Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/323830343a6134383a3a2f33322d3438203d3e20323633303834.roa
File:                     323830343a6134383a3a2f33322d3438203d3e20323633303834.roa (raw, json)
Hash identifier:          V2jbRzUxI/3H8jGaiOrKR09xP7CgQkFzmyoZeK8lCUk=
Subject key identifier:   34:50:17:B0:8F:F3:F4:71:DE:B2:A7:C8:4B:9F:EE:5A:A9:79:62:22
Certificate issuer:       /CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
Certificate serial:       25AA2CE8A9528BBA2E66937C0CD80CD416F00097
Authority key identifier: 2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/323830343a6134383a3a2f33322d3438203d3e20323633303834.roa
Signing time:             Wed 05 Jun 2024 19:30:43 +0000
ROA not before:           Wed 05 Jun 2024 19:25:43 +0000
ROA not after:            Wed 04 Jun 2025 19:30:43 +0000
asID:                     263084
IP address blocks:        2804:a48::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl
                          rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:aa:2c:e8:a9:52:8b:ba:2e:66:93:7c:0c:d8:0c:d4:16:f0:00:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
        Validity
            Not Before: Jun  5 19:25:43 2024 GMT
            Not After : Jun  4 19:30:43 2025 GMT
        Subject: CN=345017B08FF3F471DEB2A7C84B9FEE5AA9796222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5e:cc:76:22:d6:7d:d6:04:98:12:b2:a3:24:
                    36:fc:d9:8e:77:f7:b4:f6:33:bb:e7:7b:a6:80:34:
                    5a:96:db:5b:28:38:fa:07:63:59:d5:88:35:d8:4b:
                    a7:59:17:f5:2a:53:56:56:f1:2d:7a:61:84:57:69:
                    47:c4:d2:33:42:6e:59:91:95:36:e7:ba:42:ef:61:
                    c9:0b:7c:07:67:a0:19:dc:74:b3:d8:22:26:79:8a:
                    30:35:79:09:e2:40:e4:e6:18:e2:d4:35:32:3f:ad:
                    64:17:4b:2d:33:71:1e:96:44:73:6c:c4:eb:e4:53:
                    9a:0c:15:c9:be:5c:aa:fb:73:e4:e6:73:c4:bb:de:
                    d3:e2:15:59:27:5f:58:2e:92:9f:aa:06:2c:1c:e4:
                    53:bf:bc:77:23:67:15:1a:e9:b9:9c:47:96:de:d5:
                    58:22:28:34:21:19:d8:9f:f1:0e:e5:ff:59:c9:03:
                    37:e6:3a:4f:02:e1:d1:81:86:e9:ce:73:ee:92:ef:
                    86:25:a5:9f:ea:9f:db:dc:94:a4:e1:c6:e5:fb:e9:
                    6d:7e:24:56:da:07:b3:4a:82:26:c9:62:9c:31:cd:
                    87:93:8d:e6:1a:84:a9:fa:4f:12:d4:cb:e1:01:cf:
                    84:d8:e6:da:bd:d4:ff:f5:b1:0f:bd:1d:d3:5d:ca:
                    8d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:50:17:B0:8F:F3:F4:71:DE:B2:A7:C8:4B:9F:EE:5A:A9:79:62:22
            X509v3 Authority Key Identifier:
                keyid:2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/323830343a6134383a3a2f33322d3438203d3e20323633303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a48::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:98:df:cc:e2:8f:bc:9d:50:eb:b1:2f:ac:24:2c:0f:85:a8:
         43:12:d1:03:d3:9d:a6:64:5c:23:c3:45:36:a8:49:52:58:0b:
         e6:cf:3c:90:ed:32:bb:2f:19:ec:0f:2a:51:16:07:cb:db:68:
         27:27:72:d8:10:f8:e9:28:12:03:98:c4:45:20:33:89:28:32:
         46:1b:d9:52:e3:31:49:84:40:66:d2:65:32:68:c8:17:a1:3a:
         0a:b1:07:d3:1c:de:b5:3d:5a:88:5c:19:8c:f4:68:25:50:83:
         fc:92:73:fa:49:b5:53:34:90:6f:d2:6f:fc:8e:c9:09:80:b1:
         db:db:6b:f4:3e:9c:ca:9c:b9:ce:d5:b6:f6:54:d5:4d:06:02:
         ca:85:41:87:f1:a0:1b:64:c0:0b:c7:09:55:1e:4f:31:1b:2f:
         29:1c:95:88:ee:10:e2:db:4c:fd:d1:ad:69:d7:e2:99:55:52:
         8f:ed:2a:89:e1:12:bc:11:c0:24:fa:6c:af:7f:fc:05:8d:0d:
         13:73:ab:79:16:51:68:e6:8b:36:3c:97:65:09:27:bb:46:6e:
         39:e1:af:ac:da:12:29:2e:db:92:81:44:81:27:34:2a:02:88:
         96:37:b8:b8:3b:0d:16:1f:82:15:14:a2:e9:56:5a:6e:cf:d9:
         9a:7e:60:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:42:55 2024 by rpki-client on console-fra.rpki-client.org