Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/323830343a343762343a3a2f33322d3332203d3e20323637303732.roa
File:                     323830343a343762343a3a2f33322d3332203d3e20323637303732.roa (raw, json)
Hash identifier:          XwGR30u2akkwR3KDHBxVUGURBw8wBTUb3uTZZlIqnas=
Subject key identifier:   7C:0E:98:2E:52:BF:01:F2:70:41:FD:C9:B4:19:CA:9A:9C:10:B7:31
Certificate issuer:       /CN=A942C31B9D70569B2761518A130F2D4756DBFC61
Certificate serial:       60D3793DFD8F275FCB70E134B9844C594A1C5CE9
Authority key identifier: A9:42:C3:1B:9D:70:56:9B:27:61:51:8A:13:0F:2D:47:56:DB:FC:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/323830343a343762343a3a2f33322d3332203d3e20323637303732.roa
Signing time:             Wed 03 Apr 2024 18:31:39 +0000
ROA not before:           Wed 03 Apr 2024 18:26:39 +0000
ROA not after:            Wed 02 Apr 2025 18:31:39 +0000
asID:                     267072
IP address blocks:        2804:47b4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.crl
                          rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 02:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d3:79:3d:fd:8f:27:5f:cb:70:e1:34:b9:84:4c:59:4a:1c:5c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A942C31B9D70569B2761518A130F2D4756DBFC61
        Validity
            Not Before: Apr  3 18:26:39 2024 GMT
            Not After : Apr  2 18:31:39 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3d:3c:a4:db:b3:ed:51:25:c6:90:b5:26:da:
                    32:cf:3e:d9:82:c4:c2:cb:33:4c:59:da:d2:c0:f0:
                    c3:39:b7:fe:1e:e8:88:0a:47:cb:8f:65:63:83:f3:
                    25:77:c5:53:83:50:e9:cc:5f:7d:04:68:c4:84:80:
                    78:96:5c:82:c1:80:e7:6c:9a:0c:14:22:53:9a:49:
                    cf:e6:af:b6:01:0a:be:44:f3:00:76:02:ae:2e:ae:
                    e7:fc:34:f5:31:30:03:46:64:72:3f:5f:e9:69:0a:
                    c6:81:6a:a4:34:1e:72:e6:d4:1f:41:30:fc:df:17:
                    76:89:0c:fd:df:fb:e0:cd:a5:56:88:c0:d8:17:fa:
                    24:1e:01:7a:c1:c3:44:28:af:d5:48:57:52:95:03:
                    ed:eb:4b:09:0d:d6:46:39:05:fe:e5:12:df:e3:65:
                    2a:59:24:6e:0f:f9:b9:57:be:a1:5a:66:21:50:3f:
                    c2:b6:d9:2b:cd:cc:1f:4c:0e:06:8c:71:66:93:bd:
                    13:4d:c8:dc:a3:a9:b4:6b:01:c6:bc:53:3c:10:4c:
                    52:03:7d:3e:c7:a6:11:13:b8:b7:4c:4d:b8:c5:79:
                    fb:6a:52:18:61:73:f4:4e:d9:0f:df:a9:6a:a4:53:
                    41:04:e5:13:ee:dd:db:43:b7:03:01:47:1c:5f:85:
                    d3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0E:98:2E:52:BF:01:F2:70:41:FD:C9:B4:19:CA:9A:9C:10:B7:31
            X509v3 Authority Key Identifier:
                keyid:A9:42:C3:1B:9D:70:56:9B:27:61:51:8A:13:0F:2D:47:56:DB:FC:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/323830343a343762343a3a2f33322d3332203d3e20323637303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:5e:e4:8b:d3:99:76:b6:f7:b6:02:54:76:29:7a:d4:5b:0c:
         6b:bf:15:5e:6d:33:20:7b:96:1e:3f:fd:59:ba:b7:a9:0e:e0:
         6d:50:fb:65:29:5b:ac:ed:97:9a:c7:71:0c:26:34:30:57:ef:
         03:ee:d1:3c:10:1d:cc:c5:2d:a4:f2:c9:b3:77:75:be:46:c9:
         50:2d:dc:c3:9b:0a:be:de:b8:f6:9f:74:64:92:86:a6:9d:42:
         3c:52:6f:0f:1a:5f:d1:80:37:82:0f:35:76:fc:5d:39:a7:a1:
         72:ab:b9:66:dd:48:c0:95:62:88:e1:20:d9:b5:f7:8f:6d:0b:
         ee:d6:be:ff:3d:6e:28:ab:28:6a:f3:d2:22:94:d9:2c:41:ae:
         87:f7:26:b5:5e:fd:69:7c:02:5c:67:db:c1:a1:67:1a:8d:73:
         c3:4f:aa:44:fc:9e:16:d5:fe:b5:35:89:13:54:4b:98:0e:51:
         01:c3:a5:60:ad:11:15:da:12:2e:dc:43:0e:4c:85:7d:a0:de:
         cd:80:9b:0b:2e:b2:be:42:d6:1e:b2:20:04:1d:f4:0d:9f:51:
         34:17:87:dc:1a:8f:ff:49:ae:d5:de:cd:ea:f2:c0:3e:91:70:
         67:f6:48:cd:b9:9a:1e:27:87:18:9c:fa:e5:60:5e:02:d5:33:
         7e:25:29:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:04:01 2024 by rpki-client on console-fra.rpki-client.org