Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/323830343a313435633a3a2f33322d3438203d3e20323633333237.roa
File:                     323830343a313435633a3a2f33322d3438203d3e20323633333237.roa (raw, json)
Hash identifier:          XnSVMj0iMWeCjcI7WYOmaCnRj47z6MzbB0U7w4RAGC0=
Subject key identifier:   A8:BB:02:8C:28:92:CA:5D:72:A6:C9:6D:60:31:A9:5C:90:A3:C0:EE
Certificate issuer:       /CN=854487FA0B6DA6FA467F057B0B2636BF097A30C5
Certificate serial:       03033B420CC93F172154524D6E341AA61234755E
Authority key identifier: 85:44:87:FA:0B:6D:A6:FA:46:7F:05:7B:0B:26:36:BF:09:7A:30:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/854487FA0B6DA6FA467F057B0B2636BF097A30C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/323830343a313435633a3a2f33322d3438203d3e20323633333237.roa
Signing time:             Thu 04 Apr 2024 20:00:30 +0000
ROA not before:           Thu 04 Apr 2024 19:55:30 +0000
ROA not after:            Thu 03 Apr 2025 20:00:30 +0000
asID:                     263327
IP address blocks:        2804:145c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/854487FA0B6DA6FA467F057B0B2636BF097A30C5.crl
                          rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/854487FA0B6DA6FA467F057B0B2636BF097A30C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/854487FA0B6DA6FA467F057B0B2636BF097A30C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:03:3b:42:0c:c9:3f:17:21:54:52:4d:6e:34:1a:a6:12:34:75:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854487FA0B6DA6FA467F057B0B2636BF097A30C5
        Validity
            Not Before: Apr  4 19:55:30 2024 GMT
            Not After : Apr  3 20:00:30 2025 GMT
        Subject: CN=A8BB028C2892CA5D72A6C96D6031A95C90A3C0EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:63:26:db:08:56:9b:1a:2d:ea:2c:41:1e:55:
                    b4:85:cb:9c:c9:4e:2b:2e:5f:a0:ef:dd:0b:6f:13:
                    27:e8:24:e9:84:24:24:16:92:3b:50:0f:f4:27:f1:
                    6f:34:e7:de:e4:7c:46:ad:9b:d8:ea:5f:95:22:19:
                    4c:88:72:15:33:ab:96:75:2a:c9:a1:78:66:75:5b:
                    7c:06:42:37:be:c3:c1:80:c2:71:8d:4b:09:73:bd:
                    68:f8:a7:40:42:35:14:62:b4:9c:0d:5e:53:e7:52:
                    9e:6d:ab:fa:9b:96:8d:78:93:15:24:3d:82:3f:bb:
                    b4:df:96:0f:e2:55:2d:3c:cc:a7:37:06:85:a3:4c:
                    73:77:e9:7d:10:97:34:ae:98:31:f4:4d:8a:e4:f6:
                    07:65:3e:35:26:4b:09:40:d7:72:19:e7:02:ac:88:
                    27:ae:19:b2:18:0c:31:17:d9:23:cc:ad:9d:c7:3e:
                    e2:8f:37:08:75:f5:f8:2c:70:aa:69:fa:5f:4a:b8:
                    68:e8:92:ab:99:33:94:19:f5:94:61:29:f6:c3:31:
                    ee:5e:b1:a4:ed:0f:35:1d:c6:65:b3:f7:99:a2:5d:
                    07:4a:72:82:13:b7:58:78:c6:08:b4:3f:c2:7e:3e:
                    9e:59:f8:70:82:2d:b4:f4:34:83:e4:f9:61:3e:57:
                    6e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BB:02:8C:28:92:CA:5D:72:A6:C9:6D:60:31:A9:5C:90:A3:C0:EE
            X509v3 Authority Key Identifier:
                keyid:85:44:87:FA:0B:6D:A6:FA:46:7F:05:7B:0B:26:36:BF:09:7A:30:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/854487FA0B6DA6FA467F057B0B2636BF097A30C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/854487FA0B6DA6FA467F057B0B2636BF097A30C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/323830343a313435633a3a2f33322d3438203d3e20323633333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:145c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:14:ef:fc:fa:cd:40:1e:99:10:0b:00:b5:04:24:5f:6e:a6:
         1f:58:ef:5f:91:ef:23:0e:5e:61:68:47:ca:91:fd:14:eb:c1:
         78:fb:72:bf:ac:c5:d0:59:6b:8e:af:22:c9:9a:d8:93:76:d2:
         16:04:60:c2:d9:6e:3e:a4:40:2b:23:94:8f:29:53:13:55:90:
         18:63:b2:b0:34:3d:d4:b8:32:22:ad:d5:d4:aa:36:2d:c4:c3:
         df:cd:45:e8:d8:ba:18:b0:6b:9a:6c:f2:49:91:43:f9:b7:c5:
         fd:53:f9:33:0f:8b:8a:87:1a:1a:a4:17:9c:a8:27:75:93:f2:
         86:38:70:7c:8f:0e:c2:aa:80:87:d1:00:49:91:8f:65:5c:52:
         76:53:93:b7:f6:b2:80:4b:35:98:b6:60:c4:8c:e4:14:b4:ba:
         e1:e5:74:aa:6d:b1:b5:08:2f:da:21:13:cc:47:ef:ac:ef:bd:
         65:00:0e:5e:25:27:39:e7:4d:b8:3e:35:f6:75:6b:5a:a9:73:
         03:b3:82:2c:48:ba:c5:28:a1:e7:8c:3b:9f:0c:c6:d7:b7:d3:
         b3:87:5e:6e:6d:36:d4:9a:b4:4a:bd:dc:e5:89:30:16:ae:6b:
         75:36:b9:28:05:27:0c:e6:4c:51:22:71:f6:af:78:98:de:a0:
         e0:41:25:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:33 2024 by rpki-client on console-ams.rpki-client.org