Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/1/323830343a353339343a3a2f33322d3438203d3e20323638353933.roa
File:                     323830343a353339343a3a2f33322d3438203d3e20323638353933.roa (raw, json)
Hash identifier:          dzbTFZFt7AeX9Y1l+r+6ygpBHp2yNQJ5tzPec1xycZE=
Subject key identifier:   28:BB:42:0F:1B:C9:C0:84:6C:DC:3E:53:D9:13:36:20:98:F3:0B:87
Certificate issuer:       /CN=22377022A32DC670182F5C02A6E1E234ECF2F9C0
Certificate serial:       2F469A791F4E513ADE4904703A68C9B708D21CE4
Authority key identifier: 22:37:70:22:A3:2D:C6:70:18:2F:5C:02:A6:E1:E2:34:EC:F2:F9:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/1/323830343a353339343a3a2f33322d3438203d3e20323638353933.roa
Signing time:             Wed 03 Apr 2024 22:47:17 +0000
ROA not before:           Wed 03 Apr 2024 22:42:17 +0000
ROA not after:            Wed 02 Apr 2025 22:47:17 +0000
asID:                     268593
IP address blocks:        2804:5394::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.crl
                          rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:46:9a:79:1f:4e:51:3a:de:49:04:70:3a:68:c9:b7:08:d2:1c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22377022A32DC670182F5C02A6E1E234ECF2F9C0
        Validity
            Not Before: Apr  3 22:42:17 2024 GMT
            Not After : Apr  2 22:47:17 2025 GMT
        Subject: CN=28BB420F1BC9C0846CDC3E53D913362098F30B87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1f:96:05:7c:e7:50:87:45:99:ae:84:ec:d8:
                    b0:1f:ed:b6:46:6c:17:b5:07:8e:0c:b4:fc:1e:5c:
                    e2:dd:99:8f:70:5d:f2:87:61:eb:d0:f3:dd:1a:f9:
                    0e:d0:e4:ee:a3:1b:e3:f3:10:26:d2:3a:d5:d6:e3:
                    ca:38:16:8a:8e:b8:fe:9f:11:9a:7f:a5:cb:f5:f3:
                    e0:fb:19:19:8e:49:47:87:be:d4:b2:b6:fb:d7:69:
                    d1:26:58:ff:b3:1d:19:1e:7c:1a:2d:ae:23:a0:ff:
                    24:d0:43:0a:f7:11:bd:8b:0c:40:73:6a:a1:c1:98:
                    b9:79:36:9f:ff:89:5d:b9:eb:69:8e:a1:ec:2b:ef:
                    b8:a4:c5:77:06:4a:af:aa:53:fa:b3:87:04:0c:ff:
                    46:7e:da:03:59:c0:7a:88:27:1b:17:b1:4f:c3:7b:
                    84:5c:5e:e8:09:6f:03:15:e6:9d:21:09:4a:45:ed:
                    98:ad:25:f1:da:0d:fb:55:77:4c:a3:c7:95:30:f9:
                    d9:09:13:4e:ff:18:f1:c6:2e:e2:1f:ce:74:e4:e3:
                    a5:8a:02:ad:43:0e:8b:f3:32:9a:98:e2:9a:78:73:
                    fa:b6:bb:d0:07:07:76:a2:fe:24:6c:ae:6b:24:cf:
                    53:ea:8f:31:46:b3:0c:18:24:73:2c:6a:b6:46:83:
                    cb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BB:42:0F:1B:C9:C0:84:6C:DC:3E:53:D9:13:36:20:98:F3:0B:87
            X509v3 Authority Key Identifier:
                keyid:22:37:70:22:A3:2D:C6:70:18:2F:5C:02:A6:E1:E2:34:EC:F2:F9:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/1/323830343a353339343a3a2f33322d3438203d3e20323638353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5394::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:87:e5:4a:a8:8f:24:f3:4f:02:ad:72:3d:88:5b:37:18:c7:
         07:dc:c3:dc:59:79:02:1b:d1:d0:78:cb:6d:fa:af:e0:dd:8e:
         f5:b4:9f:4c:aa:ea:b0:45:b4:c6:cd:55:cb:2a:6d:ac:19:b6:
         72:16:75:13:18:20:5e:80:d4:35:fb:07:b4:81:ae:0a:cf:ad:
         ea:3d:5d:64:68:7d:39:56:44:c2:f6:d9:85:e5:7c:d1:1a:18:
         cf:0a:8c:de:32:b4:14:b9:91:0e:06:fc:2f:7b:4d:4c:e2:bd:
         79:01:ea:9d:58:7f:c6:25:8f:f5:69:32:77:21:26:84:88:5f:
         19:87:07:a7:79:ee:14:6e:96:57:fb:12:d0:f6:bb:d9:8d:94:
         d7:b4:a6:f6:5f:7b:9c:f4:08:43:59:15:bd:e4:a5:a6:ed:41:
         14:e4:a8:dd:e4:bd:d1:61:67:89:ba:31:04:16:63:3d:da:72:
         50:18:ab:27:15:6f:23:f8:06:d5:6e:ae:c7:ea:22:81:5e:03:
         e4:0f:22:1d:61:ad:62:21:d9:61:85:15:a1:6d:63:b6:ef:70:
         c0:5e:67:d6:d0:0f:50:c4:06:5e:17:44:5e:bc:59:b9:7e:b2:
         67:e3:17:1f:70:db:53:7a:fb:14:9b:06:19:93:08:17:23:3b:
         6d:90:20:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:07 2024 by rpki-client on console-fra.rpki-client.org