Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/323830343a3266343a3a2f33322d3332203d3e203533313138.roa
File:                     323830343a3266343a3a2f33322d3332203d3e203533313138.roa (raw, json)
Hash identifier:          s8U4fveECI+CAuNCTiAOce0AsjjFdLuIkrwXEGD6yiw=
Subject key identifier:   3E:B0:7A:E8:8B:F8:88:04:9F:70:A4:86:A5:78:2A:B1:9D:CF:B8:E5
Certificate issuer:       /CN=AFF600EA088C0C0C3160D75A952506A94913C8A8
Certificate serial:       2DDAFBDF9D7C9CE2352F5946C6E6640766FF8A5D
Authority key identifier: AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/323830343a3266343a3a2f33322d3332203d3e203533313138.roa
Signing time:             Wed 03 Apr 2024 18:32:02 +0000
ROA not before:           Wed 03 Apr 2024 18:27:02 +0000
ROA not after:            Wed 02 Apr 2025 18:32:02 +0000
asID:                     53118
IP address blocks:        2804:2f4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl
                          rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 00:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:da:fb:df:9d:7c:9c:e2:35:2f:59:46:c6:e6:64:07:66:ff:8a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFF600EA088C0C0C3160D75A952506A94913C8A8
        Validity
            Not Before: Apr  3 18:27:02 2024 GMT
            Not After : Apr  2 18:32:02 2025 GMT
        Subject: CN=3EB07AE88BF888049F70A486A5782AB19DCFB8E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:de:5b:16:b3:01:b8:c5:af:f8:bf:05:13:71:
                    a0:c9:44:d7:4c:f3:c8:e8:b9:be:66:0d:46:58:ed:
                    bf:8a:76:66:98:82:5e:84:06:83:b3:34:77:c1:3e:
                    7a:08:68:99:62:f5:b0:2f:03:36:78:38:24:ea:20:
                    8e:50:eb:de:35:97:af:f0:f3:50:c2:1d:1a:e9:dd:
                    9d:f0:eb:4a:8a:48:13:3e:e1:9b:d2:5c:7e:cf:1f:
                    15:ce:e4:1e:d6:d4:a4:2a:55:98:3e:26:bd:28:7f:
                    b9:5e:cc:4c:c4:87:e8:6b:eb:89:03:6f:94:50:4f:
                    41:17:ca:a4:f7:03:9c:51:7e:34:5d:f8:48:3b:51:
                    7f:f0:b3:dd:99:62:64:23:64:6f:fa:48:9c:f3:e7:
                    ad:05:70:13:87:84:97:6d:88:5b:bb:1d:49:12:fc:
                    f4:9e:9f:5c:36:07:9e:60:49:08:dd:f2:06:40:11:
                    f8:44:0d:fe:fb:44:35:92:a9:7b:ce:d2:65:a1:d1:
                    d2:dc:d2:60:cc:48:ab:13:b5:f8:2a:d9:ef:93:a2:
                    39:34:52:55:7f:c4:82:d2:d5:95:fa:26:a1:ea:c2:
                    2c:4f:8a:f0:83:b1:64:c5:75:a8:58:a3:56:56:43:
                    6c:84:0a:66:c7:05:2a:b5:86:9c:2d:92:f3:b2:63:
                    15:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B0:7A:E8:8B:F8:88:04:9F:70:A4:86:A5:78:2A:B1:9D:CF:B8:E5
            X509v3 Authority Key Identifier:
                keyid:AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/323830343a3266343a3a2f33322d3332203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:d7:8b:92:39:35:1a:ee:51:f9:00:ad:01:b4:c0:6f:0a:1e:
         ba:4d:fe:f5:f4:a1:af:0b:7c:57:ad:40:19:b8:8c:07:32:3f:
         a1:62:d3:96:90:c0:f4:b5:2d:49:19:81:c5:99:f1:76:24:f6:
         5c:d8:4d:7a:4f:eb:c0:9b:9d:b5:e9:e9:d5:1d:75:bd:48:af:
         b9:a8:ee:fd:5f:d8:a0:bf:05:ae:0e:c7:ff:84:10:85:39:be:
         7d:f1:e9:38:32:d4:83:83:8e:26:9c:6f:5f:13:c9:e2:0c:6f:
         64:cd:ba:98:8a:27:80:62:f9:3f:62:5c:7f:26:f6:78:1c:d9:
         06:fa:87:a0:5c:4c:b8:68:07:73:d7:fe:27:8e:6f:f5:7f:be:
         64:04:0e:ca:55:98:35:61:51:9e:96:ee:ae:2e:ce:8a:cf:b5:
         d4:42:9a:31:56:5d:c8:e6:d0:22:9d:8a:be:28:86:00:b3:2d:
         40:1d:3c:f5:d0:75:ba:db:95:a1:ae:e9:57:8b:88:88:7a:89:
         6f:c6:b6:ec:76:48:3a:0e:85:d2:b8:bf:11:1c:6b:1e:ee:1b:
         63:11:64:54:c8:bd:9b:5b:a8:96:65:1f:08:f6:09:eb:ab:67:
         3f:f6:1b:f7:08:b2:64:60:ed:fb:c2:d9:f9:72:0a:33:7e:ee:
         fc:cb:79:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:26:31 2024 by rpki-client on console-fra.rpki-client.org