Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/1/323830343a6636343a3a2f33322d3438203d3e20323633353833.roa
File:                     323830343a6636343a3a2f33322d3438203d3e20323633353833.roa (raw, json)
Hash identifier:          0WsAWxECdMbW0PnpAfTQo4UC+cJ9BXRoT6jDY+o066E=
Subject key identifier:   E8:01:8C:43:BD:04:EB:F4:7F:2F:29:0D:CE:D1:C0:75:24:5A:14:78
Certificate issuer:       /CN=70BAE02CA9CA43A42EB5004D7620B0E4D01E2147
Certificate serial:       36FE556E50179AE53A5154F63DD965F226AE2676
Authority key identifier: 70:BA:E0:2C:A9:CA:43:A4:2E:B5:00:4D:76:20:B0:E4:D0:1E:21:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BAE02CA9CA43A42EB5004D7620B0E4D01E2147.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/1/323830343a6636343a3a2f33322d3438203d3e20323633353833.roa
Signing time:             Thu 04 Apr 2024 03:01:15 +0000
ROA not before:           Thu 04 Apr 2024 02:56:15 +0000
ROA not after:            Thu 03 Apr 2025 03:01:15 +0000
asID:                     263583
IP address blocks:        2804:f64::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/1/70BAE02CA9CA43A42EB5004D7620B0E4D01E2147.crl
                          rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/1/70BAE02CA9CA43A42EB5004D7620B0E4D01E2147.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BAE02CA9CA43A42EB5004D7620B0E4D01E2147.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:fe:55:6e:50:17:9a:e5:3a:51:54:f6:3d:d9:65:f2:26:ae:26:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70BAE02CA9CA43A42EB5004D7620B0E4D01E2147
        Validity
            Not Before: Apr  4 02:56:15 2024 GMT
            Not After : Apr  3 03:01:15 2025 GMT
        Subject: CN=E8018C43BD04EBF47F2F290DCED1C075245A1478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:39:d6:a9:8a:ea:ba:96:65:19:54:23:6a:8b:
                    c0:73:71:bb:b1:5e:6e:78:30:96:79:1e:e8:b6:3b:
                    fa:08:ec:c5:8e:c9:bf:f9:54:23:f4:7d:ea:f6:98:
                    ed:a2:ec:10:e6:cb:14:ef:c3:1d:e4:31:ad:57:d0:
                    7e:dd:68:a5:7e:4b:31:89:42:4f:35:cd:b9:29:49:
                    95:e6:7d:02:f2:3b:b1:18:fd:15:6d:3b:7f:48:03:
                    2f:44:e1:9d:0e:67:67:e4:00:be:81:2a:d4:1b:26:
                    79:c1:8a:6d:c1:07:ec:b6:38:0d:72:13:31:f0:24:
                    ad:d6:e0:28:cf:9f:b6:12:0b:e5:38:85:72:5b:ca:
                    aa:67:19:ef:46:73:ef:72:38:b2:fe:17:dc:9f:f7:
                    86:9d:24:06:d5:e3:1f:12:6e:09:db:fd:d9:0d:4b:
                    01:2a:b4:83:e4:31:1c:f5:58:55:2a:ea:7f:dc:80:
                    a4:3f:a3:53:f8:b7:85:58:c9:5e:fb:86:13:88:75:
                    ca:17:f7:a1:9c:33:eb:26:6a:ff:17:02:64:39:cb:
                    a9:4e:c6:99:be:3f:e5:34:22:01:c7:05:e8:e2:e1:
                    77:00:8c:1b:be:5f:d7:ca:78:16:e5:a7:e2:82:36:
                    35:ec:2f:f6:d1:9c:6e:ef:ff:f4:48:60:d3:8d:56:
                    7b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:01:8C:43:BD:04:EB:F4:7F:2F:29:0D:CE:D1:C0:75:24:5A:14:78
            X509v3 Authority Key Identifier:
                keyid:70:BA:E0:2C:A9:CA:43:A4:2E:B5:00:4D:76:20:B0:E4:D0:1E:21:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/1/70BAE02CA9CA43A42EB5004D7620B0E4D01E2147.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BAE02CA9CA43A42EB5004D7620B0E4D01E2147.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/1/323830343a6636343a3a2f33322d3438203d3e20323633353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f64::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:b2:a5:0f:ab:fe:2a:8c:55:be:66:23:d1:d4:54:83:7d:87:
         52:02:41:64:e4:c7:03:b4:1f:39:f8:be:6a:7d:6a:a8:b5:9e:
         cc:5e:05:c4:8e:51:5f:cf:5d:71:f2:b5:4c:0d:1c:07:91:6c:
         91:6b:80:17:54:e8:8f:70:1a:eb:73:af:f9:6c:13:79:d4:dc:
         09:5d:95:b6:b8:2e:3d:46:b9:2e:21:f4:6f:41:25:2a:a4:6e:
         51:a8:ae:13:85:dd:27:0e:2d:a4:2c:d1:22:d7:f7:d1:70:cf:
         d2:27:3c:84:6c:ce:40:2b:49:f5:a5:1e:96:d6:6d:4b:40:5f:
         54:09:e3:dc:24:53:95:02:98:6f:eb:be:20:16:ad:87:fb:b5:
         cb:77:7b:6a:ab:fd:fd:2e:3b:be:8a:a8:44:a7:5f:1e:6d:c6:
         72:72:d5:6c:36:c7:b8:d4:e6:5d:a7:09:8c:6a:0c:70:53:a5:
         a2:a9:ac:bf:1c:ff:c0:6a:49:2d:46:72:da:a0:5f:0a:bd:8f:
         1d:cf:5b:d8:b8:43:eb:c5:e4:ed:a7:98:92:f8:ad:8e:0e:9f:
         d5:b4:f5:34:22:5a:57:3b:bf:6d:25:69:73:e9:1f:46:ee:8f:
         cf:a8:9d:45:95:1e:26:83:b9:f3:92:79:6d:7d:38:3e:23:28:
         0a:8e:74:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:50:45 2024 by rpki-client on console-fra.rpki-client.org