Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/323830343a383530633a3a2f33362d3336203d3e20323732353534.roa
File:                     323830343a383530633a3a2f33362d3336203d3e20323732353534.roa (raw, json)
Hash identifier:          68+coQdYHio1wefS/GEQd/r+YeCnLj81UxpVm/ay0hE=
Subject key identifier:   52:20:50:38:B4:73:A5:76:03:32:1C:6B:D7:2E:F3:17:5E:46:6C:D0
Certificate issuer:       /CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
Certificate serial:       3459F54B09F063708B3CFFF422C964135CABA7F3
Authority key identifier: 19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/323830343a383530633a3a2f33362d3336203d3e20323732353534.roa
Signing time:             Thu 04 Apr 2024 05:06:40 +0000
ROA not before:           Thu 04 Apr 2024 05:01:40 +0000
ROA not after:            Thu 03 Apr 2025 05:06:40 +0000
asID:                     272554
IP address blocks:        2804:850c::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl
                          rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:18:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:59:f5:4b:09:f0:63:70:8b:3c:ff:f4:22:c9:64:13:5c:ab:a7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
        Validity
            Not Before: Apr  4 05:01:40 2024 GMT
            Not After : Apr  3 05:06:40 2025 GMT
        Subject: CN=52205038B473A57603321C6BD72EF3175E466CD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:29:4e:4f:25:c4:05:f6:e0:32:1b:7d:1f:c9:
                    d9:4c:11:19:52:21:00:36:fb:86:88:8c:45:59:a7:
                    02:b1:29:4a:9b:5a:51:22:92:7c:70:48:68:aa:e4:
                    fa:d8:78:f3:17:ed:44:12:c7:1a:db:6a:49:69:af:
                    f1:1a:38:74:b8:35:d7:d1:68:c8:29:fa:1e:23:30:
                    ed:27:b4:2e:6f:50:4e:4b:5b:72:33:c5:fa:bd:94:
                    6f:5e:b3:0c:ca:46:76:d4:7b:51:34:96:5d:da:ef:
                    5c:21:32:31:f1:b0:fe:0a:73:27:9b:7f:c3:18:00:
                    05:5a:6f:c5:16:8e:dc:ab:3a:e9:88:11:ba:6b:15:
                    77:07:13:46:51:2c:99:c1:25:3b:12:61:02:eb:7f:
                    ce:67:32:c7:e6:53:da:74:40:ee:36:bc:71:28:87:
                    ee:85:f3:9a:c5:88:8a:ac:84:39:e6:eb:01:87:ca:
                    4d:4a:15:0e:7e:b3:65:bd:d9:d4:b5:81:3d:08:23:
                    62:22:da:c8:af:c9:f9:85:65:b2:1c:9e:43:19:28:
                    c7:19:5f:d9:07:e8:3b:62:b0:9c:41:c7:e9:68:f7:
                    c9:5d:0a:4a:02:58:f8:50:66:d0:5f:8e:6e:7b:51:
                    46:3e:4b:84:8e:2d:40:2e:97:39:a9:25:3e:fa:83:
                    80:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:20:50:38:B4:73:A5:76:03:32:1C:6B:D7:2E:F3:17:5E:46:6C:D0
            X509v3 Authority Key Identifier:
                keyid:19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/323830343a383530633a3a2f33362d3336203d3e20323732353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:850c::/36

    Signature Algorithm: sha256WithRSAEncryption
         4e:39:6b:59:61:ae:34:a6:58:ef:94:d5:1a:6d:b7:59:30:da:
         d6:40:7a:70:d1:b4:e3:2b:19:98:d3:86:04:d5:d6:d8:d4:28:
         11:69:82:78:ad:01:bc:ee:3a:56:9d:00:e3:de:20:78:b7:fb:
         5f:73:f7:88:87:6c:a0:6b:83:0b:a8:da:5a:05:17:93:4b:48:
         ba:42:8c:af:2c:6c:ac:e9:b4:61:d4:30:2a:88:9b:08:50:de:
         d2:08:10:b0:a4:e4:5d:42:95:7a:0b:91:1f:fa:f7:e5:87:1b:
         d2:66:48:0e:08:16:fe:d6:b5:5c:34:b0:4f:e4:b4:55:f6:dc:
         a5:5e:24:13:7b:d4:8d:43:a6:1c:b3:01:a4:0a:8f:0b:cc:97:
         dd:54:ed:9b:04:62:89:5f:cd:61:8d:a0:c4:ac:d0:e0:99:1e:
         49:46:e3:27:08:c6:e3:50:22:e6:c7:91:03:39:d0:0a:d8:fb:
         b4:d0:39:bf:9f:65:9d:74:c3:18:a1:30:f7:1f:1d:7a:96:ec:
         a5:0a:2a:5d:88:77:bf:6d:2d:e3:c4:fa:35:14:ca:4e:dd:73:
         05:66:3b:77:2c:7c:53:7a:a4:77:1c:26:a6:06:b9:b2:ee:34:
         87:ca:12:b6:76:df:d0:60:62:e5:11:3f:c5:ad:a2:a2:79:27:
         93:e5:1b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:38 2024 by rpki-client on console-fra.rpki-client.org