Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/323830343a313038383a313a3a2f34382d3438203d3e203532393133.roa
File:                     323830343a313038383a313a3a2f34382d3438203d3e203532393133.roa (raw, json)
Hash identifier:          Wc9FeoEkrqTztYCh9LJ3+18xg/bxaF6JTVbzunEtJbQ=
Subject key identifier:   10:09:9B:1C:26:67:A4:3F:7B:01:CC:58:09:5E:91:6F:C0:B2:FA:C4
Certificate issuer:       /CN=8204A8F62764E655E183BB09417B0875F11B3A7D
Certificate serial:       6AA2CF0C800B1A5BA309BB5CA24CED6BBD880446
Authority key identifier: 82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/323830343a313038383a313a3a2f34382d3438203d3e203532393133.roa
Signing time:             Thu 04 Apr 2024 09:45:17 +0000
ROA not before:           Thu 04 Apr 2024 09:40:17 +0000
ROA not after:            Thu 03 Apr 2025 09:45:17 +0000
asID:                     52913
IP address blocks:        2804:1088:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl
                          rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a2:cf:0c:80:0b:1a:5b:a3:09:bb:5c:a2:4c:ed:6b:bd:88:04:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8204A8F62764E655E183BB09417B0875F11B3A7D
        Validity
            Not Before: Apr  4 09:40:17 2024 GMT
            Not After : Apr  3 09:45:17 2025 GMT
        Subject: CN=10099B1C2667A43F7B01CC58095E916FC0B2FAC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7d:c0:d6:67:2d:7a:60:ae:66:22:6e:11:9c:
                    c1:39:98:b9:11:1f:95:2e:b1:86:70:20:d3:0c:14:
                    39:e6:58:00:c0:71:3d:9a:a0:44:49:1f:50:1b:83:
                    28:e2:ed:0e:55:16:14:14:f0:ef:6f:c9:78:6a:8e:
                    70:75:7f:63:61:03:53:35:de:b0:c1:71:65:3b:a7:
                    d2:8f:25:5b:e3:22:40:4b:e7:91:75:88:25:e8:c8:
                    60:33:01:01:dc:76:a1:1b:b0:24:39:ee:de:4b:76:
                    3f:2b:7f:19:84:6f:ad:ff:e1:ac:63:d3:27:54:93:
                    a1:ce:e1:4e:44:b2:2c:7a:d2:2a:d1:41:94:9a:6f:
                    80:fd:3d:8a:76:eb:6a:c0:11:57:18:85:30:de:5f:
                    44:8a:9b:52:d4:e7:ae:74:37:80:07:18:cc:df:38:
                    db:44:95:9d:ca:77:82:0e:07:b6:e4:9b:52:48:21:
                    97:d9:6e:66:80:a6:fc:3d:e0:e5:ef:1a:b7:4d:96:
                    b3:98:d4:d9:3a:27:54:1a:f4:b9:f1:52:f6:40:1a:
                    ea:5c:77:1c:67:0d:9f:cc:b7:d1:68:be:6e:b8:c7:
                    7a:43:3e:da:71:8b:20:bc:46:c6:de:5b:b0:20:bc:
                    31:d3:01:c8:25:c8:b6:ef:bf:1f:4c:2f:0e:9a:90:
                    cf:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:09:9B:1C:26:67:A4:3F:7B:01:CC:58:09:5E:91:6F:C0:B2:FA:C4
            X509v3 Authority Key Identifier:
                keyid:82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/323830343a313038383a313a3a2f34382d3438203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1088:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:f9:c4:68:92:bc:ee:d1:37:ba:d4:45:29:12:e3:ec:f5:04:
         c8:c8:b4:aa:d5:be:04:9b:c5:3c:cd:5c:aa:92:df:fa:91:a8:
         f6:32:44:cb:8f:27:80:1c:58:b4:29:b8:4b:a5:2f:60:f1:c3:
         bf:e2:f6:63:7c:01:7a:3b:35:f8:3c:16:3d:c1:07:1d:01:0b:
         0c:d9:64:c0:8a:f2:26:0a:6a:e8:f7:ac:05:69:d5:9e:92:49:
         31:f7:4d:73:22:7c:d8:9d:5d:de:18:96:30:6f:bb:de:1a:1f:
         d0:12:0a:b1:9b:71:47:87:6a:90:fe:96:9b:61:10:54:39:60:
         9a:b3:31:14:2f:01:dc:d2:70:db:4c:9d:07:79:51:fb:9b:10:
         8d:a7:f7:c0:aa:5e:7e:a1:18:2a:96:ab:b7:77:44:43:e1:df:
         7a:c1:d6:e7:0b:06:18:50:09:57:bf:94:4d:ad:69:48:06:18:
         9e:4b:d5:02:c6:6b:75:54:1c:28:e8:7b:da:6f:71:87:77:58:
         bb:8b:ce:63:05:72:cb:da:00:32:d9:ba:38:68:16:04:eb:06:
         ac:9a:2a:1b:04:04:21:73:e8:4f:56:86:b6:96:89:1f:60:9d:
         52:53:5e:55:0b:1d:e6:95:07:04:e5:00:09:f3:ef:ae:f0:c9:
         32:05:f2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:20 2024 by rpki-client on console-fra.rpki-client.org