Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a313130303a3a2f34302d3434203d3e20323731333830.roa
File:                     323830343a376139343a313130303a3a2f34302d3434203d3e20323731333830.roa (raw, json)
Hash identifier:          Q205oKWAjR921e+FabuM7swldiXWK80cBdPVIfLoT6I=
Subject key identifier:   E2:CE:77:D0:3F:65:36:9F:1E:3E:80:82:92:6E:3C:87:FB:68:1A:C6
Certificate issuer:       /CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
Certificate serial:       28CC658C8BAEEAA54B81E771B92329FAF96C7C92
Authority key identifier: 4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a313130303a3a2f34302d3434203d3e20323731333830.roa
Signing time:             Thu 04 Apr 2024 13:38:35 +0000
ROA not before:           Thu 04 Apr 2024 13:33:35 +0000
ROA not after:            Thu 03 Apr 2025 13:38:35 +0000
asID:                     271380
IP address blocks:        2804:7a94:1100::/40 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl
                          rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:cc:65:8c:8b:ae:ea:a5:4b:81:e7:71:b9:23:29:fa:f9:6c:7c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
        Validity
            Not Before: Apr  4 13:33:35 2024 GMT
            Not After : Apr  3 13:38:35 2025 GMT
        Subject: CN=E2CE77D03F65369F1E3E8082926E3C87FB681AC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:20:09:4e:c8:98:d6:d8:7a:b6:f1:66:a4:90:
                    ce:58:ef:66:05:a0:3d:f5:e2:4d:3a:4b:2e:47:fd:
                    4c:2f:61:bb:fd:5c:e6:6b:61:3a:8c:75:da:be:d9:
                    4d:26:8a:88:6f:f6:92:ad:59:4b:f2:74:e6:c7:c2:
                    87:ce:4b:7c:48:c8:1d:1c:2a:ff:41:82:ff:be:e9:
                    df:96:03:ac:be:49:98:81:27:0e:4e:bd:cb:3a:ea:
                    f1:b8:e9:22:65:1c:5d:29:63:42:0b:88:35:72:06:
                    1f:a9:ea:05:51:e5:57:85:65:9d:cc:f8:fd:f3:d3:
                    f2:e4:38:b1:22:6b:d7:e8:44:25:fc:ba:6a:63:c3:
                    6f:37:8f:a3:2c:d3:dd:ce:c3:6c:c0:21:0f:e7:17:
                    c3:81:0b:f3:2b:8d:dd:99:52:4b:e7:7d:f9:47:38:
                    ce:05:89:8a:e7:e9:ad:21:df:22:51:f8:55:53:66:
                    17:a4:22:a7:0e:29:9a:7e:0a:af:48:ef:f2:37:94:
                    31:81:7c:1a:06:67:76:c8:f7:50:35:0c:58:b8:ea:
                    aa:8f:e8:53:ff:11:b5:0b:5e:81:f5:fc:76:1a:b2:
                    9d:07:d2:14:bc:ce:4e:a1:7c:92:34:b5:d3:09:da:
                    64:1a:28:28:2a:9e:55:b5:fa:a6:75:8f:99:5c:c0:
                    48:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CE:77:D0:3F:65:36:9F:1E:3E:80:82:92:6E:3C:87:FB:68:1A:C6
            X509v3 Authority Key Identifier:
                keyid:4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a313130303a3a2f34302d3434203d3e20323731333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a94:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:82:74:74:a1:e9:06:2c:f4:98:ae:cf:e1:dd:4b:c5:bc:36:
         c6:ca:e5:39:ce:8e:85:a0:c8:bb:8c:42:98:4a:c5:74:84:41:
         c0:67:02:dc:38:1e:eb:b9:be:ef:5f:64:40:98:93:9d:aa:e4:
         1d:20:0d:72:46:41:06:38:8a:2c:74:40:c3:8a:2c:29:37:26:
         39:cb:71:de:80:ce:f3:d3:26:54:0f:ba:ee:40:d2:dd:6c:4a:
         a1:c4:8e:64:02:ee:76:24:a5:66:3d:56:0e:c3:f6:7b:62:f7:
         a1:df:9c:ae:47:82:57:59:22:d3:ad:ff:cb:d6:84:34:bf:ba:
         b5:f2:bc:f1:4d:36:ad:c6:55:d9:43:fa:3c:e8:f8:84:3d:5b:
         68:02:d7:f1:f8:08:0a:4b:fa:d6:79:d6:81:ca:fa:fa:de:92:
         3f:51:6b:c0:ed:5c:9f:2e:e6:03:80:20:8c:21:0f:14:3b:58:
         6e:fd:99:91:88:b7:02:8c:b7:0b:78:cd:ad:f5:14:a2:13:c5:
         5d:30:18:ac:b3:34:a1:f5:47:43:40:7b:f0:e7:7f:54:ce:df:
         ab:d7:9a:66:35:29:9b:83:9d:95:cf:70:9b:2e:f1:40:fc:7c:
         16:1e:af:7a:ca:23:17:66:64:c6:0b:69:73:00:aa:ab:01:0f:
         e7:17:c8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:14 2024 by rpki-client on console-fra.rpki-client.org