Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/323830343a376530633a3a2f33322d3332203d3e20323731353939.roa
File:                     323830343a376530633a3a2f33322d3332203d3e20323731353939.roa (raw, json)
Hash identifier:          Z5Vd0fI3x8cQx1Y157VE4lCFWstMsQ5XDsePL4Rl2O4=
Subject key identifier:   39:7D:45:CE:6D:68:A8:19:12:94:1A:AB:97:14:A2:60:93:34:AF:EE
Certificate issuer:       /CN=085B4B97D0BA72E679EC0F52343750221AD51660
Certificate serial:       5BBE7AABF6A364CC16AF57435B94AF84DF49A754
Authority key identifier: 08:5B:4B:97:D0:BA:72:E6:79:EC:0F:52:34:37:50:22:1A:D5:16:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085B4B97D0BA72E679EC0F52343750221AD51660.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/323830343a376530633a3a2f33322d3332203d3e20323731353939.roa
Signing time:             Thu 04 Apr 2024 13:04:32 +0000
ROA not before:           Thu 04 Apr 2024 12:59:32 +0000
ROA not after:            Thu 03 Apr 2025 13:04:32 +0000
asID:                     271599
IP address blocks:        2804:7e0c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/085B4B97D0BA72E679EC0F52343750221AD51660.crl
                          rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/085B4B97D0BA72E679EC0F52343750221AD51660.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085B4B97D0BA72E679EC0F52343750221AD51660.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:23:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:be:7a:ab:f6:a3:64:cc:16:af:57:43:5b:94:af:84:df:49:a7:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085B4B97D0BA72E679EC0F52343750221AD51660
        Validity
            Not Before: Apr  4 12:59:32 2024 GMT
            Not After : Apr  3 13:04:32 2025 GMT
        Subject: CN=397D45CE6D68A81912941AAB9714A2609334AFEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cd:3f:b7:4b:ec:10:39:c2:57:e2:bb:58:e9:
                    56:9e:6a:90:36:ce:d6:c9:4e:97:62:e7:42:51:8f:
                    a6:85:ff:b5:83:12:f8:1b:c7:08:0d:cb:20:69:b6:
                    4c:2c:61:d3:fa:cc:8f:55:80:41:3f:9f:18:7a:26:
                    a7:0a:97:12:05:ad:da:d2:d8:ae:da:c1:d6:ab:d9:
                    ab:8a:1e:00:3d:90:3a:68:03:27:21:b8:ea:12:d1:
                    7a:bc:04:3f:a8:13:ae:ef:fd:50:8d:96:05:11:38:
                    6c:63:50:90:48:18:a1:88:56:26:bc:5f:ac:e6:f8:
                    ab:45:d0:8b:b6:cc:14:92:58:ce:cb:41:93:42:b5:
                    18:39:81:cc:bb:1b:57:47:7a:e5:b4:28:e1:44:d3:
                    a1:3d:6c:07:cd:41:d8:34:ce:aa:03:5e:90:67:36:
                    c9:40:3c:62:53:af:a2:47:8a:a1:7d:e3:73:91:89:
                    c3:1e:1e:87:d8:a6:da:cd:83:a1:a2:49:10:a4:65:
                    98:39:08:14:98:6d:60:11:a3:9d:fd:00:82:e8:64:
                    f5:31:b7:25:9b:7f:dc:f8:88:b2:3b:fa:5d:13:bc:
                    fc:49:8b:77:69:87:39:08:ca:47:44:f1:47:7d:d0:
                    2b:0c:cd:cf:90:e0:4a:74:ae:5e:b5:e0:58:77:8e:
                    ea:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7D:45:CE:6D:68:A8:19:12:94:1A:AB:97:14:A2:60:93:34:AF:EE
            X509v3 Authority Key Identifier:
                keyid:08:5B:4B:97:D0:BA:72:E6:79:EC:0F:52:34:37:50:22:1A:D5:16:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/085B4B97D0BA72E679EC0F52343750221AD51660.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085B4B97D0BA72E679EC0F52343750221AD51660.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/323830343a376530633a3a2f33322d3332203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:51:b1:99:3a:34:ea:dd:5c:72:58:4b:bb:99:55:8a:96:47:
         08:3d:f8:49:41:85:91:30:48:de:eb:b2:28:55:b9:54:ce:d0:
         0d:53:5b:4e:f2:b6:11:15:4b:e1:68:ed:14:c0:91:45:ac:5b:
         85:2b:41:73:a7:f7:f5:00:c6:e2:40:c2:aa:a1:98:0c:ba:45:
         ff:9b:7b:19:b0:3b:f6:ff:31:6c:93:83:28:07:31:51:12:5f:
         4a:12:df:1f:e3:db:85:fb:be:8e:9d:94:e4:87:0f:a4:27:32:
         24:98:21:7d:9f:c0:62:4f:a9:6a:57:ea:41:bd:9a:3d:c8:0f:
         2b:79:7a:9c:15:5b:8b:92:82:7d:9c:53:83:1f:71:0e:7a:e9:
         f5:95:5a:c8:b9:13:48:95:1f:9c:8b:c6:6b:42:cf:9d:db:de:
         2e:f6:46:0b:e8:a0:d7:39:fb:ca:78:6c:e5:e1:22:8d:28:9f:
         e9:9d:7e:53:43:15:f3:1b:23:dc:35:8b:41:2b:5b:64:ef:86:
         cb:80:e5:33:82:f4:3f:45:a4:f8:10:0c:31:41:77:78:e5:73:
         43:f9:09:6e:67:4d:b9:01:45:5f:1d:a9:f6:60:0a:8f:ff:15:
         d6:01:f1:99:fa:7c:6f:93:fc:77:65:0b:77:0e:ee:60:4a:c4:
         7e:64:8e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:14 2024 by rpki-client on console-fra.rpki-client.org