Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/1/323830343a353039343a3a2f33322d3438203d3e20323638333937.roa
File:                     323830343a353039343a3a2f33322d3438203d3e20323638333937.roa (raw, json)
Hash identifier:          VpP7KlQ/c5xwu+B0j2wN3ak8aOcQNp79M9tenkgYdyo=
Subject key identifier:   30:46:C5:B7:96:9E:31:C0:4A:78:D2:17:17:2D:19:A7:3D:0B:B9:0A
Certificate issuer:       /CN=012775388D13F69C6556A7B8F60188E65FB6EDEB
Certificate serial:       337A6B78C3EAD02393F81FEE5C0FBFA16547A1A3
Authority key identifier: 01:27:75:38:8D:13:F6:9C:65:56:A7:B8:F6:01:88:E6:5F:B6:ED:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/012775388D13F69C6556A7B8F60188E65FB6EDEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/1/323830343a353039343a3a2f33322d3438203d3e20323638333937.roa
Signing time:             Thu 04 Apr 2024 04:58:30 +0000
ROA not before:           Thu 04 Apr 2024 04:53:30 +0000
ROA not after:            Thu 03 Apr 2025 04:58:30 +0000
asID:                     268397
IP address blocks:        2804:5094::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/1/012775388D13F69C6556A7B8F60188E65FB6EDEB.crl
                          rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/1/012775388D13F69C6556A7B8F60188E65FB6EDEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/012775388D13F69C6556A7B8F60188E65FB6EDEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7a:6b:78:c3:ea:d0:23:93:f8:1f:ee:5c:0f:bf:a1:65:47:a1:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012775388D13F69C6556A7B8F60188E65FB6EDEB
        Validity
            Not Before: Apr  4 04:53:30 2024 GMT
            Not After : Apr  3 04:58:30 2025 GMT
        Subject: CN=3046C5B7969E31C04A78D217172D19A73D0BB90A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:af:84:2d:a7:93:8f:74:88:c6:c5:f6:19:42:
                    c4:59:fb:9f:9e:c9:87:62:5f:0d:9a:39:6a:9d:ba:
                    06:05:f5:d8:6d:fe:c3:d7:23:3b:ff:0b:08:4b:db:
                    00:2c:c3:8e:91:e0:12:b0:07:b3:3b:08:0c:f2:97:
                    cd:28:56:f2:8b:b8:e3:65:ed:b1:ce:85:9a:a0:81:
                    1b:9d:46:0f:84:b5:65:c1:78:3a:c4:65:18:04:7a:
                    d7:3c:bb:91:4f:e5:cd:96:7d:53:2a:b5:0a:bb:5a:
                    8a:51:ca:83:31:1b:c3:99:14:ff:24:46:c4:bd:26:
                    c4:4e:bd:6d:42:0f:38:98:fe:43:32:81:e8:40:b5:
                    fb:ff:3f:ae:5a:2b:ea:2f:f8:43:75:f0:a9:6a:cb:
                    b2:7b:43:df:4f:7f:f8:29:44:93:6a:4f:1b:ac:71:
                    7d:1e:8f:0e:ce:48:15:48:2c:8a:dc:31:2c:a8:e7:
                    af:52:5a:31:7a:13:b4:6d:e3:2f:94:7e:96:ad:2a:
                    74:2e:51:a2:13:9f:69:25:34:90:8e:01:f2:99:c3:
                    db:39:09:27:06:8b:36:90:24:04:7e:4d:af:d1:bb:
                    00:70:09:6f:74:ec:46:0f:27:02:fe:e5:60:8f:3c:
                    b9:b6:ae:67:79:16:92:c7:b9:50:aa:4d:3d:2b:b1:
                    28:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:46:C5:B7:96:9E:31:C0:4A:78:D2:17:17:2D:19:A7:3D:0B:B9:0A
            X509v3 Authority Key Identifier:
                keyid:01:27:75:38:8D:13:F6:9C:65:56:A7:B8:F6:01:88:E6:5F:B6:ED:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/1/012775388D13F69C6556A7B8F60188E65FB6EDEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/012775388D13F69C6556A7B8F60188E65FB6EDEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/1/323830343a353039343a3a2f33322d3438203d3e20323638333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5094::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:b7:bb:5d:86:27:85:e3:97:c2:74:10:0a:8f:79:24:d1:53:
         d5:e8:7c:9c:12:94:ca:4f:be:28:59:c8:62:db:3d:6d:84:59:
         ab:17:3e:a6:29:73:34:2e:a4:de:a4:42:35:f3:38:32:ba:23:
         02:30:b8:fc:cf:de:ed:8d:53:5b:40:88:c5:8e:ef:59:b9:25:
         56:ee:20:3e:83:60:b7:56:d0:bd:af:aa:7d:f2:79:85:b8:b6:
         73:93:9d:e5:5e:bc:ed:aa:e3:bf:80:04:81:5f:85:f4:17:78:
         a5:8d:fb:a1:45:67:7a:52:93:5a:34:a9:50:81:5c:14:bb:0a:
         95:c2:97:7f:10:4a:28:55:9a:94:4d:13:3d:4e:ad:60:72:74:
         b3:2a:2d:73:3f:0d:05:81:a7:3c:92:0f:d3:a9:e6:cb:75:37:
         53:89:30:24:ac:5f:17:cd:0a:10:b2:9a:36:e2:31:29:26:3e:
         2e:a1:65:e4:95:1a:e6:2e:b4:51:9c:9d:2f:88:db:12:dc:b8:
         bd:85:11:ae:80:77:41:52:4b:c6:53:98:a4:bf:ae:53:0c:30:
         c3:ae:77:d8:f5:19:a0:77:c6:e1:1b:37:8f:9c:a4:5d:b6:a5:
         42:e2:0a:f0:ea:0f:6c:2c:0f:6a:d4:27:ed:33:3c:a6:b7:0a:
         fc:a2:70:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:32 2024 by rpki-client on console-ams.rpki-client.org