Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/1/323830343a346135343a3a2f33322d3334203d3e20323637323333.roa
File:                     323830343a346135343a3a2f33322d3334203d3e20323637323333.roa (raw, json)
Hash identifier:          j8p1z9NBVIowNJ9AC/zxLBs6OVa0rygbp2Rt3PDOsCo=
Subject key identifier:   36:85:94:94:BA:6D:42:F6:0C:8D:C4:CB:3C:CA:0F:E4:60:E6:80:83
Certificate issuer:       /CN=F57F099FD271EDBB9C48568CA6AE35DA053DB80B
Certificate serial:       627A6987F7F6EB093B62E586ED512B33761AC773
Authority key identifier: F5:7F:09:9F:D2:71:ED:BB:9C:48:56:8C:A6:AE:35:DA:05:3D:B8:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F57F099FD271EDBB9C48568CA6AE35DA053DB80B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/1/323830343a346135343a3a2f33322d3334203d3e20323637323333.roa
Signing time:             Wed 03 Apr 2024 18:30:54 +0000
ROA not before:           Wed 03 Apr 2024 18:25:54 +0000
ROA not after:            Wed 02 Apr 2025 18:30:54 +0000
asID:                     267233
IP address blocks:        2804:4a54::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/1/F57F099FD271EDBB9C48568CA6AE35DA053DB80B.crl
                          rsync://rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/1/F57F099FD271EDBB9C48568CA6AE35DA053DB80B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F57F099FD271EDBB9C48568CA6AE35DA053DB80B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 00:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:7a:69:87:f7:f6:eb:09:3b:62:e5:86:ed:51:2b:33:76:1a:c7:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F57F099FD271EDBB9C48568CA6AE35DA053DB80B
        Validity
            Not Before: Apr  3 18:25:54 2024 GMT
            Not After : Apr  2 18:30:54 2025 GMT
        Subject: CN=36859494BA6D42F60C8DC4CB3CCA0FE460E68083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:30:28:da:88:3a:51:b3:65:95:8b:06:32:ae:
                    af:6a:ab:a4:4b:a2:06:b0:33:f0:af:66:b1:f8:b8:
                    d1:e2:20:2d:10:fb:ce:2f:55:19:cd:8d:e6:e2:43:
                    16:3c:82:80:44:e4:95:f3:c3:a2:85:b4:15:83:ac:
                    77:53:7d:12:5d:f9:9a:04:f2:0e:6a:c2:47:2e:23:
                    4e:70:4a:86:4b:3b:47:b7:74:a2:72:97:1e:0d:1a:
                    cd:71:2d:b1:5b:2c:7f:03:f9:7e:06:04:40:7a:8d:
                    5d:e5:5c:ee:e8:e8:07:8a:52:ea:ca:7d:d3:d9:03:
                    94:b5:00:62:c1:eb:05:fc:4f:4b:c3:18:18:2f:9f:
                    6f:14:8b:fa:cf:7b:71:cd:2d:9b:34:01:38:14:cf:
                    69:76:15:2e:4d:eb:26:65:e8:f1:ed:9b:28:67:52:
                    1f:37:3e:a4:44:04:cb:5c:b3:3f:40:98:61:f4:5a:
                    77:28:dc:6a:48:d4:ed:ba:08:d4:46:62:1c:15:35:
                    a0:dc:8c:d6:a7:97:c5:9c:29:6a:f9:68:80:03:38:
                    38:0c:55:bf:d5:6b:38:9b:1e:74:8e:2d:85:78:d6:
                    8c:99:b2:18:4c:e3:51:52:c8:b5:23:11:bd:a8:92:
                    8c:02:7f:ef:30:87:a2:34:21:96:5e:30:ee:38:6a:
                    e5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:85:94:94:BA:6D:42:F6:0C:8D:C4:CB:3C:CA:0F:E4:60:E6:80:83
            X509v3 Authority Key Identifier:
                keyid:F5:7F:09:9F:D2:71:ED:BB:9C:48:56:8C:A6:AE:35:DA:05:3D:B8:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/1/F57F099FD271EDBB9C48568CA6AE35DA053DB80B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F57F099FD271EDBB9C48568CA6AE35DA053DB80B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/1/323830343a346135343a3a2f33322d3334203d3e20323637323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a54::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:d6:a8:bc:7a:0b:6d:42:de:b1:69:a3:73:dd:70:73:ae:c3:
         cd:0d:60:50:49:28:db:66:e7:93:97:79:f7:9d:fa:8d:62:27:
         72:e5:6a:e3:1f:3a:2f:c2:ea:79:97:22:14:fb:28:64:93:4f:
         54:88:59:34:2f:6c:79:da:bb:3e:e3:67:eb:25:ea:0d:9d:4f:
         12:67:3a:0e:39:0c:75:b7:35:b1:fd:31:9a:70:b2:a2:70:d0:
         d8:b5:05:40:7d:1b:0c:93:65:b3:7d:36:78:b4:13:bf:40:b6:
         5b:30:8b:f3:5b:ac:83:4f:70:45:c4:fe:75:f1:9d:3d:1b:75:
         f5:ec:0d:99:d9:46:c7:bb:5d:83:3b:a4:07:56:67:36:2d:a3:
         18:bc:8b:d7:6f:01:8a:e1:79:4c:38:ca:36:aa:b6:f6:47:49:
         4c:9a:dc:36:84:16:50:70:d0:3e:83:bc:01:14:ec:da:61:18:
         61:09:18:37:97:3d:3f:1b:d1:2b:b0:95:f7:cf:19:56:ce:71:
         c7:2c:16:99:4f:47:44:5d:35:3c:a6:78:67:5d:6f:a1:0e:98:
         f2:43:df:c0:2f:3a:db:97:6d:f1:f3:fc:9a:56:b2:e2:cf:d8:
         71:e4:65:7c:5e:de:7a:f4:fb:7a:a6:f4:75:c6:4e:c9:ec:0c:
         e5:bf:47:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 01:03:14 2024 by rpki-client on console-fra.rpki-client.org