Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/323830343a373031343a3a2f33322d3333203d3e20323730373034.roa
File:                     323830343a373031343a3a2f33322d3333203d3e20323730373034.roa (raw, json)
Hash identifier:          tSTWoRQ5dSXgBZsgqqaXNgyq6qepM994e12zSVyFFbE=
Subject key identifier:   AF:D2:AD:B6:C3:F1:98:81:27:42:1F:75:E7:DF:D9:D8:FA:46:9F:83
Certificate issuer:       /CN=4E954E92398DE10004D8805C61AFDF6831FA4AA5
Certificate serial:       14BAAC5CD8B1B1DAC4483F0E88C20BD4F0A6AA75
Authority key identifier: 4E:95:4E:92:39:8D:E1:00:04:D8:80:5C:61:AF:DF:68:31:FA:4A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E954E92398DE10004D8805C61AFDF6831FA4AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/323830343a373031343a3a2f33322d3333203d3e20323730373034.roa
Signing time:             Mon 18 Nov 2024 13:26:42 +0000
ROA not before:           Mon 18 Nov 2024 13:21:42 +0000
ROA not after:            Mon 17 Nov 2025 13:26:42 +0000
asID:                     270704
IP address blocks:        2804:7014::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.crl
                          rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E954E92398DE10004D8805C61AFDF6831FA4AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ba:ac:5c:d8:b1:b1:da:c4:48:3f:0e:88:c2:0b:d4:f0:a6:aa:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E954E92398DE10004D8805C61AFDF6831FA4AA5
        Validity
            Not Before: Nov 18 13:21:42 2024 GMT
            Not After : Nov 17 13:26:42 2025 GMT
        Subject: CN=AFD2ADB6C3F1988127421F75E7DFD9D8FA469F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c1:0c:4c:8b:25:13:62:24:48:20:c5:cb:58:
                    59:eb:0b:33:0f:85:de:a5:e4:23:fc:08:af:57:bb:
                    1d:46:67:4b:02:56:41:75:76:19:c7:ae:9f:13:0d:
                    c4:5c:b5:90:3b:3c:c9:e9:cb:1f:60:b2:c6:e7:c0:
                    52:80:e2:3b:0f:68:10:3f:3e:04:c0:80:24:47:61:
                    bd:e7:e8:e0:cb:3e:28:5b:29:65:5d:89:f7:35:45:
                    03:4a:60:e0:6c:25:fa:61:7f:b0:8a:3b:9b:9e:9a:
                    9f:a0:14:3a:2a:12:ff:e1:3f:8a:fa:f0:d2:b3:20:
                    a3:83:f1:a2:e3:2f:fc:97:98:7d:cc:bc:f3:28:b2:
                    96:96:b1:69:26:a5:0e:42:a0:3b:b2:8d:ef:d0:d7:
                    eb:51:45:28:99:a8:72:82:50:37:ad:a3:c6:9b:e2:
                    79:85:14:56:04:e5:14:cc:e9:ec:de:aa:2e:6b:37:
                    56:a1:f1:bc:aa:61:0b:56:41:42:1a:07:20:46:76:
                    95:3b:4d:5e:86:65:1f:21:7a:b9:4a:f6:c5:2a:1e:
                    bb:e9:f6:eb:80:f9:6c:2b:46:da:b5:99:30:60:b2:
                    67:78:c1:87:43:7c:c2:49:9a:80:23:76:92:9f:6b:
                    a4:bb:bd:38:e1:7b:6d:16:c3:69:a6:ef:03:a2:62:
                    c6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D2:AD:B6:C3:F1:98:81:27:42:1F:75:E7:DF:D9:D8:FA:46:9F:83
            X509v3 Authority Key Identifier:
                keyid:4E:95:4E:92:39:8D:E1:00:04:D8:80:5C:61:AF:DF:68:31:FA:4A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E954E92398DE10004D8805C61AFDF6831FA4AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/323830343a373031343a3a2f33322d3333203d3e20323730373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7014::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:38:ba:0d:6c:c1:62:4b:de:a4:d7:ea:14:12:fd:5d:a6:70:
         dd:1c:f8:36:a2:01:12:cf:0a:00:ec:34:ab:aa:91:bd:04:4c:
         f6:b9:21:20:30:b5:bb:b5:45:54:42:00:8e:02:ac:78:98:f4:
         9f:75:bc:98:40:61:47:b7:38:e4:f5:b8:0f:1b:9c:c5:d5:df:
         4d:94:07:f1:e2:d9:cb:b7:62:57:6b:f8:f9:63:b6:0c:a3:4a:
         c4:dd:d0:be:f3:c0:91:bc:5e:cc:31:b1:aa:76:35:0e:b0:ee:
         6a:74:90:bd:3f:ae:4a:8b:24:77:d7:ff:aa:d5:39:dc:58:8b:
         c2:48:c1:73:b5:a9:31:cf:82:7c:4b:ae:a1:74:4a:35:e6:02:
         29:20:1d:1d:06:4e:51:5e:03:19:b2:a9:b7:87:43:f4:18:f5:
         34:fb:85:2a:78:ba:23:fa:53:e4:5a:bb:3e:26:5a:0b:08:33:
         fc:52:19:71:d5:06:c3:02:14:ac:78:10:c3:02:ec:b7:2f:71:
         a3:d8:98:94:3a:d2:fb:06:9b:82:88:55:da:64:2a:03:00:07:
         39:60:13:c5:46:a9:d2:18:ce:a5:e3:a6:8d:9b:6a:c3:a2:4a:
         59:22:9f:5c:dc:28:90:7d:0f:9b:86:3a:68:4a:8c:ee:3d:7b:
         18:ca:c6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:14 2024 by rpki-client on console-ams.rpki-client.org