Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a313030303a3a2f34302d3434203d3e20323731333830.roa
File:                     323830343a376139343a313030303a3a2f34302d3434203d3e20323731333830.roa (raw, json)
Hash identifier:          IiGcRiAfWTojHgNN/dbzPXgSb7l2aUTR46jmbCLpIrM=
Subject key identifier:   9C:5D:D0:F1:EE:53:63:FE:FF:32:1E:AF:AE:9A:58:31:43:60:25:F8
Certificate issuer:       /CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
Certificate serial:       0F35C90948E1DCFA2D11D39629D3584B80B326F4
Authority key identifier: 4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a313030303a3a2f34302d3434203d3e20323731333830.roa
Signing time:             Thu 04 Apr 2024 13:38:35 +0000
ROA not before:           Thu 04 Apr 2024 13:33:35 +0000
ROA not after:            Thu 03 Apr 2025 13:38:35 +0000
asID:                     271380
IP address blocks:        2804:7a94:1000::/40 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl
                          rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:35:c9:09:48:e1:dc:fa:2d:11:d3:96:29:d3:58:4b:80:b3:26:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
        Validity
            Not Before: Apr  4 13:33:35 2024 GMT
            Not After : Apr  3 13:38:35 2025 GMT
        Subject: CN=9C5DD0F1EE5363FEFF321EAFAE9A5831436025F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e8:69:e9:18:1d:58:aa:b1:9d:75:bd:aa:45:
                    20:76:c0:59:c0:10:4a:d9:c1:f0:0e:a1:5d:90:0b:
                    ea:63:79:68:48:f1:60:22:50:6b:fb:c4:5c:e5:16:
                    99:d2:c4:40:b5:be:f4:fb:2c:a2:ec:17:04:84:82:
                    87:83:ef:07:1e:74:a5:8f:9c:bc:7a:eb:68:76:73:
                    73:ba:30:31:f0:e0:3a:a9:cf:52:e5:f4:cc:9f:15:
                    06:77:2c:8e:af:0e:78:0b:d6:62:ee:7f:f4:a6:86:
                    0c:54:d5:11:ec:f9:23:43:27:9b:0c:54:26:47:c0:
                    ad:ed:43:96:f8:67:da:85:5e:c6:a8:83:f2:0f:b5:
                    50:76:ae:e2:49:f0:84:5a:db:11:06:27:12:4c:66:
                    d0:43:13:60:a1:5c:e2:66:10:1e:84:3b:7f:ce:40:
                    6f:7d:81:24:4b:6f:a0:12:13:2c:b9:98:b4:50:5f:
                    0a:42:95:0a:d1:40:21:48:e3:32:d6:3a:7a:ac:fe:
                    55:cb:5d:ea:96:a3:13:36:5e:69:b5:90:12:57:a4:
                    66:ee:f9:e4:15:7c:eb:4a:c0:e6:73:4f:51:ea:96:
                    ea:f0:1d:71:53:5a:ea:98:3e:a3:70:41:4c:7c:f9:
                    e7:18:53:92:4f:88:83:6c:d5:ea:bd:83:c6:b5:64:
                    9e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5D:D0:F1:EE:53:63:FE:FF:32:1E:AF:AE:9A:58:31:43:60:25:F8
            X509v3 Authority Key Identifier:
                keyid:4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a313030303a3a2f34302d3434203d3e20323731333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a94:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1e:29:51:33:38:02:60:63:bc:93:8c:90:d8:66:0e:05:d0:f5:
         5e:40:e2:76:50:fe:b0:88:eb:fa:ed:e6:97:e5:39:97:65:51:
         8d:e2:e2:3d:04:51:92:25:4b:19:0e:6b:f1:2b:2b:33:4f:65:
         1e:43:77:6a:92:fd:09:51:ed:94:84:ca:f6:d0:70:f7:c2:d0:
         5f:40:fd:c8:ec:aa:2d:35:ec:14:58:fb:33:a9:c8:0c:1d:3a:
         17:20:64:11:93:bc:c8:7b:c2:bb:4d:84:f1:84:ca:45:43:75:
         6a:c5:8f:3d:98:ed:cd:cf:f8:7f:87:62:4c:7b:81:56:ec:48:
         cb:38:3b:a4:31:4c:98:48:5e:53:9a:9a:e2:5c:0f:ac:27:57:
         8d:86:8a:36:39:4b:81:dd:24:ed:32:c0:c5:d3:d7:55:07:8d:
         a9:5f:09:27:81:9f:32:19:2c:3f:98:cd:10:d1:16:9b:86:ec:
         78:dc:ec:07:32:03:37:fa:89:7c:c1:28:08:3b:65:97:54:57:
         8b:f0:ff:27:2b:6b:99:c7:91:3f:0f:5f:65:31:8e:be:3e:fe:
         ea:0e:37:ce:44:4f:32:69:78:d2:e6:c2:bf:e5:61:af:fa:1e:
         20:87:b0:58:af:e5:31:19:db:ad:2c:5a:6d:5c:2f:8d:87:44:
         c6:14:c6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:28 2024 by rpki-client on console-ams.rpki-client.org