Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/323830343a333464303a3a2f33322d3332203d3e20323635343832.roa
File:                     323830343a333464303a3a2f33322d3332203d3e20323635343832.roa (raw, json)
Hash identifier:          E1UhhFFa3Sn7Bg3P2gYn6naBTaut3etIy9iOdAuLLMw=
Subject key identifier:   79:AA:86:09:6D:90:80:3B:E6:B9:EC:21:2A:AA:F5:FD:C8:7D:65:7B
Certificate issuer:       /CN=AB0A9EADB83F739FC241A002FB1C2A394EECBF50
Certificate serial:       1BF301A604AEA32B78EA1B0B8156A9DC0361B7FE
Authority key identifier: AB:0A:9E:AD:B8:3F:73:9F:C2:41:A0:02:FB:1C:2A:39:4E:EC:BF:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/323830343a333464303a3a2f33322d3332203d3e20323635343832.roa
Signing time:             Thu 25 Apr 2024 13:37:35 +0000
ROA not before:           Thu 25 Apr 2024 13:32:35 +0000
ROA not after:            Thu 24 Apr 2025 13:37:35 +0000
asID:                     265482
IP address blocks:        2804:34d0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.crl
                          rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 04:47:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f3:01:a6:04:ae:a3:2b:78:ea:1b:0b:81:56:a9:dc:03:61:b7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB0A9EADB83F739FC241A002FB1C2A394EECBF50
        Validity
            Not Before: Apr 25 13:32:35 2024 GMT
            Not After : Apr 24 13:37:35 2025 GMT
        Subject: CN=79AA86096D90803BE6B9EC212AAAF5FDC87D657B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f1:6d:02:f0:18:b8:1f:86:ef:36:e5:da:da:
                    ca:76:09:16:56:c4:57:27:70:24:09:b5:de:21:ff:
                    6b:fc:aa:24:c6:ce:e0:57:50:fd:6f:d4:c0:8e:35:
                    1e:6f:e9:d5:df:57:95:86:38:ba:ac:c1:6c:65:cd:
                    c6:fe:51:cf:a3:83:5c:11:e5:7f:96:51:19:91:37:
                    dd:e8:50:4b:ce:73:96:3f:a0:3d:b0:c1:ea:0a:f7:
                    f4:69:20:71:c0:c9:76:fc:06:1d:a4:31:35:48:d3:
                    96:25:ed:61:99:36:51:32:2b:36:09:b0:d7:9b:51:
                    19:a8:88:9d:a4:53:b5:ed:55:65:4a:21:f0:69:d8:
                    a2:ae:3d:8f:5b:bb:91:dd:4f:71:77:e1:64:72:52:
                    5f:92:72:f7:3f:f3:f3:ef:0c:03:04:5f:46:c5:99:
                    8e:54:83:26:b8:99:7e:db:05:90:b6:d0:25:a4:63:
                    d8:f4:16:39:0d:e2:d3:49:d7:8d:fb:40:81:5b:4f:
                    c6:c9:4d:7d:f6:84:ad:2f:b1:b7:3a:27:d2:32:99:
                    78:92:ba:cc:86:60:3f:21:7d:59:a2:a2:72:95:5c:
                    9b:12:44:7e:2e:47:0c:96:44:ab:92:f1:57:8a:a0:
                    70:9d:f8:75:e2:e9:ac:a9:69:d2:82:4f:9a:d1:23:
                    ed:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AA:86:09:6D:90:80:3B:E6:B9:EC:21:2A:AA:F5:FD:C8:7D:65:7B
            X509v3 Authority Key Identifier:
                keyid:AB:0A:9E:AD:B8:3F:73:9F:C2:41:A0:02:FB:1C:2A:39:4E:EC:BF:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/323830343a333464303a3a2f33322d3332203d3e20323635343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:53:21:a5:77:39:36:50:3a:46:fe:81:a3:1a:a6:9e:a0:c4:
         a1:3a:2c:31:d3:18:4d:78:20:b9:b7:12:dd:c9:3e:61:54:a5:
         11:d5:5c:53:7a:49:f8:9c:26:2f:a7:6b:cd:89:35:e7:05:e3:
         46:9a:57:54:57:54:0f:10:3f:ca:13:04:cd:5a:2a:64:23:3d:
         a9:a4:c9:04:9a:19:55:92:1a:ac:39:f1:9f:f9:5a:12:bb:6a:
         31:bd:ed:bc:e2:3b:87:2d:72:59:2d:aa:ce:b4:85:73:e3:0f:
         fa:62:82:be:e9:97:b7:46:d6:f2:1a:27:0d:1a:ed:d8:52:6c:
         d0:c8:d5:a2:64:b1:f9:9e:cc:aa:ed:e8:65:ca:2a:1a:e3:5c:
         5a:c7:13:3c:ad:b8:69:f2:3d:1a:67:20:c9:39:d3:b7:2b:d6:
         fb:2f:c2:2d:52:2d:43:ac:6e:5a:7d:83:ea:c5:08:ee:58:8d:
         8e:0e:cc:4d:c1:90:90:0a:0e:73:05:6a:19:29:96:d1:90:9c:
         c2:41:57:7a:1f:b0:c9:87:65:1d:48:1d:df:0b:12:f0:26:29:
         64:50:c1:72:88:44:d2:75:f6:67:76:68:fc:1a:cc:ec:70:96:
         87:a4:a7:c0:d8:95:15:f2:27:61:14:f5:8c:b6:7e:ce:91:4b:
         5c:65:65:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 05:00:30 2024 by rpki-client on console-fra.rpki-client.org