Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/323830343a346537303a3a2f33332d3333203d3e20323638323631.roa
File:                     323830343a346537303a3a2f33332d3333203d3e20323638323631.roa (raw, json)
Hash identifier:          NyCtwRkhWbB44YlKg3+K4lR4MpUfO1/pyqnnHBr5kg4=
Subject key identifier:   92:31:58:EE:68:50:62:F1:69:F4:17:2F:2C:F0:13:1C:E0:FF:DD:5B
Certificate issuer:       /CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
Certificate serial:       486201AC1C9173759BFB1F35925D7D1AAF00C5A1
Authority key identifier: 48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/323830343a346537303a3a2f33332d3333203d3e20323638323631.roa
Signing time:             Thu 04 Apr 2024 15:13:31 +0000
ROA not before:           Thu 04 Apr 2024 15:08:31 +0000
ROA not after:            Thu 03 Apr 2025 15:13:31 +0000
asID:                     268261
IP address blocks:        2804:4e70::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl
                          rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:62:01:ac:1c:91:73:75:9b:fb:1f:35:92:5d:7d:1a:af:00:c5:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
        Validity
            Not Before: Apr  4 15:08:31 2024 GMT
            Not After : Apr  3 15:13:31 2025 GMT
        Subject: CN=923158EE685062F169F4172F2CF0131CE0FFDD5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bc:b7:46:f9:52:a8:15:65:d7:de:a1:a5:96:
                    81:04:e2:84:73:e8:a5:ed:6b:28:d8:01:b8:56:3e:
                    bf:2c:6f:e7:cd:41:4b:a1:35:e6:25:a1:f0:49:9f:
                    fd:ee:56:56:2c:e1:ad:90:8d:4b:42:0c:41:21:9e:
                    19:0a:18:54:e8:fb:87:26:93:8e:c7:49:60:19:dc:
                    6b:27:23:bc:55:38:ca:c0:5d:7a:b8:29:4d:5f:9e:
                    e3:ed:08:2f:18:4d:60:83:ae:0c:6e:d3:b8:9f:68:
                    1e:9a:a5:a1:f2:21:8d:88:66:13:70:11:a9:dd:6a:
                    a6:2b:64:a2:77:d5:76:5b:2b:59:7b:43:cc:9d:58:
                    94:38:91:91:39:06:71:bd:3f:24:44:d0:9e:21:29:
                    a8:8d:b9:01:8b:ee:16:68:34:da:19:58:a2:3f:34:
                    a0:bc:85:d0:49:cb:7e:6c:61:ad:ec:e4:d8:4c:29:
                    29:28:bc:6c:cc:dc:8f:26:ae:40:47:dc:59:7e:87:
                    71:53:89:5c:04:9a:91:dd:df:42:04:5f:f5:d2:2a:
                    e3:eb:c8:da:a8:5f:86:63:f1:50:b3:cd:f1:55:a7:
                    d6:c1:9b:72:c2:25:67:28:d0:ab:17:01:09:cd:84:
                    46:2d:03:0b:d5:5d:ef:0f:4c:b5:cf:79:3a:1c:47:
                    15:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:31:58:EE:68:50:62:F1:69:F4:17:2F:2C:F0:13:1C:E0:FF:DD:5B
            X509v3 Authority Key Identifier:
                keyid:48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/323830343a346537303a3a2f33332d3333203d3e20323638323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e70::/33

    Signature Algorithm: sha256WithRSAEncryption
         0c:3f:dd:56:8a:06:1c:39:90:4a:4f:d9:53:86:70:8d:aa:ef:
         5e:e1:e0:6c:84:fa:dd:0a:33:db:44:70:e0:a5:ac:8c:b1:08:
         1b:ea:5b:d2:fc:c0:d7:56:f2:a3:24:a0:2b:31:fc:c4:3b:be:
         11:e2:22:d9:90:c3:24:58:1e:42:d9:f5:41:af:f3:fa:c4:13:
         0d:b9:40:d5:cf:ab:0e:88:75:f6:5a:06:88:e0:83:e1:a0:38:
         6a:e4:20:14:bc:f0:7a:91:e2:0f:dc:e5:d0:a4:a8:2d:9d:80:
         95:d0:61:a9:75:66:da:8e:88:3f:1d:00:8f:5b:e6:1f:a6:6e:
         c5:90:ce:c7:f7:e8:b1:8d:df:d3:59:9d:41:3d:bf:7f:fd:38:
         83:da:0b:2d:8a:b8:51:11:a4:a6:7c:7d:40:01:b8:c3:d7:28:
         89:31:ef:f3:4a:fe:8e:52:57:51:60:cd:b7:9f:b9:b1:e9:d4:
         72:2d:79:62:d8:83:95:b1:b7:d0:1c:0d:d5:e6:89:51:13:f7:
         c7:9f:64:b6:fa:1d:5b:8d:2e:fd:30:cd:75:2c:64:5d:d2:e4:
         29:51:d5:be:32:8e:9b:c1:83:ad:98:cf:6d:49:21:c6:d6:f9:
         2d:a2:7c:5c:93:c8:78:2a:83:29:86:ca:54:90:49:c8:0a:ed:
         42:9d:38:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:20 2024 by rpki-client on console-ams.rpki-client.org