Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a313230303a3a2f34302d3434203d3e20323731333830.roa
File:                     323830343a376139343a313230303a3a2f34302d3434203d3e20323731333830.roa (raw, json)
Hash identifier:          diJnnYpyZO80sVKDkbsI+Vp88a1yvbmvglMc77CcDts=
Subject key identifier:   3A:F9:61:5C:D1:CD:A1:14:CB:7F:08:94:9C:71:EF:33:08:DF:95:97
Certificate issuer:       /CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
Certificate serial:       5BC154A476F18A261FD7E6EDF7454E353926694C
Authority key identifier: 4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a313230303a3a2f34302d3434203d3e20323731333830.roa
Signing time:             Thu 04 Apr 2024 13:38:35 +0000
ROA not before:           Thu 04 Apr 2024 13:33:35 +0000
ROA not after:            Thu 03 Apr 2025 13:38:35 +0000
asID:                     271380
IP address blocks:        2804:7a94:1200::/40 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl
                          rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c1:54:a4:76:f1:8a:26:1f:d7:e6:ed:f7:45:4e:35:39:26:69:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
        Validity
            Not Before: Apr  4 13:33:35 2024 GMT
            Not After : Apr  3 13:38:35 2025 GMT
        Subject: CN=3AF9615CD1CDA114CB7F08949C71EF3308DF9597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:d4:c6:96:84:63:0c:99:74:5c:13:5f:72:99:
                    4d:39:cd:a5:34:b0:a7:4a:74:aa:a1:08:3f:a5:1a:
                    c9:39:35:f5:1c:ee:70:85:e3:1e:00:af:af:7f:8a:
                    9e:aa:c3:f3:25:d8:10:14:79:e7:cb:fc:34:3c:4a:
                    da:42:80:84:e0:f6:65:33:fe:11:0a:5d:11:3d:4c:
                    ed:e1:22:f4:da:18:e9:68:08:14:0f:44:99:7c:24:
                    47:ae:b1:24:30:a9:99:6c:dd:b0:9b:90:85:cb:a2:
                    df:88:68:d1:62:49:e6:39:f2:76:3c:7e:c8:b7:2a:
                    e7:bd:40:b4:ba:74:f7:f7:5e:6a:30:9d:cd:8f:75:
                    58:3c:22:f5:9c:d9:37:11:52:d6:d9:d0:68:40:98:
                    42:87:d6:e4:97:f0:4a:55:50:09:d2:af:cd:18:d2:
                    30:32:52:b4:a5:85:0b:be:cf:8e:e2:c5:2b:c1:0e:
                    01:df:fb:99:be:28:45:35:89:69:94:5a:c1:dd:25:
                    fd:3f:f6:b5:66:7c:8b:6f:a5:cb:74:4a:cb:c3:9d:
                    d9:b4:72:86:32:f5:d3:bb:11:a1:f2:09:a6:f8:95:
                    c0:53:5c:48:37:71:b8:58:4b:61:55:e1:56:47:5b:
                    90:b6:5a:b6:3f:6c:95:d9:7a:aa:d7:5a:79:d2:ee:
                    fd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F9:61:5C:D1:CD:A1:14:CB:7F:08:94:9C:71:EF:33:08:DF:95:97
            X509v3 Authority Key Identifier:
                keyid:4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a313230303a3a2f34302d3434203d3e20323731333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a94:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         55:3c:8a:31:35:9d:f4:b1:09:dc:7a:36:3a:b3:e1:46:f2:ff:
         30:6c:f6:83:a8:1e:1c:45:9c:bc:94:0a:18:d6:94:a9:7c:9c:
         19:dd:6a:09:10:43:dd:dd:92:83:ba:5f:0b:8c:55:7a:c9:11:
         7c:ca:ac:da:88:9c:ac:ac:87:f1:c5:40:06:60:5a:f0:04:03:
         a1:4a:6b:18:11:2c:6d:89:9a:9c:7a:29:48:02:76:d3:9b:44:
         d6:7b:bc:30:5b:b1:dc:3f:97:9d:70:8e:60:90:5b:90:93:23:
         24:f3:4a:b9:e6:88:1b:12:0d:58:dd:7e:a4:86:b9:be:16:b9:
         1f:dd:9a:e4:e1:f1:89:1c:ad:ad:23:c9:cb:56:a9:4a:a8:a4:
         7f:01:69:38:36:ed:9e:48:5f:ac:aa:5b:02:d6:0a:13:15:ff:
         8c:e9:54:2d:9b:eb:58:c6:de:82:4c:61:11:81:cc:63:7f:55:
         86:a7:0a:cf:15:62:92:4c:73:03:89:c4:62:07:ce:8c:d9:43:
         cf:02:37:cd:9b:24:c7:ce:bb:83:26:70:18:8f:89:b0:04:90:
         65:37:fb:1d:7b:84:ee:9b:36:c4:70:b7:4d:34:7f:8b:ae:82:
         ca:0b:b3:99:31:b3:ca:14:e4:3b:e2:25:c6:6f:98:fb:6d:98:
         ea:12:66:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:14 2024 by rpki-client on console-fra.rpki-client.org