Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/323830343a333036383a3a2f33322d3336203d3e20323634393439.roa
File:                     323830343a333036383a3a2f33322d3336203d3e20323634393439.roa (raw, json)
Hash identifier:          AauCjZ3LanwNeOu1bgxTkNIY8jQkd3CDTX3P41EJkmM=
Subject key identifier:   97:F6:65:8C:4C:B7:B1:61:F6:45:76:9D:3E:3E:83:F5:8B:2D:8B:50
Certificate issuer:       /CN=E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A
Certificate serial:       78F21F272AA45034C1CC356752035F9816EBF83B
Authority key identifier: E1:BB:E6:FD:C4:4B:2F:AC:C0:E2:B5:85:5F:12:83:C7:96:68:0A:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/323830343a333036383a3a2f33322d3336203d3e20323634393439.roa
Signing time:             Thu 04 Apr 2024 04:32:22 +0000
ROA not before:           Thu 04 Apr 2024 04:27:22 +0000
ROA not after:            Thu 03 Apr 2025 04:32:22 +0000
asID:                     264949
IP address blocks:        2804:3068::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.crl
                          rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f2:1f:27:2a:a4:50:34:c1:cc:35:67:52:03:5f:98:16:eb:f8:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A
        Validity
            Not Before: Apr  4 04:27:22 2024 GMT
            Not After : Apr  3 04:32:22 2025 GMT
        Subject: CN=97F6658C4CB7B161F645769D3E3E83F58B2D8B50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:69:f8:0a:42:3e:15:49:42:03:33:59:99:29:
                    50:63:3c:66:30:92:6e:06:9a:08:38:bb:f5:2b:2d:
                    97:af:8a:03:c4:70:9a:54:ab:eb:1c:03:9b:80:c2:
                    a0:62:35:3f:ee:ec:6f:cd:43:aa:19:ce:c3:3e:f1:
                    f3:f4:95:55:c6:5f:b0:1f:a2:db:40:bb:14:25:6e:
                    e5:c4:01:70:e5:37:fd:e8:9f:da:bc:4d:36:2c:8a:
                    8b:57:e0:12:52:36:28:eb:75:66:c8:f6:63:3d:6a:
                    e9:63:9e:e0:b3:33:b4:77:86:4b:a3:53:99:e4:17:
                    bb:4a:8b:51:4d:b0:1f:87:de:ea:e8:57:ee:2b:c4:
                    90:28:5f:81:05:34:fc:4e:bd:b5:51:bc:b4:51:f6:
                    f1:d2:4e:a4:a7:ff:4f:8e:a5:f1:83:8c:f2:b1:9f:
                    ea:e8:b5:54:7b:1e:7d:3d:65:ed:bc:f9:62:ed:7c:
                    b9:52:eb:08:aa:53:f3:d5:dd:e3:21:67:28:b1:e1:
                    3d:81:44:f4:cd:d8:28:09:99:0d:6e:18:11:20:3d:
                    94:b7:d7:f9:9b:99:b0:b9:c1:47:02:26:e3:53:df:
                    03:ac:a9:9a:11:66:33:8e:df:14:8c:4c:bd:35:25:
                    18:dd:c7:cc:60:39:b7:6d:22:87:c2:d8:4a:77:cc:
                    8a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F6:65:8C:4C:B7:B1:61:F6:45:76:9D:3E:3E:83:F5:8B:2D:8B:50
            X509v3 Authority Key Identifier:
                keyid:E1:BB:E6:FD:C4:4B:2F:AC:C0:E2:B5:85:5F:12:83:C7:96:68:0A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/323830343a333036383a3a2f33322d3336203d3e20323634393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3068::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:ad:78:f8:c0:0a:97:f9:d5:f5:03:18:4e:6e:1e:20:4d:2d:
         51:d9:e6:5a:46:94:1e:cb:f0:a0:d7:d6:95:3e:07:b1:d8:05:
         b8:7c:26:3b:ce:a4:07:1a:22:93:ce:18:d1:34:db:1f:e6:f6:
         24:1a:c6:01:e4:b9:7a:49:e3:77:24:29:a8:73:bb:26:f8:4d:
         61:3d:75:3c:dd:da:b8:73:20:21:98:86:10:17:50:db:46:1f:
         8b:ae:3a:46:a8:94:6c:48:5e:a3:04:d2:5f:54:b5:55:ae:be:
         c2:a8:8b:c0:4c:c2:31:89:b4:77:42:dc:ba:be:6d:e0:22:94:
         4d:d7:71:9d:2f:ef:52:16:c8:2d:d7:44:27:9f:17:7d:d2:4c:
         6a:cd:ba:60:0e:d9:1a:5e:f7:8b:7a:48:46:07:3a:e0:54:9f:
         eb:b4:9d:5b:6e:a4:c8:20:42:97:1f:c9:0e:00:f8:22:d5:bf:
         1c:b6:f0:e4:0e:0f:23:7d:6c:d7:55:9a:31:72:50:d6:cf:9d:
         6e:5e:87:96:74:4d:2e:1f:ba:7f:46:5a:c3:4d:ac:c9:d3:0e:
         cc:9b:21:e3:b7:1b:46:32:a3:07:4a:91:f3:6d:2c:eb:1e:b5:
         32:d1:df:a3:82:8e:1c:76:e3:bd:23:3e:bf:d4:aa:70:ee:1b:
         42:ea:58:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 03:38:16 2024 by rpki-client on console-ams.rpki-client.org