Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/323830343a326264343a3a2f33322d3438203d3e20323635313738.roa
File:                     323830343a326264343a3a2f33322d3438203d3e20323635313738.roa (raw, json)
Hash identifier:          vH2IukB3s1HNcV0gtj+xWD4jOYfVYlgfbOcM9S7uV34=
Subject key identifier:   A8:CC:8F:8F:DD:A6:25:E6:6A:ED:7A:86:41:64:C5:A3:95:45:B1:F7
Certificate issuer:       /CN=F1235457026EAF53D000A07A2EA16F0BF1D5A588
Certificate serial:       17EA5C898C519139C45D39653B3CC9B671AE5D2C
Authority key identifier: F1:23:54:57:02:6E:AF:53:D0:00:A0:7A:2E:A1:6F:0B:F1:D5:A5:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/323830343a326264343a3a2f33322d3438203d3e20323635313738.roa
Signing time:             Thu 04 Apr 2024 16:40:16 +0000
ROA not before:           Thu 04 Apr 2024 16:35:16 +0000
ROA not after:            Thu 03 Apr 2025 16:40:16 +0000
asID:                     265178
IP address blocks:        2804:2bd4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.crl
                          rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ea:5c:89:8c:51:91:39:c4:5d:39:65:3b:3c:c9:b6:71:ae:5d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1235457026EAF53D000A07A2EA16F0BF1D5A588
        Validity
            Not Before: Apr  4 16:35:16 2024 GMT
            Not After : Apr  3 16:40:16 2025 GMT
        Subject: CN=A8CC8F8FDDA625E66AED7A864164C5A39545B1F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a2:19:07:fd:31:9e:af:f2:86:84:92:1b:d2:
                    4f:1e:dc:51:35:89:e2:db:dc:d3:16:27:f8:9d:47:
                    d3:15:72:54:7a:52:99:7d:af:6a:bc:dd:0f:0a:8a:
                    ed:1a:76:8a:c2:34:a7:e6:5b:6b:30:ff:1b:2c:a0:
                    f6:92:f3:93:bb:c4:55:cb:2b:fd:02:6d:97:e2:16:
                    7b:99:27:31:1e:9c:76:23:c6:a0:2a:7e:a3:07:f4:
                    6e:ba:da:01:10:ec:7a:67:99:a0:1f:e0:e4:ae:46:
                    2a:5e:d1:76:0d:1a:50:1f:44:81:05:33:3b:44:d4:
                    fa:39:b5:96:5a:9a:7e:4f:a3:97:50:96:26:29:7f:
                    c7:93:05:3c:44:0d:da:f5:70:3d:46:a1:33:61:7b:
                    98:f5:de:04:02:18:d3:b0:04:41:5f:0c:93:61:ad:
                    b8:ac:5c:dd:af:5d:0c:b7:66:1e:68:1d:ca:35:0f:
                    5d:ad:c2:fa:40:3f:97:1b:53:5d:01:07:e1:a6:09:
                    5c:6a:ab:e7:e6:9e:ad:c4:1b:55:19:64:6c:af:82:
                    c7:66:47:af:fa:11:6f:5c:2f:e1:d6:fc:d2:97:aa:
                    0c:ef:88:9a:85:d0:3e:10:46:5c:8a:49:1f:3c:2b:
                    fe:f2:ff:47:fc:17:83:7e:0e:62:ac:65:1a:0a:1a:
                    83:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CC:8F:8F:DD:A6:25:E6:6A:ED:7A:86:41:64:C5:A3:95:45:B1:F7
            X509v3 Authority Key Identifier:
                keyid:F1:23:54:57:02:6E:AF:53:D0:00:A0:7A:2E:A1:6F:0B:F1:D5:A5:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/323830343a326264343a3a2f33322d3438203d3e20323635313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:49:1d:4a:ef:c4:4b:4b:39:71:e3:42:5b:af:ea:07:9f:93:
         32:80:4c:92:2b:ab:40:00:ae:db:7c:fa:ad:38:55:31:5a:5a:
         80:72:65:5a:6d:52:2d:8b:a8:d6:40:1c:81:e9:da:ed:cd:3c:
         33:ad:88:de:38:63:f3:ee:9e:26:98:3c:af:a6:7a:62:8f:97:
         4f:d9:6a:1e:24:ad:5a:fb:ad:97:b6:3b:19:89:f2:1e:eb:8e:
         58:c9:1d:7b:6e:34:32:c0:bb:f4:e7:3d:df:92:ad:c8:49:44:
         8a:4e:b2:41:7a:87:07:15:55:be:83:9b:0c:75:c2:5c:f0:40:
         cb:0e:d7:1f:04:db:5c:d1:99:65:fe:93:7c:c5:43:91:43:5d:
         c3:18:ee:c5:b2:6e:ce:92:25:25:05:a3:5c:be:fe:1d:9e:dc:
         c0:a4:80:e8:2d:29:75:9f:31:af:43:e3:db:a5:a7:d7:de:5d:
         9c:1c:82:37:f5:d9:1a:d5:dc:cf:3b:88:1d:a5:97:9a:f3:10:
         98:b9:ec:b0:68:4e:ca:0a:e9:f0:22:9a:d3:27:c5:c0:fe:60:
         b6:10:1e:f6:35:b2:5d:df:e3:92:79:4b:f9:06:43:63:37:f8:
         a1:4b:e3:40:68:f4:c0:96:eb:68:62:5b:d9:90:cc:fd:1e:c0:
         0f:6d:ad:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:49 2024 by rpki-client on console-fra.rpki-client.org