Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/1/323830343a3465303a3a2f33322d3438203d3e20323632343735.roa
File:                     323830343a3465303a3a2f33322d3438203d3e20323632343735.roa (raw, json)
Hash identifier:          7s7tQBuY1QQJ7LWyVPnHBUfUA78NyViazLm6HROVr1w=
Subject key identifier:   A7:62:8D:35:A2:FA:F0:2C:17:F1:95:44:FF:C7:65:A9:67:69:B8:7D
Certificate issuer:       /CN=251F42E9CF35EC723B5F3367208AE269F803C9D8
Certificate serial:       4F41B1E2D2AB687D023C5B0F8A2B84A69954656C
Authority key identifier: 25:1F:42:E9:CF:35:EC:72:3B:5F:33:67:20:8A:E2:69:F8:03:C9:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/251F42E9CF35EC723B5F3367208AE269F803C9D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/1/323830343a3465303a3a2f33322d3438203d3e20323632343735.roa
Signing time:             Wed 03 Apr 2024 19:32:11 +0000
ROA not before:           Wed 03 Apr 2024 19:27:11 +0000
ROA not after:            Wed 02 Apr 2025 19:32:11 +0000
asID:                     262475
IP address blocks:        2804:4e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/1/251F42E9CF35EC723B5F3367208AE269F803C9D8.crl
                          rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/1/251F42E9CF35EC723B5F3367208AE269F803C9D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/251F42E9CF35EC723B5F3367208AE269F803C9D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:41:b1:e2:d2:ab:68:7d:02:3c:5b:0f:8a:2b:84:a6:99:54:65:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=251F42E9CF35EC723B5F3367208AE269F803C9D8
        Validity
            Not Before: Apr  3 19:27:11 2024 GMT
            Not After : Apr  2 19:32:11 2025 GMT
        Subject: CN=A7628D35A2FAF02C17F19544FFC765A96769B87D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:aa:65:97:d5:5a:e7:86:a3:74:33:c6:b0:63:
                    36:49:3a:0f:f9:be:fc:29:d2:d4:9d:a8:1a:a3:7c:
                    d6:94:f1:13:68:c4:76:e7:78:2d:85:9d:3b:27:40:
                    88:44:db:c1:86:46:f1:6a:84:a5:96:d0:14:c3:e2:
                    0f:fc:f7:34:2f:a7:d0:6b:bc:5c:53:a4:32:ba:22:
                    2d:1a:e7:80:62:3e:9d:5b:95:69:30:ee:38:d2:24:
                    20:eb:13:9b:a9:ac:c0:65:df:46:89:84:0d:b8:95:
                    93:88:ac:97:59:d4:cf:af:4a:67:45:74:3a:e4:02:
                    cd:7b:8f:1e:52:95:a4:8d:3d:56:e7:78:c2:b0:ac:
                    01:2e:4d:02:99:8f:7a:d1:42:97:09:4c:9a:38:48:
                    26:bd:f5:16:42:95:98:c6:ef:71:d4:fa:72:5b:48:
                    17:bf:e8:28:ed:90:dd:44:e0:47:c0:58:70:48:8c:
                    44:cd:e9:1a:10:e9:dc:01:4e:bc:de:87:78:36:c4:
                    9d:65:a0:01:6d:eb:09:c0:87:85:9b:3f:f6:4d:6b:
                    4f:cc:60:63:ad:47:8f:db:77:e0:16:21:5a:e7:fd:
                    2f:d4:ac:6a:27:e5:53:7e:c8:7c:69:c4:80:d1:72:
                    d5:d9:a4:50:d4:a3:39:c3:39:2b:66:de:4d:df:cb:
                    bb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:62:8D:35:A2:FA:F0:2C:17:F1:95:44:FF:C7:65:A9:67:69:B8:7D
            X509v3 Authority Key Identifier:
                keyid:25:1F:42:E9:CF:35:EC:72:3B:5F:33:67:20:8A:E2:69:F8:03:C9:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/1/251F42E9CF35EC723B5F3367208AE269F803C9D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/251F42E9CF35EC723B5F3367208AE269F803C9D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/1/323830343a3465303a3a2f33322d3438203d3e20323632343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:f4:35:6a:7f:ce:64:28:f7:ac:dc:91:88:04:0e:6c:8b:5d:
         22:77:05:fa:43:94:f1:6f:99:51:00:d3:37:af:7b:82:df:3a:
         c1:29:be:94:83:be:a7:04:b0:be:3f:70:92:cf:67:24:75:0e:
         1a:1a:8e:7e:5d:51:d4:7c:18:66:05:78:8e:13:7f:b3:63:03:
         8c:4f:90:d7:08:a0:20:6d:c6:88:1a:91:48:83:b4:92:c0:20:
         45:e9:0e:7e:f3:42:6c:45:ff:69:7c:52:8b:a2:f3:9a:42:6e:
         a2:f2:56:6f:e8:f5:ab:d5:d2:43:37:5f:ed:a7:cc:03:d4:66:
         3a:ac:c0:02:c7:44:f7:a8:2b:85:97:d8:bf:4b:72:90:2f:45:
         2f:28:c1:87:58:7b:bc:43:06:68:6f:49:12:c2:e1:45:65:e7:
         b5:ee:8c:a3:90:ec:fd:21:9e:63:9a:df:1b:f3:03:02:fb:a2:
         92:9d:82:02:d1:82:57:07:eb:2a:e6:d6:3f:ad:35:fa:e6:b9:
         f0:cd:7d:12:36:ef:2c:44:cd:de:7f:59:99:87:fd:98:c0:23:
         81:4f:04:40:a4:cd:95:91:85:7e:5e:6b:88:22:00:0e:30:92:
         90:15:6f:dd:3b:88:b6:21:09:a9:9e:85:0e:2a:25:16:93:c5:
         9b:ed:ee:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:06 2024 by rpki-client on console-fra.rpki-client.org