Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/1/323830343a343832383a3a2f33322d3438203d3e20323637313031.roa
File:                     323830343a343832383a3a2f33322d3438203d3e20323637313031.roa (raw, json)
Hash identifier:          zZvdqiuhb73oWEcOy8hgkY5cyDbuIr9IEjqD7VV7hUg=
Subject key identifier:   8E:05:49:C4:FF:82:57:62:DC:C0:75:47:2E:B2:FA:7F:78:4C:9F:02
Certificate issuer:       /CN=B81349D6DE12F72CBE07E6A9581BD93607C25C4E
Certificate serial:       044DCF3F3D1DD3CFB738B1F1F7BD4BEE3CE5DDBB
Authority key identifier: B8:13:49:D6:DE:12:F7:2C:BE:07:E6:A9:58:1B:D9:36:07:C2:5C:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B81349D6DE12F72CBE07E6A9581BD93607C25C4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/1/323830343a343832383a3a2f33322d3438203d3e20323637313031.roa
Signing time:             Thu 04 Apr 2024 20:37:13 +0000
ROA not before:           Thu 04 Apr 2024 20:32:13 +0000
ROA not after:            Thu 03 Apr 2025 20:37:13 +0000
asID:                     267101
IP address blocks:        2804:4828::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/1/B81349D6DE12F72CBE07E6A9581BD93607C25C4E.crl
                          rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/1/B81349D6DE12F72CBE07E6A9581BD93607C25C4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B81349D6DE12F72CBE07E6A9581BD93607C25C4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4d:cf:3f:3d:1d:d3:cf:b7:38:b1:f1:f7:bd:4b:ee:3c:e5:dd:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B81349D6DE12F72CBE07E6A9581BD93607C25C4E
        Validity
            Not Before: Apr  4 20:32:13 2024 GMT
            Not After : Apr  3 20:37:13 2025 GMT
        Subject: CN=8E0549C4FF825762DCC075472EB2FA7F784C9F02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8d:f8:4d:d7:e5:3d:50:86:f4:59:f6:1d:9d:
                    4c:a1:cd:6b:0a:81:4f:55:d9:98:80:f0:e4:e8:89:
                    ec:1d:5b:47:d8:91:bf:49:e7:f3:4f:51:e5:e8:7b:
                    20:77:e3:a8:fc:dc:ea:94:51:49:3e:67:79:a1:f3:
                    de:08:d8:58:b5:94:f3:cb:6f:1c:4b:07:33:7e:91:
                    59:3a:40:1d:fe:e4:3a:09:cb:45:a2:c2:4a:a3:a8:
                    2c:48:69:8d:5e:89:3c:b7:af:5f:04:7d:93:f5:9f:
                    98:03:d9:2d:fe:44:7d:a4:44:6f:9a:a9:07:3e:b0:
                    2a:c9:2f:a0:12:0b:e0:25:7b:08:95:ed:58:30:3f:
                    89:29:ae:08:46:5c:30:e9:3c:14:7e:fe:7c:c2:c2:
                    9d:b4:35:0b:f5:c9:3d:9d:b3:f4:40:93:64:cd:dc:
                    25:8a:27:e4:c5:59:8f:2c:ea:29:b1:b0:f9:23:15:
                    8a:58:0d:1c:13:19:09:20:08:fc:0a:59:58:c2:05:
                    8a:8e:d6:03:12:11:09:50:89:c1:a0:1c:aa:d5:02:
                    2b:10:4a:12:4a:71:91:1c:99:a5:37:32:91:e3:8a:
                    0b:da:92:58:fd:18:20:d1:d3:be:5e:98:80:aa:77:
                    d8:7e:4d:77:d7:c5:ad:69:03:d7:8b:34:5d:de:0b:
                    98:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:05:49:C4:FF:82:57:62:DC:C0:75:47:2E:B2:FA:7F:78:4C:9F:02
            X509v3 Authority Key Identifier:
                keyid:B8:13:49:D6:DE:12:F7:2C:BE:07:E6:A9:58:1B:D9:36:07:C2:5C:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/1/B81349D6DE12F72CBE07E6A9581BD93607C25C4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B81349D6DE12F72CBE07E6A9581BD93607C25C4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/1/323830343a343832383a3a2f33322d3438203d3e20323637313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4828::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:98:61:99:7a:1b:42:45:fd:ac:f6:b2:53:e7:5b:5b:db:51:
         d2:d4:19:fe:3a:03:d8:db:78:82:e8:07:25:b9:8d:a0:e5:8a:
         b7:4f:05:6e:40:eb:0a:59:b6:b5:4a:4e:d0:1a:55:90:81:5f:
         90:1d:1e:a8:74:2b:1d:8c:0b:a4:64:6f:ea:f4:3f:14:11:64:
         e3:d3:b3:82:1d:3e:68:1f:14:93:9d:25:e4:3e:69:0c:c2:7f:
         ca:40:a2:6a:8b:79:92:e7:63:d3:f0:5f:53:b5:28:00:9a:78:
         5c:5c:d5:35:7b:da:35:82:59:b7:04:64:c8:80:3b:60:db:d2:
         a8:db:7b:e4:d8:45:5f:30:e7:1c:f0:39:f7:1a:a5:d2:c6:e3:
         75:64:b4:8d:bd:12:17:f9:21:d0:d8:55:52:af:cf:bc:42:86:
         64:2c:96:66:ac:05:e6:9e:42:39:4e:ae:82:b5:a7:39:64:f4:
         5b:83:14:c9:fe:5a:46:4f:94:d6:0e:27:d0:c9:0a:22:22:8b:
         f4:a2:69:5c:83:11:e2:62:e5:48:93:38:d9:97:01:18:04:5d:
         aa:1d:af:ba:84:c7:7a:b5:eb:d2:eb:ae:a2:41:dc:32:7f:eb:
         4a:77:cd:a1:e5:47:eb:b2:49:f3:86:7e:c3:56:17:63:76:c4:
         4a:13:a7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:51:08 2024 by rpki-client on console-ams.rpki-client.org