Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/323830343a346633383a3a2f33322d3332203d3e20323638333132.roa
File:                     323830343a346633383a3a2f33322d3332203d3e20323638333132.roa (raw, json)
Hash identifier:          CySMCeX1F8pLx/OQma+uJeDB02GrZU2CzHAb3GHm590=
Subject key identifier:   CD:0E:FB:D0:8D:A7:A1:ED:38:10:75:D5:C8:AA:B6:71:67:C1:7F:62
Certificate issuer:       /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial:       277BB609F016BA901A5898BF9D71CFB1FD331FFD
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/323830343a346633383a3a2f33322d3332203d3e20323638333132.roa
Signing time:             Wed 03 Apr 2024 18:31:36 +0000
ROA not before:           Wed 03 Apr 2024 18:26:36 +0000
ROA not after:            Wed 02 Apr 2025 18:31:36 +0000
asID:                     268312
IP address blocks:        2804:4f38::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
                          rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:7b:b6:09:f0:16:ba:90:1a:58:98:bf:9d:71:cf:b1:fd:33:1f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
        Validity
            Not Before: Apr  3 18:26:36 2024 GMT
            Not After : Apr  2 18:31:36 2025 GMT
        Subject: CN=CD0EFBD08DA7A1ED381075D5C8AAB67167C17F62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:2b:7d:d3:3a:38:db:ed:97:51:33:05:b4:
                    c1:9b:53:25:64:c4:e0:65:fb:33:1a:43:d7:2f:a5:
                    d9:c7:8f:bd:c8:b7:ed:04:45:ee:e6:2f:37:66:15:
                    8d:52:6e:c0:f0:55:da:01:a4:59:b0:8a:c2:28:04:
                    81:4d:77:a4:ff:e6:cb:ee:02:d4:47:d7:a0:9d:2b:
                    ac:3a:67:df:37:d4:42:b3:f9:4a:23:a7:a0:8b:42:
                    ec:dc:50:c9:92:d2:9e:52:5e:29:18:ee:35:69:f1:
                    fb:52:41:61:62:2a:cb:e7:09:ae:46:36:58:b7:9b:
                    31:32:7c:ab:51:c3:2a:e1:79:1d:50:fd:92:9b:7a:
                    74:a1:8c:cf:9d:c7:b9:af:91:6f:b4:f6:af:82:c1:
                    c2:d4:88:98:45:c6:98:61:21:1c:01:2f:45:5a:d7:
                    9c:e2:19:26:cc:b0:34:08:31:32:5f:81:fc:08:f1:
                    a3:10:a4:f4:11:e6:88:56:f7:bb:f3:20:3b:2d:f5:
                    3f:1b:3f:4e:03:5e:ea:07:d0:48:c8:e1:18:91:e9:
                    66:f2:87:8d:ea:79:bf:fa:84:98:8f:4c:20:59:42:
                    64:71:af:8d:06:7d:2f:96:3a:78:68:d0:ee:ea:d3:
                    33:a0:06:ec:f4:2e:4f:63:d5:0a:2b:ae:06:5a:10:
                    10:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0E:FB:D0:8D:A7:A1:ED:38:10:75:D5:C8:AA:B6:71:67:C1:7F:62
            X509v3 Authority Key Identifier:
                keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/323830343a346633383a3a2f33322d3332203d3e20323638333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f38::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:7f:1e:dc:7a:ff:81:c9:4d:29:11:e9:67:a1:ce:4a:5a:89:
         b8:f4:b2:9a:d9:30:9b:07:0c:57:1f:cc:27:5d:f4:4a:89:4d:
         43:50:43:ca:8f:1e:4d:4d:32:28:35:2c:40:91:2e:9e:e9:03:
         16:3c:54:90:ce:d6:69:71:28:68:91:ad:54:f9:48:cb:53:42:
         31:a6:a8:53:64:87:fc:43:98:43:e4:4b:04:3e:0c:59:39:3a:
         94:e0:71:e2:db:ea:9e:c1:96:ad:2c:91:e1:20:40:87:51:30:
         af:fa:7c:c8:50:e6:3f:38:d0:17:1e:03:0a:bb:06:db:12:3b:
         49:49:1d:81:71:e9:b4:3f:cb:b5:40:82:7e:1c:21:88:ae:6e:
         25:c1:a9:34:cc:b8:00:d9:c3:65:15:85:6f:6b:9f:ce:d0:a6:
         2a:e1:17:6c:c5:00:cc:ed:a8:8f:6d:e1:b1:e2:9f:8d:2e:27:
         c4:cf:b3:44:03:68:e7:8e:6e:48:a9:d0:c5:e7:09:cd:56:4d:
         3a:06:de:41:94:b2:7c:74:a0:fb:56:ea:ab:40:be:ea:4a:ad:
         8f:48:f6:5c:a2:5c:93:80:bd:e1:e0:ef:41:ba:87:6b:ed:82:
         cc:14:6f:7d:7d:2b:7c:ae:10:ce:26:10:1a:b9:48:74:6b:5b:
         6b:fb:48:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:39 2024 by rpki-client on console-fra.rpki-client.org