Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/1/323830343a383631343a3a2f33322d3438203d3e20323732363139.roa
File:                     323830343a383631343a3a2f33322d3438203d3e20323732363139.roa (raw, json)
Hash identifier:          NsScME2Cgi5zqrjWOfCgKmCr5TJ79s+pMQx6Go1qSbA=
Subject key identifier:   1F:A9:EF:08:55:6F:AC:9C:8C:D3:DB:77:5C:BE:C1:0A:E7:E5:2F:3D
Certificate issuer:       /CN=D607005F25F56B01F763AA26F3C0AC0089ED899E
Certificate serial:       111886EA1A6BF112940FABEA56659FB61817E829
Authority key identifier: D6:07:00:5F:25:F5:6B:01:F7:63:AA:26:F3:C0:AC:00:89:ED:89:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D607005F25F56B01F763AA26F3C0AC0089ED899E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/1/323830343a383631343a3a2f33322d3438203d3e20323732363139.roa
Signing time:             Thu 04 Apr 2024 18:39:22 +0000
ROA not before:           Thu 04 Apr 2024 18:34:22 +0000
ROA not after:            Thu 03 Apr 2025 18:39:22 +0000
asID:                     272619
IP address blocks:        2804:8614::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/1/D607005F25F56B01F763AA26F3C0AC0089ED899E.crl
                          rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/1/D607005F25F56B01F763AA26F3C0AC0089ED899E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D607005F25F56B01F763AA26F3C0AC0089ED899E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:18:86:ea:1a:6b:f1:12:94:0f:ab:ea:56:65:9f:b6:18:17:e8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D607005F25F56B01F763AA26F3C0AC0089ED899E
        Validity
            Not Before: Apr  4 18:34:22 2024 GMT
            Not After : Apr  3 18:39:22 2025 GMT
        Subject: CN=1FA9EF08556FAC9C8CD3DB775CBEC10AE7E52F3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ec:86:39:cc:16:2b:21:ed:28:5b:b5:c4:60:
                    34:c5:82:54:07:45:3e:42:41:ba:3c:df:6e:f2:b7:
                    9a:c8:63:86:53:b8:0e:86:56:85:76:6e:6c:2c:79:
                    55:3d:17:6e:8e:09:4b:1b:0e:66:41:dd:4e:db:23:
                    ba:99:66:85:85:44:50:08:89:39:53:13:cd:d4:ec:
                    92:05:43:0a:62:1b:94:b6:1f:ea:e8:a0:2a:1d:55:
                    af:17:c4:82:03:7e:45:6e:8d:a4:cb:94:90:47:6b:
                    2b:77:bc:8c:80:a9:00:18:6b:ad:2f:db:3d:3d:65:
                    e5:9d:b6:d2:30:55:5d:48:20:c2:25:e4:74:44:96:
                    18:3c:ca:04:92:cc:4c:3b:d2:9a:32:c1:c0:ee:db:
                    b5:de:a0:87:09:a8:b6:67:83:50:c1:f2:f7:40:8e:
                    71:95:05:35:96:43:13:e2:3b:84:58:10:fa:e9:db:
                    2b:54:c0:d8:97:06:8f:14:30:d6:87:49:50:37:f1:
                    a3:07:a1:68:f0:24:cc:ce:72:dd:01:9e:f0:5c:c3:
                    4f:f2:d6:b7:eb:87:b8:48:c2:7a:8d:0f:05:51:68:
                    97:63:38:3c:a3:d7:fb:d7:0c:12:e0:c8:12:70:ff:
                    d5:13:c3:b7:90:eb:ca:b3:54:71:27:51:9f:92:d8:
                    4c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A9:EF:08:55:6F:AC:9C:8C:D3:DB:77:5C:BE:C1:0A:E7:E5:2F:3D
            X509v3 Authority Key Identifier:
                keyid:D6:07:00:5F:25:F5:6B:01:F7:63:AA:26:F3:C0:AC:00:89:ED:89:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/1/D607005F25F56B01F763AA26F3C0AC0089ED899E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D607005F25F56B01F763AA26F3C0AC0089ED899E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/1/323830343a383631343a3a2f33322d3438203d3e20323732363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8614::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:e2:ab:ab:11:4d:83:bb:d4:4d:33:ad:41:58:bf:ca:64:a0:
         c8:25:30:e7:48:25:6e:b5:9b:7d:e0:11:81:c7:51:26:70:51:
         d9:d3:f1:3b:af:af:f0:b5:e5:9b:ec:f1:00:2c:c5:a1:c7:6a:
         53:f4:84:70:c3:cf:09:0c:95:63:8f:ad:3a:14:98:22:23:c1:
         54:bb:2b:f3:96:64:ca:77:7b:a5:bb:8f:b5:1b:a2:4e:96:df:
         c0:bb:b8:16:8b:41:61:ab:cf:af:66:56:82:ae:4e:00:b2:5c:
         4e:ed:01:dc:44:4c:8e:d7:61:09:87:81:cd:5d:ce:d6:a3:0b:
         72:eb:ab:77:77:6b:fe:2b:b9:0f:12:6d:8b:90:55:95:34:e6:
         d2:46:29:96:ec:91:b0:23:ad:5a:6a:5f:cb:c2:cf:7a:27:2a:
         38:7f:3e:10:f7:71:1a:ce:04:30:9a:f2:a3:fa:56:5b:83:df:
         62:ce:46:38:a0:d1:62:73:bc:33:0a:13:fa:7e:1b:6d:63:a9:
         5d:0a:55:41:87:df:f0:0b:ab:35:e3:59:c3:75:98:55:4f:90:
         08:c4:fd:d8:63:7d:90:b6:28:a1:9b:39:a6:4e:45:0d:0f:e8:
         ab:7c:a2:b6:02:9b:7b:5f:b0:d9:f7:03:cd:c6:e2:c7:8d:81:
         d8:4c:7f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:50:44 2024 by rpki-client on console-fra.rpki-client.org