Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/1/323830343a356266303a3a2f33322d313238203d3e20323638383738.roa
File:                     323830343a356266303a3a2f33322d313238203d3e20323638383738.roa (raw, json)
Hash identifier:          Ah8uMVwUxwHifxcMu285zLzmeQS32zC6aKpNZe5g5YQ=
Subject key identifier:   6F:BE:F1:62:4A:17:B8:E0:96:58:A3:74:31:EA:B7:83:91:75:97:B8
Certificate issuer:       /CN=421315A955B12A05BBC6E72A2627E4B0F90C83D7
Certificate serial:       4E724133019DBA38B44D649E8473E3C71A43D8D9
Authority key identifier: 42:13:15:A9:55:B1:2A:05:BB:C6:E7:2A:26:27:E4:B0:F9:0C:83:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421315A955B12A05BBC6E72A2627E4B0F90C83D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/1/323830343a356266303a3a2f33322d313238203d3e20323638383738.roa
Signing time:             Thu 04 Apr 2024 03:48:10 +0000
ROA not before:           Thu 04 Apr 2024 03:43:10 +0000
ROA not after:            Thu 03 Apr 2025 03:48:10 +0000
asID:                     268878
IP address blocks:        2804:5bf0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/1/421315A955B12A05BBC6E72A2627E4B0F90C83D7.crl
                          rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/1/421315A955B12A05BBC6E72A2627E4B0F90C83D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421315A955B12A05BBC6E72A2627E4B0F90C83D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 02:22:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:72:41:33:01:9d:ba:38:b4:4d:64:9e:84:73:e3:c7:1a:43:d8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421315A955B12A05BBC6E72A2627E4B0F90C83D7
        Validity
            Not Before: Apr  4 03:43:10 2024 GMT
            Not After : Apr  3 03:48:10 2025 GMT
        Subject: CN=6FBEF1624A17B8E09658A37431EAB783917597B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:43:61:cb:9f:cd:be:a7:9c:4d:3b:c2:49:57:
                    e9:6a:ad:29:0d:6c:cf:ff:2d:8e:1b:7c:33:0d:a7:
                    07:77:f7:0b:df:a9:f1:89:fe:28:60:44:e5:09:61:
                    45:d5:58:30:5f:d1:96:76:d5:03:15:8c:35:b9:d0:
                    d3:a8:a3:ff:fa:98:a1:76:4d:29:91:c3:1c:70:fa:
                    33:8a:da:0c:b2:3a:fb:85:7f:2c:14:73:67:80:5f:
                    99:3a:aa:d3:db:14:7c:62:e8:a1:c5:ed:a1:a6:e7:
                    0d:95:d8:13:84:4f:89:4b:fe:3e:0c:fb:58:7c:54:
                    92:ae:77:18:37:34:01:ef:0c:8b:c3:c5:48:bb:ad:
                    a1:35:bb:11:66:c1:8b:4e:49:9b:2d:3c:51:e3:a6:
                    05:df:e2:6a:ae:ea:4a:9d:4c:99:16:26:ea:f8:e7:
                    8f:27:66:e4:08:02:58:48:27:fc:d2:bf:12:3e:f2:
                    9e:ed:10:00:42:58:e5:d9:ba:73:24:9d:de:4c:2e:
                    56:90:b5:a8:37:4f:46:a0:74:3f:7c:6c:df:33:ad:
                    99:42:90:7c:a8:02:84:78:ee:13:e0:3a:8f:64:12:
                    91:b7:25:fa:f1:57:47:41:ea:6c:e3:e0:31:49:79:
                    b7:b5:c3:21:4b:3c:d7:fa:9b:9e:a9:dd:bc:11:56:
                    0a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BE:F1:62:4A:17:B8:E0:96:58:A3:74:31:EA:B7:83:91:75:97:B8
            X509v3 Authority Key Identifier:
                keyid:42:13:15:A9:55:B1:2A:05:BB:C6:E7:2A:26:27:E4:B0:F9:0C:83:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/1/421315A955B12A05BBC6E72A2627E4B0F90C83D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421315A955B12A05BBC6E72A2627E4B0F90C83D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/1/323830343a356266303a3a2f33322d313238203d3e20323638383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bf0::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:16:54:c6:2d:c3:e4:72:0b:3b:80:4c:0f:13:e4:cf:05:48:
         56:8d:ab:44:b2:ae:17:96:93:f6:a1:c9:e3:61:65:d6:be:2c:
         ea:e9:4c:99:c0:51:aa:e1:b2:be:82:a4:e6:8f:18:34:bb:3e:
         44:93:bc:58:dc:d8:71:9a:0b:b8:2a:e4:ba:e2:d8:9d:87:44:
         ee:a5:b1:0c:8d:5e:aa:65:61:92:54:d8:18:d1:4e:0e:df:d8:
         52:ac:da:b2:64:58:86:16:f5:cd:82:73:ae:8d:c9:6a:68:8b:
         1e:a9:84:6d:e5:1b:7d:ae:61:b0:9b:34:fe:f0:94:e5:68:e7:
         a5:c4:b5:0a:ac:57:9c:b9:5d:75:66:ec:2c:c8:34:ea:6c:d4:
         97:95:6f:39:62:a9:4d:f1:43:d4:06:07:b3:d9:5d:1d:08:fc:
         3c:ca:4e:8f:99:e2:08:0f:b9:6c:d4:4f:5c:28:20:2e:eb:c7:
         47:ab:b2:0c:49:17:a1:e9:ea:5a:e5:23:5b:d5:6c:83:74:f9:
         23:6f:b7:c3:c6:a1:2c:c4:2c:f5:23:d5:2b:f6:7f:b6:e0:a4:
         dd:e9:4c:41:58:e5:82:82:29:28:d9:e4:b3:2c:fa:af:00:80:
         c4:7d:90:d3:cb:38:90:d2:23:cc:2d:bb:86:13:55:10:7a:3c:
         10:5e:34:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 01:14:44 2024 by rpki-client on console-ams.rpki-client.org