Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/323830343a343236633a3a2f33322d3438203d3e20323637343939.roa
File:                     323830343a343236633a3a2f33322d3438203d3e20323637343939.roa (raw, json)
Hash identifier:          23FRy86N/kyEC8SyUn72Ttmr+cXH0zMMdz8pBAM28vk=
Subject key identifier:   63:DF:92:24:A4:AB:D5:D3:FF:29:CE:61:6D:05:D4:8D:35:F2:5D:67
Certificate issuer:       /CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD
Certificate serial:       79BC1A365DD0CEA0E8881590A98A9C1840577C37
Authority key identifier: 40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/323830343a343236633a3a2f33322d3438203d3e20323637343939.roa
Signing time:             Thu 04 Apr 2024 10:26:19 +0000
ROA not before:           Thu 04 Apr 2024 10:21:19 +0000
ROA not after:            Thu 03 Apr 2025 10:26:19 +0000
asID:                     267499
IP address blocks:        2804:426c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl
                          rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:bc:1a:36:5d:d0:ce:a0:e8:88:15:90:a9:8a:9c:18:40:57:7c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD
        Validity
            Not Before: Apr  4 10:21:19 2024 GMT
            Not After : Apr  3 10:26:19 2025 GMT
        Subject: CN=63DF9224A4ABD5D3FF29CE616D05D48D35F25D67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c7:c6:0c:9c:35:45:1f:1c:36:9c:9f:b1:5d:
                    e7:4d:1d:dc:4e:5a:37:ee:f9:a2:b5:a7:3a:2c:4a:
                    57:6a:ad:89:38:4d:4f:7c:44:88:b9:40:5d:34:d5:
                    bd:b3:e0:86:1a:39:e3:b9:45:8e:a0:c7:15:3b:8e:
                    ed:c9:6b:c0:d1:5d:f4:73:d2:b5:cd:8c:59:63:9d:
                    46:b4:de:1a:85:ca:ca:db:2f:8f:55:7e:7e:78:c9:
                    ea:63:07:6e:65:7b:02:20:da:1a:a2:3c:c3:10:1a:
                    a3:d8:35:ae:47:22:42:32:be:04:c5:35:1a:7b:17:
                    ee:5a:15:78:ff:53:f8:34:33:6e:38:33:d7:21:ce:
                    6d:55:41:c2:27:1e:89:9b:03:8a:ff:c2:cc:c2:8a:
                    d4:a7:68:98:7d:68:1b:37:f5:dd:97:98:fb:3d:63:
                    e9:28:72:2c:ac:ed:15:f4:20:94:e6:e1:bc:e2:86:
                    e8:5b:85:36:24:5c:e5:ef:4f:9a:0b:b2:c5:60:b1:
                    42:5f:69:18:20:54:e4:5d:39:47:09:f4:3d:7d:d4:
                    92:47:c3:59:72:ed:57:ce:f0:4d:19:27:dd:60:a4:
                    bb:c8:bf:14:25:23:55:01:7e:fb:a6:38:6b:15:fb:
                    68:48:a1:cf:c4:fb:07:cb:de:75:fe:a0:86:d2:d6:
                    ee:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DF:92:24:A4:AB:D5:D3:FF:29:CE:61:6D:05:D4:8D:35:F2:5D:67
            X509v3 Authority Key Identifier:
                keyid:40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/323830343a343236633a3a2f33322d3438203d3e20323637343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:426c::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:58:ab:c8:6b:1f:38:89:8c:88:86:af:c5:bf:22:03:17:f8:
         02:77:a0:17:20:3e:83:7e:f0:6a:0b:33:f8:2b:55:2f:2d:50:
         2e:83:5a:b6:fc:2b:ca:d0:9e:27:cf:c4:99:04:60:f5:d7:04:
         8e:c8:0b:7b:2e:6b:2e:98:b3:79:d0:6e:cb:0d:a4:42:ec:4c:
         bb:28:d3:56:c1:f5:79:5f:54:27:d2:d3:cc:4d:6f:1f:46:c5:
         c9:b6:78:6b:bb:84:7f:53:a2:a8:63:2c:a2:3b:eb:fb:42:e4:
         7e:a4:26:a5:d4:0b:a3:21:05:4e:ab:18:39:7c:34:5f:d7:12:
         d5:54:81:e7:64:17:df:ab:9d:f1:31:4c:0e:6a:93:a1:90:e7:
         7d:0b:f9:83:2b:e0:32:af:1a:a7:78:a2:ae:42:60:a1:d3:31:
         f9:07:61:07:bd:78:1e:a8:c9:28:66:d7:f0:2d:db:7c:7f:7b:
         f8:2c:e8:ce:5c:4f:b0:b1:48:26:10:05:8f:65:93:a9:d9:10:
         f2:c0:9a:d7:72:66:54:1d:6d:e5:28:09:7d:5f:43:64:ce:f3:
         d0:1e:57:2b:72:cc:2a:89:a3:81:19:03:ac:9f:73:53:b0:08:
         10:e5:70:6c:89:97:d7:bb:40:bb:cf:20:8c:72:3e:c5:4e:c2:
         6e:89:98:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:14 2024 by rpki-client on console-fra.rpki-client.org