Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/1/323830343a386163343a3a2f33322d3438203d3e20323733363931.roa
File:                     323830343a386163343a3a2f33322d3438203d3e20323733363931.roa (raw, json)
Hash identifier:          y8IteP1to2T09KrIJ/FjQvyo26UY+izKpT4LDZeVGHI=
Subject key identifier:   72:1A:4D:0C:D0:5D:DE:97:32:BA:74:1A:7D:0E:83:A4:70:6F:2A:85
Certificate issuer:       /CN=E3F6EE39830426870D612FD7EB39952823C11BF7
Certificate serial:       B9DC226B9812AF2C1100EA6C05BFD3A8D04783
Authority key identifier: E3:F6:EE:39:83:04:26:87:0D:61:2F:D7:EB:39:95:28:23:C1:1B:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F6EE39830426870D612FD7EB39952823C11BF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/1/323830343a386163343a3a2f33322d3438203d3e20323733363931.roa
Signing time:             Thu 04 Apr 2024 04:26:47 +0000
ROA not before:           Thu 04 Apr 2024 04:21:47 +0000
ROA not after:            Thu 03 Apr 2025 04:26:47 +0000
asID:                     273691
IP address blocks:        2804:8ac4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/1/E3F6EE39830426870D612FD7EB39952823C11BF7.crl
                          rsync://rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/1/E3F6EE39830426870D612FD7EB39952823C11BF7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F6EE39830426870D612FD7EB39952823C11BF7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b9:dc:22:6b:98:12:af:2c:11:00:ea:6c:05:bf:d3:a8:d0:47:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3F6EE39830426870D612FD7EB39952823C11BF7
        Validity
            Not Before: Apr  4 04:21:47 2024 GMT
            Not After : Apr  3 04:26:47 2025 GMT
        Subject: CN=721A4D0CD05DDE9732BA741A7D0E83A4706F2A85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a5:8e:b1:f4:1f:56:74:b9:6f:b9:2a:44:1d:
                    50:1a:d9:42:c2:db:e6:71:0a:a3:95:cb:ac:6b:29:
                    9a:8c:60:7d:6c:bc:e1:3f:4c:48:95:b8:13:74:e9:
                    a7:58:41:35:a1:56:69:03:54:20:05:12:11:88:67:
                    f0:56:62:de:82:60:f0:c2:95:c4:0a:83:f9:fb:e3:
                    5d:e6:c1:c9:fa:5c:fb:7d:a3:4f:b2:f9:60:c2:bf:
                    18:84:91:35:7c:de:ec:93:fa:d1:c2:8d:03:ed:e0:
                    bb:ed:ba:1a:76:39:c5:02:1a:51:bb:3e:b6:24:61:
                    6c:97:31:c6:a8:d6:f2:f2:1f:4b:54:b5:ff:ea:3f:
                    47:8f:b6:25:3e:e7:cd:43:a5:c3:9c:fd:a7:9b:a7:
                    be:58:be:49:91:6f:14:a4:16:99:63:28:28:0e:b9:
                    22:85:02:27:28:b7:5f:07:8d:f7:ec:64:c6:07:e0:
                    fa:e5:8d:5e:99:f5:bc:e3:fc:4c:ee:2c:0f:21:9b:
                    71:2c:29:2a:32:2f:32:ef:17:d5:43:8f:79:57:bd:
                    78:14:8b:24:04:ca:78:ca:fe:d6:f7:7d:11:6a:60:
                    db:2a:45:52:4d:29:94:30:cb:34:e5:a1:66:75:63:
                    fb:e7:a5:e9:40:dc:92:96:f7:77:fc:c7:5b:ac:28:
                    4f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1A:4D:0C:D0:5D:DE:97:32:BA:74:1A:7D:0E:83:A4:70:6F:2A:85
            X509v3 Authority Key Identifier:
                keyid:E3:F6:EE:39:83:04:26:87:0D:61:2F:D7:EB:39:95:28:23:C1:1B:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/1/E3F6EE39830426870D612FD7EB39952823C11BF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F6EE39830426870D612FD7EB39952823C11BF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/1/323830343a386163343a3a2f33322d3438203d3e20323733363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ac4::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:01:56:28:de:c2:b0:dc:14:8a:b1:98:44:f5:31:f0:27:a7:
         d7:19:59:7d:d5:63:76:7b:3c:b8:8f:f0:24:8d:70:db:db:66:
         6b:0c:33:79:ff:06:9f:36:9e:81:d7:94:22:36:0e:d4:ac:91:
         1c:46:d9:ef:18:e1:06:d8:52:e3:27:bf:ad:cf:4e:49:e9:33:
         ca:f9:c3:16:ba:45:60:64:5b:b9:d5:e0:a9:d5:81:58:cc:6b:
         62:4c:aa:f5:90:21:06:cb:52:a1:5e:31:83:36:83:53:83:58:
         ae:fb:98:7b:54:e5:50:50:d2:cf:b4:da:7c:d2:21:45:2f:00:
         40:ef:9d:d5:dc:ad:57:8f:c0:c5:e8:6f:2c:08:b0:f0:65:cb:
         80:90:05:6c:97:44:ad:31:a3:de:0a:be:24:70:13:99:90:2e:
         79:76:a1:06:73:9b:19:77:78:60:89:d8:70:c3:73:c3:ed:fb:
         af:91:ce:35:81:44:70:89:6d:fe:c0:83:db:68:ff:42:d1:f8:
         66:06:fd:4f:e9:ef:a4:54:71:d0:55:6f:2d:7c:98:6a:6a:95:
         1b:9d:c5:0c:f6:9b:62:8f:cf:53:86:e3:bd:c6:07:97:b7:4b:
         2a:63:7c:bc:c9:38:21:c2:eb:a7:ed:cd:95:97:e9:f8:89:95:
         70:b8:c2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:26:54 2024 by rpki-client on console-ams.rpki-client.org