Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/323830343a313839383a3a2f33322d3430203d3e203631393432.roa
File:                     323830343a313839383a3a2f33322d3430203d3e203631393432.roa (raw, json)
Hash identifier:          tLunkILYwMjBuwTJrzNeXJEfEp5n7ST7a64Y9QM9gjU=
Subject key identifier:   8A:5D:D2:64:AE:D0:94:59:80:DA:A1:9C:6F:7B:E6:8C:8F:70:58:3C
Certificate issuer:       /CN=0EC8EAC7F1F5A216824B37118697748825F314D9
Certificate serial:       63A54B083C436588287B5CE9D32B16CA5CD22C1B
Authority key identifier: 0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/323830343a313839383a3a2f33322d3430203d3e203631393432.roa
Signing time:             Mon 22 Apr 2024 14:24:53 +0000
ROA not before:           Mon 22 Apr 2024 14:19:53 +0000
ROA not after:            Mon 21 Apr 2025 14:24:53 +0000
asID:                     61942
IP address blocks:        2804:1898::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl
                          rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a5:4b:08:3c:43:65:88:28:7b:5c:e9:d3:2b:16:ca:5c:d2:2c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EC8EAC7F1F5A216824B37118697748825F314D9
        Validity
            Not Before: Apr 22 14:19:53 2024 GMT
            Not After : Apr 21 14:24:53 2025 GMT
        Subject: CN=8A5DD264AED0945980DAA19C6F7BE68C8F70583C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:00:7d:6c:57:d7:43:6e:35:d7:1c:2a:c0:37:
                    ad:ec:dd:51:81:d5:37:c3:03:c2:99:9d:19:e2:64:
                    53:58:15:9d:4d:e6:29:18:0e:d0:b1:20:c6:ae:27:
                    c1:5e:09:1c:4a:71:20:5b:92:8e:ae:6b:8c:59:e8:
                    bf:51:12:3a:38:a3:37:27:56:26:94:d3:4d:41:d8:
                    a9:d2:a6:43:9a:49:39:74:8b:f4:4b:b9:60:69:eb:
                    83:53:01:b8:4e:d6:b0:b6:3f:41:d3:8e:6d:60:fb:
                    12:a8:cd:90:a7:25:f5:2b:ce:17:7a:b1:68:fe:bb:
                    a9:ee:a1:41:d1:45:0d:93:91:6a:9e:5b:12:bb:1f:
                    60:0e:f4:3b:53:58:9b:88:ac:3e:a4:43:bb:b1:a7:
                    88:e5:4e:de:ce:d4:9d:e5:bf:c2:b2:3a:bd:a9:e0:
                    13:5c:d0:6a:19:4e:47:63:38:e0:d6:13:29:1c:82:
                    68:e8:a9:60:7c:35:e7:47:89:8a:72:24:0d:3d:d0:
                    d0:3a:d3:c9:03:01:f5:a3:0f:f9:17:dc:67:f6:d6:
                    c6:4d:b4:88:8a:2a:ab:3f:8b:b7:7e:a4:43:ff:3c:
                    e8:8c:d0:04:e8:70:26:50:c2:3f:0a:3a:49:17:d3:
                    cc:9d:c5:4c:97:d0:c2:03:06:12:e0:5b:f9:b1:f5:
                    77:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5D:D2:64:AE:D0:94:59:80:DA:A1:9C:6F:7B:E6:8C:8F:70:58:3C
            X509v3 Authority Key Identifier:
                keyid:0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/323830343a313839383a3a2f33322d3430203d3e203631393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1898::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:4f:d1:9c:9f:1b:58:fb:d3:b1:45:67:7e:12:7f:51:28:5d:
         71:8b:58:0e:cf:6f:60:7a:ee:31:48:e2:6b:bc:f9:ef:bb:d8:
         6b:ba:6e:cf:6e:1e:bd:03:f0:d8:fc:cd:f7:58:11:36:a7:5f:
         5b:ab:28:25:bc:40:f7:99:c5:c1:07:9d:b6:99:79:16:59:82:
         30:f1:dd:49:bc:07:2a:d0:f4:ef:83:82:3b:9b:d3:1d:de:53:
         e1:f6:f8:45:c7:d6:ef:50:6b:23:a1:1c:0a:69:e9:bc:3e:89:
         41:56:c4:4f:36:29:b5:69:f2:1d:c4:a3:82:86:c0:f6:20:5b:
         28:a9:d6:65:5e:c4:2c:ac:94:25:d2:29:97:5d:3e:ad:2e:92:
         b6:c2:06:19:fd:9a:33:a2:aa:a3:78:f7:f9:ea:b3:63:21:be:
         2f:f2:22:17:1e:20:68:c5:1c:04:78:78:15:15:68:63:11:db:
         4e:e1:e3:34:57:18:db:28:ed:a1:40:c0:79:46:37:0c:d4:5c:
         d5:7d:f6:96:74:7c:2c:4b:3a:fc:e7:cf:9b:80:ea:01:3b:a7:
         52:39:fc:49:da:70:bc:f0:d9:9d:b6:72:32:96:27:8c:1a:9a:
         f4:09:ab:67:60:ca:06:48:06:a7:59:ee:bf:5c:5e:57:8e:29:
         70:fc:45:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:33 2024 by rpki-client on console-ams.rpki-client.org