Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a3a2f33322d3332203d3e20323633323833.roa
File:                     323830343a313635383a3a2f33322d3332203d3e20323633323833.roa (raw, json)
Hash identifier:          it0pstPwdyrICOKty8vJ21SQhsFzxhaxy4c/hhBihzA=
Subject key identifier:   77:44:2C:AE:C9:4B:1F:CF:D7:79:33:BA:5C:5E:0E:51:55:72:12:4B
Certificate issuer:       /CN=41B0D3EA994B3A684602641351C292C7808B50FC
Certificate serial:       4BE5E945B082A81A5FDAECD68BDACD75E63E20AC
Authority key identifier: 41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a3a2f33322d3332203d3e20323633323833.roa
Signing time:             Thu 24 Oct 2024 13:09:01 +0000
ROA not before:           Thu 24 Oct 2024 13:04:01 +0000
ROA not after:            Thu 23 Oct 2025 13:09:01 +0000
asID:                     263283
IP address blocks:        2804:1658::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.crl
                          rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 20:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e5:e9:45:b0:82:a8:1a:5f:da:ec:d6:8b:da:cd:75:e6:3e:20:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B0D3EA994B3A684602641351C292C7808B50FC
        Validity
            Not Before: Oct 24 13:04:01 2024 GMT
            Not After : Oct 23 13:09:01 2025 GMT
        Subject: CN=77442CAEC94B1FCFD77933BA5C5E0E515572124B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:64:48:83:79:5f:5d:24:e8:dc:57:37:21:81:
                    90:41:9d:40:f5:05:bf:7e:d6:c1:9a:37:95:35:bd:
                    5a:db:f6:80:3d:d0:03:7b:00:ee:4c:b2:06:88:be:
                    52:07:3e:63:7a:c0:c3:2c:8c:93:95:77:5c:49:9f:
                    3c:fa:dc:f6:2f:bb:65:59:05:7e:37:df:af:d6:a5:
                    87:38:5e:f2:c0:b4:55:51:a4:70:a9:0b:e9:f7:32:
                    00:ee:ef:63:f2:5e:ea:f1:23:8e:a0:2c:13:ef:a8:
                    71:2e:8a:96:1d:29:10:d8:99:68:08:65:69:9e:d2:
                    bc:dc:52:c4:21:51:55:33:d8:9c:9a:29:24:84:9e:
                    58:36:11:f0:76:a6:c4:02:f8:6c:a7:05:db:b5:d5:
                    f3:1e:96:08:9e:95:82:d6:c1:86:f4:7e:64:6c:59:
                    ef:0a:12:28:9e:2b:e8:c1:4e:ad:49:4d:3b:d0:da:
                    6e:f8:8b:47:cd:8a:5b:4c:a8:07:f9:1b:e9:df:19:
                    8f:df:bc:ab:ba:ac:d2:66:59:bc:bd:a0:a2:b1:22:
                    2c:e4:0d:4f:5a:09:61:b8:94:d7:2d:29:90:32:49:
                    78:2a:41:75:cf:51:d5:da:b4:58:26:80:87:46:9d:
                    19:36:86:32:0e:b0:85:02:cd:63:92:20:96:e8:81:
                    a7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:44:2C:AE:C9:4B:1F:CF:D7:79:33:BA:5C:5E:0E:51:55:72:12:4B
            X509v3 Authority Key Identifier:
                keyid:41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a3a2f33322d3332203d3e20323633323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1658::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:d7:03:e6:8d:ac:2b:5c:dd:4d:1e:0b:7f:a7:7c:3b:5a:a2:
         8e:ad:01:93:09:89:c6:2d:32:ba:6f:ec:0b:e5:d4:8f:67:4a:
         dd:1b:9b:15:96:a0:68:e5:bd:b4:28:7d:3c:01:d1:3f:25:20:
         b1:08:76:19:2b:3d:63:b3:ee:15:67:33:dc:b3:d9:81:17:93:
         62:9d:00:11:d2:09:39:30:3e:e5:3c:bb:4a:10:d8:00:76:e9:
         f4:f9:ec:48:5f:bc:9a:b4:ae:5f:4f:9d:c0:8e:ca:01:6a:13:
         f8:94:7f:c1:6f:0d:88:a3:ab:b5:b8:58:00:73:b7:f8:e9:37:
         2b:18:98:a4:bb:32:19:5f:b3:5f:ab:56:fb:ce:33:40:5c:db:
         1e:40:5a:19:c1:40:99:46:9a:64:7f:a5:e0:bc:68:ec:7b:66:
         7b:59:c6:8b:5d:7b:39:e0:9d:5b:4f:b6:90:eb:ec:ce:9d:79:
         5a:6f:50:3c:c0:03:f8:26:96:9a:56:7a:25:d1:7c:eb:71:1f:
         7c:ea:1b:b0:79:c7:12:9e:91:bf:0f:74:b9:cf:3c:f4:94:ad:
         eb:90:9c:f4:09:26:3c:e2:55:89:fd:c7:4c:1a:b5:72:12:0d:
         11:a1:88:42:bb:26:4b:c9:dc:2f:22:17:e4:71:82:90:9e:da:
         a3:14:90:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:16 2025 by rpki-client