Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/323830343a333936383a3a2f33322d3438203d3e20323636303239.roa
File:                     323830343a333936383a3a2f33322d3438203d3e20323636303239.roa (raw, json)
Hash identifier:          nrwjhphjeXoiER955YrVa0dkRKOgbnHn+53m8/ehuQw=
Subject key identifier:   E5:B2:85:24:21:B6:56:CC:65:EC:88:06:48:AF:15:ED:EA:F7:CD:61
Certificate issuer:       /CN=805C6FE75C34FDC115E99EA4D436A5282E5055B6
Certificate serial:       42560B4B120D3AB78032F4BB86051D300AC9BAAD
Authority key identifier: 80:5C:6F:E7:5C:34:FD:C1:15:E9:9E:A4:D4:36:A5:28:2E:50:55:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/323830343a333936383a3a2f33322d3438203d3e20323636303239.roa
Signing time:             Thu 04 Apr 2024 10:14:56 +0000
ROA not before:           Thu 04 Apr 2024 10:09:56 +0000
ROA not after:            Thu 03 Apr 2025 10:14:56 +0000
asID:                     266029
IP address blocks:        2804:3968::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.crl
                          rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:08:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:56:0b:4b:12:0d:3a:b7:80:32:f4:bb:86:05:1d:30:0a:c9:ba:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=805C6FE75C34FDC115E99EA4D436A5282E5055B6
        Validity
            Not Before: Apr  4 10:09:56 2024 GMT
            Not After : Apr  3 10:14:56 2025 GMT
        Subject: CN=E5B2852421B656CC65EC880648AF15EDEAF7CD61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:b0:43:2e:44:20:fd:a0:ae:f6:e9:7b:0c:
                    9d:07:51:a8:e0:76:c1:8a:ca:b5:43:0f:1f:5b:ce:
                    5b:79:23:1a:2f:c4:26:d6:8c:6a:f0:8a:e7:54:5b:
                    46:1a:b9:03:01:7d:8d:1a:3f:f4:58:e9:ce:63:19:
                    88:75:5f:b2:92:1c:7d:a0:e3:37:b9:f3:88:44:c1:
                    e3:4e:08:d4:d9:7f:e3:bb:96:68:1e:4a:79:43:6d:
                    b4:b2:55:f6:c5:3d:bd:33:bd:5f:77:39:2b:18:22:
                    07:3c:de:eb:6e:7e:96:44:75:05:e7:73:0d:3a:3b:
                    4f:63:30:c5:54:9d:92:e1:07:a5:78:66:35:37:c7:
                    83:55:46:94:f2:0d:9a:0e:aa:2d:52:51:c3:a8:e6:
                    1e:ab:72:43:6e:7e:a4:1c:5d:1d:3a:a1:7d:b7:e5:
                    03:d4:35:fd:f1:3b:6e:c0:6e:cb:07:d7:db:d4:c4:
                    48:e2:b3:e1:74:8c:5b:66:c7:eb:73:a1:ca:06:83:
                    d4:da:ee:c3:77:5c:d9:1f:d8:c4:57:d1:00:ce:b3:
                    0e:1c:a9:b8:aa:10:d4:98:08:02:df:20:7a:f5:4d:
                    a7:06:7b:5b:fa:fd:a5:bc:5e:e5:04:ee:64:70:ee:
                    2f:ff:5b:8e:b7:28:1e:7c:c2:bd:d0:97:4a:5e:f4:
                    a5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B2:85:24:21:B6:56:CC:65:EC:88:06:48:AF:15:ED:EA:F7:CD:61
            X509v3 Authority Key Identifier:
                keyid:80:5C:6F:E7:5C:34:FD:C1:15:E9:9E:A4:D4:36:A5:28:2E:50:55:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/323830343a333936383a3a2f33322d3438203d3e20323636303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3968::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:dc:eb:fd:1a:ef:61:65:54:71:bf:74:f8:18:f6:d6:c2:ee:
         a9:a1:01:ca:6c:e5:56:7f:0e:72:cd:d4:14:23:ff:23:49:b5:
         3e:bd:28:1d:18:75:76:cc:ae:6e:84:e4:70:c6:47:70:3d:be:
         4e:5a:f0:1c:49:c3:f9:d9:8f:3b:b9:20:61:17:95:5a:38:3d:
         a4:ee:b6:75:d0:96:c4:05:cf:8a:05:e3:22:b2:c6:1f:c6:24:
         8e:56:06:54:0d:34:2a:f8:05:f8:76:aa:5a:f1:39:fb:1b:d2:
         28:8d:d6:0e:ad:5f:ec:f6:ac:09:d3:86:63:03:7c:7c:e7:a3:
         48:f9:2b:9b:19:b7:fa:2f:8d:d0:bf:75:a5:91:76:7f:63:2c:
         e7:94:90:99:ef:8d:02:85:44:38:c4:69:2f:7a:57:30:84:71:
         64:11:4c:83:05:e7:a7:24:97:36:a3:86:4e:48:25:f8:e0:1d:
         59:9f:ad:8f:64:95:d0:3f:b0:ef:a0:30:6d:ef:76:0d:be:9c:
         f0:bf:35:a2:ad:0b:0b:82:ca:4f:35:73:32:af:43:7e:33:fb:
         4d:b6:ee:05:a2:5e:55:e6:c3:f1:ce:8e:c4:7e:d3:36:32:28:
         c4:86:7b:18:10:43:25:c6:04:8e:da:ff:ec:82:40:99:fc:c9:
         a8:35:5b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:06 2024 by rpki-client on console-fra.rpki-client.org