Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/323830343a326539633a3a2f33322d3438203d3e20323635333535.roa
File:                     323830343a326539633a3a2f33322d3438203d3e20323635333535.roa (raw, json)
Hash identifier:          erAaQCkQgmpWtthS4wzs7A8EsOSYNvqPqoqk/bq+WUs=
Subject key identifier:   2D:47:1B:75:52:A4:64:36:C8:FA:62:2D:03:93:45:2A:70:7B:54:F5
Certificate issuer:       /CN=3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE
Certificate serial:       69D8A8BABC7810225C5BEDB9056718B3D8E1E526
Authority key identifier: 30:87:C3:71:0F:B1:C5:ED:2A:38:12:24:F1:E8:1B:AC:39:DA:7F:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/323830343a326539633a3a2f33322d3438203d3e20323635333535.roa
Signing time:             Wed 03 Apr 2024 20:40:53 +0000
ROA not before:           Wed 03 Apr 2024 20:35:53 +0000
ROA not after:            Wed 02 Apr 2025 20:40:53 +0000
asID:                     265355
IP address blocks:        2804:2e9c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.crl
                          rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d8:a8:ba:bc:78:10:22:5c:5b:ed:b9:05:67:18:b3:d8:e1:e5:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE
        Validity
            Not Before: Apr  3 20:35:53 2024 GMT
            Not After : Apr  2 20:40:53 2025 GMT
        Subject: CN=2D471B7552A46436C8FA622D0393452A707B54F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0b:73:2b:d9:aa:a8:99:a1:6d:40:04:f7:e1:
                    6b:d4:1c:01:34:16:c6:58:48:85:5b:1a:19:16:7f:
                    ee:b6:31:4f:2f:49:87:27:5b:6f:63:8a:47:7f:bf:
                    48:0a:23:0a:cb:3c:0a:77:c1:be:bf:d9:80:7c:d5:
                    fa:5a:e0:e3:be:8c:44:6a:60:ed:48:a0:30:a3:2d:
                    03:1f:be:18:23:1e:7c:41:32:fa:b4:5a:02:a9:da:
                    28:e7:e8:cc:d2:af:90:da:e7:66:68:d3:52:ae:aa:
                    d1:f4:55:9b:e2:01:07:c3:da:69:46:0a:9b:07:41:
                    54:94:a1:97:de:ea:0f:af:87:32:39:af:28:1c:d6:
                    01:88:de:42:b7:e9:06:ed:3f:55:e8:1a:3f:ac:4f:
                    02:a1:74:2a:91:ef:9e:fe:86:a0:6e:39:ba:8a:3d:
                    d6:29:6e:b2:06:40:93:9c:2c:7f:94:59:fa:76:f1:
                    a6:bd:86:e5:5b:80:6c:48:58:2e:31:92:22:e5:b2:
                    df:f8:86:70:07:ed:d0:3f:97:ae:00:9d:f0:88:08:
                    bc:af:c9:70:2c:d1:57:1e:7b:31:ad:8f:c9:8f:10:
                    d8:12:b8:35:a6:e2:cd:44:9d:64:21:f8:a1:c8:7f:
                    50:f0:ff:86:94:f5:2f:e5:e3:31:5e:73:23:c3:3c:
                    1d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:47:1B:75:52:A4:64:36:C8:FA:62:2D:03:93:45:2A:70:7B:54:F5
            X509v3 Authority Key Identifier:
                keyid:30:87:C3:71:0F:B1:C5:ED:2A:38:12:24:F1:E8:1B:AC:39:DA:7F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/323830343a326539633a3a2f33322d3438203d3e20323635333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:0c:cf:49:24:71:74:b3:2e:22:da:70:42:08:1c:62:c6:9e:
         ac:53:d6:53:bf:1e:f3:74:cf:c3:5c:d9:98:24:05:8e:e9:6f:
         80:44:35:b9:37:e2:a6:39:9d:c2:64:ad:0b:94:d7:83:bb:59:
         39:0f:c4:b7:0f:f3:4e:34:cd:65:92:93:a8:88:2c:f9:3d:8c:
         c6:d6:6f:61:d3:ea:35:13:31:b1:98:c3:b8:ba:80:fd:ec:01:
         46:70:5d:7a:81:f1:11:79:5b:70:53:95:36:c7:6d:73:73:68:
         9f:2e:97:00:23:96:fa:e6:dc:4e:e8:c8:04:79:5a:d5:99:d2:
         85:df:71:ba:af:ac:c8:08:97:c6:11:b8:15:43:d6:ef:f5:e9:
         ea:15:8a:c3:99:f4:bc:71:ec:97:ed:c1:10:dc:8a:85:33:a1:
         75:3b:b8:d6:3e:76:e8:d1:52:4c:ac:b5:72:c3:64:99:cd:94:
         f3:5e:ec:1a:b2:93:77:5a:4f:c1:82:6a:b2:8c:02:6f:57:54:
         33:fb:83:44:2c:0d:33:a1:df:7c:dd:03:b9:fe:30:23:a3:70:
         0c:57:81:63:c2:3e:2d:e0:17:aa:58:5c:43:22:07:e4:e0:ef:
         d6:e1:c8:ee:d2:fe:ca:c4:fa:3d:bb:f3:e2:24:8c:7d:e4:01:
         5b:74:6f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:11 2024 by rpki-client on console-ams.rpki-client.org