Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/323830343a346363303a3a2f33322d3438203d3e20323637333839.roa
File:                     323830343a346363303a3a2f33322d3438203d3e20323637333839.roa (raw, json)
Hash identifier:          V6h3OXSQYW3WrrmjjfLcIwJjOdiWfUAbIypqe/VOgVw=
Subject key identifier:   C4:CB:FA:6A:8D:66:6B:7A:6C:56:E0:23:18:EE:C5:FF:42:E5:55:DF
Certificate issuer:       /CN=638087ED81E6ABF3705A6FE4584C399C4C56720F
Certificate serial:       6192AE494BC8FFFEF9ED4D3BD8DE6C49F8EC44CE
Authority key identifier: 63:80:87:ED:81:E6:AB:F3:70:5A:6F:E4:58:4C:39:9C:4C:56:72:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/323830343a346363303a3a2f33322d3438203d3e20323637333839.roa
Signing time:             Thu 04 Apr 2024 16:12:39 +0000
ROA not before:           Thu 04 Apr 2024 16:07:39 +0000
ROA not after:            Thu 03 Apr 2025 16:12:39 +0000
asID:                     267389
IP address blocks:        2804:4cc0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.crl
                          rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:92:ae:49:4b:c8:ff:fe:f9:ed:4d:3b:d8:de:6c:49:f8:ec:44:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=638087ED81E6ABF3705A6FE4584C399C4C56720F
        Validity
            Not Before: Apr  4 16:07:39 2024 GMT
            Not After : Apr  3 16:12:39 2025 GMT
        Subject: CN=C4CBFA6A8D666B7A6C56E02318EEC5FF42E555DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d3:dd:2d:67:88:26:ea:4c:0e:cf:fc:e1:df:
                    71:a9:83:2d:b8:4d:46:d6:a6:2a:40:f5:cc:27:a3:
                    2c:49:99:97:a6:a8:83:10:78:c8:a3:58:a8:b6:92:
                    ea:1b:6f:aa:f0:c2:b1:36:d2:af:ea:0d:71:26:6c:
                    e7:5d:aa:1d:a5:21:d1:52:50:10:e1:39:a2:f0:2a:
                    2e:4b:45:f6:5f:46:ca:fa:9f:39:57:52:62:43:64:
                    97:4e:6e:85:da:fc:0c:84:99:14:32:df:d9:fa:3b:
                    4a:d3:64:3d:de:79:58:f4:ba:02:f2:60:b4:86:92:
                    ab:a6:15:c4:07:7b:50:ce:b0:b4:af:95:9c:89:bd:
                    92:5a:19:96:59:27:cc:12:a4:03:7f:0e:c7:78:33:
                    5b:d9:02:9f:7e:43:4b:4d:b7:17:21:15:13:e7:a6:
                    b8:c3:1c:2c:02:37:30:09:83:8e:95:f1:1d:f4:aa:
                    ec:7d:e4:22:13:31:e5:0a:80:b2:15:96:81:fd:15:
                    05:da:33:1a:01:22:8e:37:b8:b6:88:1c:bd:1f:90:
                    3b:8d:65:89:b8:73:e0:6c:70:68:78:ee:c3:a8:71:
                    d9:0c:c4:ac:7e:9e:3b:8e:49:df:89:38:17:bc:ca:
                    2d:85:32:7c:96:3f:5b:f8:dd:c0:c6:bb:43:f6:e7:
                    e9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CB:FA:6A:8D:66:6B:7A:6C:56:E0:23:18:EE:C5:FF:42:E5:55:DF
            X509v3 Authority Key Identifier:
                keyid:63:80:87:ED:81:E6:AB:F3:70:5A:6F:E4:58:4C:39:9C:4C:56:72:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/323830343a346363303a3a2f33322d3438203d3e20323637333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:f4:fe:f8:08:0c:4b:0f:93:29:5b:15:1f:90:b7:ad:2e:87:
         90:0e:6e:16:07:0f:d8:0f:96:30:b0:6c:f8:be:84:3f:09:59:
         f6:44:15:b2:c4:5b:80:aa:32:7e:58:b0:a3:31:2c:8a:52:c0:
         72:9b:87:33:93:7a:ad:bf:8f:c0:9f:9b:6f:67:16:6c:d4:6b:
         8b:72:81:c6:87:76:4b:98:62:5f:b7:45:88:1a:81:7d:29:bf:
         ef:5f:4a:7d:5f:ad:ca:af:a0:d9:ef:72:f9:eb:f0:bb:58:0b:
         48:4e:a7:7b:81:be:de:12:f2:c9:2e:8e:3d:3e:e6:a5:fc:4f:
         3b:ab:fd:a7:8b:5e:d0:06:19:a0:45:6f:de:8c:8b:a0:94:49:
         e6:9e:7f:b3:36:18:ea:21:6b:fb:7b:26:66:cd:aa:2f:06:28:
         a1:07:96:2c:ef:00:a5:ba:ba:8b:ae:b5:dd:a4:11:5d:e8:16:
         9e:cc:75:cb:cb:90:a7:a7:bc:aa:b4:c0:64:f4:2a:0c:c1:bb:
         53:21:e0:9a:5c:fe:f0:32:21:7a:22:d6:62:9b:7b:be:65:df:
         e4:44:76:ae:04:cb:cf:99:7e:ed:6f:8f:e2:18:20:90:c6:6a:
         5c:b4:22:12:ba:ae:b4:2f:6a:83:cf:c0:01:1e:b6:56:5a:e1:
         ab:66:e1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:11 2024 by rpki-client on console-ams.rpki-client.org