 17:50:25 +0000
ROA not after:            Thu 03 Apr 2025 17:55:25 +0000
asID:                     273345
IP address blocks:        2804:8d40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl
                          rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b3:8b:72:fc:24:7d:cb:88:b1:a2:04:4e:c7:76:3d:f7:7b:46:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4
        Validity
            Not Before: Apr  4 17:50:25 2024 GMT
            Not After : Apr  3 17:55:25 2025 GMT
        Subject: CN=04909F752E9C42F296730861D971408E30CB7870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:49:a3:cf:24:bc:4c:c7:df:cc:41:da:0c:3d:
                    bc:b1:ae:2a:0b:32:89:f3:f3:f6:af:81:d8:db:df:
                    40:4c:87:23:c8:93:6c:f5:c3:69:0b:ce:2a:62:99:
                    7d:1e:1c:8c:39:3f:c9:56:fc:82:20:8d:cd:9a:3b:
                    de:69:4b:8f:34:13:eb:76:51:a1:2a:0d:3a:0f:c4:
                    13:d5:20:10:10:72:25:4c:01:b4:dd:a2:cb:52:89:
                    c1:64:9d:e1:db:ff:90:e2:29:3d:ef:27:c9:5b:de:
                    fc:f2:c6:c4:71:65:6c:c9:b9:14:c2:da:24:18:6c:
                    ee:ac:e8:59:39:b9:0f:1a:cb:50:1d:0a:e0:10:0d:
                    47:1c:4b:85:bc:4c:f9:71:17:e8:9b:c0:6f:ba:ff:
                    46:43:73:c4:ad:c5:e2:ec:7c:ca:31:9b:71:f5:19:
                    7b:57:33:84:8f:89:21:f9:7d:54:d3:5b:74:e1:8b:
                    f0:ff:4c:1e:a4:d2:a2:99:ee:46:69:1a:99:f6:79:
                    ae:21:95:c7:b0:90:f8:3f:f4:ce:ed:97:ae:07:8b:
                    70:29:b1:24:a7:15:66:b0:93:f2:f2:d1:33:b1:d3:
                    7c:cb:78:85:39:6b:96:2c:e1:be:5a:9d:13:bc:2a:
                    bb:69:00:a7:79:f5:64:24:0d:c4:f1:2c:66:ad:31:
                    01:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:90:9F:75:2E:9C:42:F2:96:73:08:61:D9:71:40:8E:30:CB:78:70
            X509v3 Authority Key Identifier:
                keyid:A0:A8:EF:33:7A:CF:86:96:4B:1E:46:A7:D6:BA:5B:0F:94:D8:74:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/323830343a386434303a3a2f33322d3438203d3e20323733333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:08:b1:b7:81:9b:d2:85:6f:1d:03:b8:65:35:07:2a:6e:bf:
         ac:c9:81:a2:b2:53:9e:58:16:a0:1e:4d:f1:89:5d:97:0f:11:
         4f:9e:f5:b1:52:00:bd:4d:11:73:9f:6e:aa:83:56:93:15:c6:
         b3:a7:e7:3c:f8:db:63:4c:8c:2c:c3:63:b0:64:0d:d4:cc:83:
         67:75:6b:d8:3b:85:cd:1c:33:47:80:06:c6:93:25:7b:34:c2:
         b8:67:98:25:3d:e1:6e:86:1c:37:ac:38:c2:01:57:1f:33:76:
         f0:7e:04:29:3f:f8:71:8d:0b:fc:06:09:e8:3c:73:d5:d6:f3:
         32:4c:82:66:c8:e0:bd:86:40:36:bb:fa:fa:d6:89:e5:2a:59:
         01:b1:8e:13:b5:df:cb:68:8f:5e:92:04:1a:68:3c:8e:e6:de:
         87:1e:53:64:8f:5a:6b:43:d0:9c:15:f5:03:06:f5:cf:b3:49:
         8c:2e:b8:5c:44:56:e9:5d:ad:8f:7d:02:3a:a2:dc:c2:10:f2:
         c6:ce:9c:35:82:d7:dd:2a:9b:93:85:92:fd:c9:59:3d:19:5a:
         c6:93:47:90:43:0c:5f:24:77:cd:d6:ce:8d:f6:6b:0e:b4:07:
         26:75:19:95:41:3d:f4:2d:f7:11:82:74:d9:8c:42:2a:69:01:
         d5:d5:29:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:20 2024 by rpki-client on console-ams.rpki-client.org