Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a3a2f33322d3332203d3e20323731333830.roa
File:                     323830343a376139343a3a2f33322d3332203d3e20323731333830.roa (raw, json)
Hash identifier:          YpTSO8gvhFuZwTngaXUT6fCJK17YZ/rMMCwk7ghPKe4=
Subject key identifier:   22:87:3A:7E:5E:39:28:1D:E4:65:14:C8:89:0C:66:4E:3A:21:2F:05
Certificate issuer:       /CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
Certificate serial:       6D998BDA107ED19BE623FFC48D871AB416264490
Authority key identifier: 4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a3a2f33322d3332203d3e20323731333830.roa
Signing time:             Thu 04 Apr 2024 13:38:36 +0000
ROA not before:           Thu 04 Apr 2024 13:33:36 +0000
ROA not after:            Thu 03 Apr 2025 13:38:36 +0000
asID:                     271380
IP address blocks:        2804:7a94::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl
                          rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:99:8b:da:10:7e:d1:9b:e6:23:ff:c4:8d:87:1a:b4:16:26:44:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
        Validity
            Not Before: Apr  4 13:33:36 2024 GMT
            Not After : Apr  3 13:38:36 2025 GMT
        Subject: CN=22873A7E5E39281DE46514C8890C664E3A212F05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:ef:bb:79:14:d0:29:76:16:d7:5b:fd:8f:
                    59:6f:91:e9:d5:a2:bf:d8:77:2c:13:c2:6f:e6:a8:
                    a1:1f:9b:8f:7d:85:10:ce:c2:dc:a8:17:18:46:0d:
                    7a:4d:8d:b1:cc:e0:e4:b2:d2:57:07:f1:88:ae:ca:
                    42:8c:e9:e9:e8:70:25:b0:76:b7:cd:81:37:b6:3d:
                    5e:f9:de:0f:51:b7:d7:16:d3:bc:1c:5b:c5:bc:83:
                    97:39:4a:e4:5c:ad:b1:9b:29:ff:fe:af:b3:6d:32:
                    aa:13:e8:da:00:37:51:bd:bf:52:55:cd:9b:64:fe:
                    fc:d0:4b:8e:86:6c:e0:b1:d3:11:9c:80:ba:4f:51:
                    cb:02:65:65:64:cc:dd:bd:ad:17:69:94:1f:8c:a3:
                    26:e7:65:f2:2d:7f:84:1b:f5:3f:a8:1e:d1:42:a0:
                    ea:ac:59:83:5c:89:1d:35:85:db:eb:06:0e:d2:b4:
                    f6:11:8b:00:90:02:51:e7:2a:eb:2f:64:1c:10:de:
                    a5:aa:cd:3f:db:b7:4c:b4:12:50:72:53:a4:5b:f1:
                    bd:01:01:6c:47:67:c9:95:eb:f1:88:48:32:48:04:
                    a4:55:b7:e9:cb:10:d8:6c:55:47:71:71:08:cd:43:
                    cb:9b:47:13:c7:ab:b2:e5:27:15:5d:f6:5f:3b:3e:
                    7e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:87:3A:7E:5E:39:28:1D:E4:65:14:C8:89:0C:66:4E:3A:21:2F:05
            X509v3 Authority Key Identifier:
                keyid:4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a3a2f33322d3332203d3e20323731333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a94::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:71:f0:2b:07:c5:cd:29:3a:a4:f3:aa:f3:a3:15:06:07:14:
         f3:11:c9:a3:ee:05:44:ba:8a:98:3f:14:08:44:52:5a:e3:c2:
         69:6d:d5:62:30:28:50:fd:e7:45:ec:12:ca:9c:6e:ad:20:21:
         81:d9:35:55:d2:6d:10:81:3e:d2:0d:45:0a:a8:ca:33:9a:00:
         d8:87:7b:29:9d:0b:a9:b1:ad:c9:0b:56:5e:d8:a0:1c:78:71:
         c7:a3:39:26:24:1e:76:15:b2:28:4e:20:1d:fd:fd:71:60:6d:
         93:2f:71:c5:50:55:ed:79:58:1f:99:22:58:44:76:4e:38:a0:
         4b:88:8e:c2:8b:fd:1e:ad:10:db:36:10:ca:59:39:3d:3a:50:
         e3:f9:3a:de:a4:47:2f:f7:83:c4:a3:76:e5:95:4f:13:df:87:
         76:ae:b6:b7:f9:88:a3:93:f8:9d:ed:fc:d9:09:ee:9c:ac:3b:
         96:c0:87:5d:18:63:5d:d7:66:5c:52:77:fa:5e:9e:1d:04:7f:
         7a:73:e9:51:8d:b3:92:3a:4b:e0:f9:3b:20:87:f5:65:93:57:
         f7:95:bf:52:5a:ca:a8:a1:2b:9e:11:4c:9f:75:02:c6:ab:cf:
         7d:02:7b:65:ca:82:a2:77:b4:98:d9:7d:3e:d8:6b:d8:d0:7c:
         0b:56:1e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:28 2024 by rpki-client on console-ams.rpki-client.org