Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/323830343a313038383a3a2f34382d3438203d3e203532393133.roa
File:                     323830343a313038383a3a2f34382d3438203d3e203532393133.roa (raw, json)
Hash identifier:          41VmidUDpifn8ASyjLT7ENcbBf4Q/ZnRLE6DuwN7kIM=
Subject key identifier:   B8:5B:A3:56:29:7D:7B:18:6A:86:5A:9E:0A:C8:DD:8E:47:57:A7:34
Certificate issuer:       /CN=8204A8F62764E655E183BB09417B0875F11B3A7D
Certificate serial:       02D099B7CAD32482CBF24ED9AEF42A21838FA97F
Authority key identifier: 82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/323830343a313038383a3a2f34382d3438203d3e203532393133.roa
Signing time:             Thu 04 Apr 2024 09:45:17 +0000
ROA not before:           Thu 04 Apr 2024 09:40:17 +0000
ROA not after:            Thu 03 Apr 2025 09:45:17 +0000
asID:                     52913
IP address blocks:        2804:1088::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl
                          rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d0:99:b7:ca:d3:24:82:cb:f2:4e:d9:ae:f4:2a:21:83:8f:a9:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8204A8F62764E655E183BB09417B0875F11B3A7D
        Validity
            Not Before: Apr  4 09:40:17 2024 GMT
            Not After : Apr  3 09:45:17 2025 GMT
        Subject: CN=B85BA356297D7B186A865A9E0AC8DD8E4757A734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3b:cc:2a:24:15:8a:88:99:33:9f:1d:14:ca:
                    0a:7b:5c:f9:94:eb:11:fe:63:90:8c:ab:7a:36:81:
                    65:52:e2:90:17:68:73:54:85:be:55:79:39:63:5a:
                    ed:13:19:e6:9f:eb:24:a2:9a:db:64:c5:31:f8:a8:
                    70:5a:e2:fd:23:95:4c:be:66:4e:67:27:00:16:d9:
                    ed:2f:a4:be:f4:cf:3a:73:63:d1:49:ba:99:ef:43:
                    95:39:99:09:6d:19:cb:41:db:0d:dc:f4:c9:61:02:
                    47:e7:6f:69:34:d8:6e:dc:0e:6e:ed:43:59:0d:49:
                    89:bc:8c:a3:33:57:c8:27:16:72:03:77:18:0a:ce:
                    b8:00:ea:97:0c:84:ac:65:c4:64:ce:e5:3f:b0:d0:
                    87:4d:21:65:90:a2:e0:46:0b:20:e7:b2:53:e8:c7:
                    57:62:30:1f:f9:ab:c0:0d:c9:06:3a:01:55:94:79:
                    22:ab:f8:f0:ab:ce:41:97:25:71:f8:6e:05:95:98:
                    3d:47:b5:55:3f:e4:63:02:ed:7b:bf:ce:94:5a:da:
                    46:4d:9a:fe:1f:4a:6a:57:61:bb:7e:00:65:a2:eb:
                    e0:3c:20:13:db:10:5a:10:45:76:d3:63:4f:3c:9b:
                    75:6a:da:06:05:1e:96:7c:f9:1e:4e:37:ed:42:7b:
                    09:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5B:A3:56:29:7D:7B:18:6A:86:5A:9E:0A:C8:DD:8E:47:57:A7:34
            X509v3 Authority Key Identifier:
                keyid:82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/323830343a313038383a3a2f34382d3438203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1088::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:4b:da:be:7b:9b:52:26:f4:d9:73:38:ce:d9:39:3a:d1:9a:
         a1:69:95:6d:bf:be:8c:32:ef:68:f1:3d:14:5c:c2:b6:4d:56:
         a2:72:0d:14:7b:05:54:73:76:1f:8a:7b:69:56:0f:dc:18:25:
         ab:06:a4:b0:c2:a9:ea:85:e4:35:be:1f:5b:8b:3f:23:5e:bf:
         8b:f2:b2:52:5d:9a:0e:03:53:05:ac:39:b9:a5:03:ff:2d:66:
         e6:21:d5:29:03:65:3d:1b:ee:27:c9:62:6b:9e:89:4e:98:0c:
         ab:eb:53:47:c6:d4:b1:f5:75:38:20:f4:de:06:83:95:ec:04:
         61:05:c6:0e:dc:e6:ca:b2:c0:9d:12:f7:62:10:c8:36:46:84:
         dd:1a:94:73:d9:57:92:83:15:da:cd:c0:0a:aa:73:51:89:1d:
         b1:c3:e4:96:49:9e:e2:ea:38:26:88:40:13:9e:0a:58:8a:2c:
         26:84:76:16:e6:8e:21:ff:18:94:59:8d:3f:de:8b:83:75:18:
         c4:7b:c8:94:18:dc:5d:aa:68:a7:0e:d4:ec:02:a5:e8:50:51:
         1d:00:03:0d:ef:79:80:af:0a:80:c8:fe:18:6a:1c:1b:85:61:
         19:1a:1b:35:a7:4c:c7:b4:d9:28:2b:65:9a:fb:ae:fc:41:a8:
         15:13:44:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:20 2024 by rpki-client on console-fra.rpki-client.org