Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a3a2f33322d3336203d3e20323634313230.roa
File:                     323830343a323263303a3a2f33322d3336203d3e20323634313230.roa (raw, json)
Hash identifier:          eMtb65h8C1Ul8oOyzRQtZ5AaZf62OuEDe9jZTxj9D4k=
Subject key identifier:   62:B0:C0:7F:10:4F:2A:22:63:E1:02:01:90:57:0A:D8:12:56:CD:00
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       66806A48E798150A1F5869B32AB562C2427530E8
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a3a2f33322d3336203d3e20323634313230.roa
Signing time:             Thu 04 Apr 2024 11:35:21 +0000
ROA not before:           Thu 04 Apr 2024 11:30:21 +0000
ROA not after:            Thu 03 Apr 2025 11:35:21 +0000
asID:                     264120
IP address blocks:        2804:22c0::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:80:6a:48:e7:98:15:0a:1f:58:69:b3:2a:b5:62:c2:42:75:30:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Apr  4 11:30:21 2024 GMT
            Not After : Apr  3 11:35:21 2025 GMT
        Subject: CN=62B0C07F104F2A2263E1020190570AD81256CD00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:79:f1:71:33:d5:25:1d:d9:96:d7:af:5a:b6:
                    48:a6:93:7c:ae:61:20:86:24:a9:27:97:52:6c:d2:
                    1f:f6:09:63:12:80:da:95:a6:18:84:dc:5a:04:62:
                    b0:6f:eb:70:45:3f:af:65:03:93:9e:d6:c7:33:20:
                    39:52:bd:f4:f6:d0:4b:07:bd:91:cc:78:14:2a:b3:
                    57:b1:30:18:a4:be:0e:a9:db:bf:a2:20:3a:f5:f9:
                    bb:6f:fd:17:b4:32:87:10:50:5a:1f:9a:8d:35:13:
                    3f:67:3c:dc:15:e2:da:68:29:81:d4:d2:38:be:99:
                    3f:6a:c6:83:04:32:7c:98:ca:f1:4e:d2:d4:89:45:
                    f8:58:e8:5c:ff:32:ea:76:70:6e:30:63:ac:fd:f2:
                    17:89:45:b7:dd:97:3b:f9:94:a2:7c:eb:98:e8:a4:
                    95:6c:44:f2:9b:43:a9:21:86:c3:8f:61:4c:a7:e3:
                    bd:c5:b0:46:61:23:8c:b4:7f:92:5a:de:b5:f9:7a:
                    16:e6:e5:2a:ed:12:08:e1:18:b1:ba:bd:5b:00:2c:
                    31:b1:2a:f2:ff:10:78:d6:a5:c5:db:e5:42:aa:da:
                    be:3c:e8:73:70:c1:1c:9b:f7:90:3f:21:70:3d:15:
                    9f:9c:f9:55:59:bd:11:68:9a:e1:1b:15:db:d5:e4:
                    4a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B0:C0:7F:10:4F:2A:22:63:E1:02:01:90:57:0A:D8:12:56:CD:00
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a3a2f33322d3336203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:10:3e:91:b6:ae:0b:8d:26:03:b5:30:1d:38:65:6d:23:db:
         3b:7e:ab:e4:b7:bd:ef:d2:f1:1d:4f:13:36:d7:33:72:db:17:
         b7:0e:73:ab:cc:58:05:f8:c2:27:72:a3:ca:32:17:33:86:d9:
         b0:2a:58:97:ae:d9:f5:41:96:70:b9:e3:3b:6b:7a:ef:6a:48:
         ef:7b:60:1f:60:d1:81:88:26:fd:99:55:cf:bd:3c:52:00:3a:
         4f:ce:33:0d:8e:3a:0a:eb:b2:fc:1c:ea:a2:db:88:bd:66:86:
         24:2d:a7:8b:3b:65:75:32:15:ef:e4:fc:5b:94:6c:73:fb:40:
         e4:86:2a:e4:11:9f:10:e5:98:e9:70:7d:37:be:9b:e0:e2:f0:
         a5:ec:57:2d:08:d8:c3:df:3e:65:ee:c6:ab:df:8e:8e:b4:90:
         75:5d:94:27:54:07:84:61:22:ae:67:ec:e8:1e:68:b8:66:30:
         1c:d1:67:5d:4d:68:84:45:3a:d3:0f:16:d3:ce:61:a2:e3:f6:
         82:55:85:86:c0:7c:1b:27:2b:ca:49:2a:4a:3a:53:fd:49:e5:
         3d:84:1b:30:23:78:d2:e0:e0:ac:ec:81:8c:a2:8e:bf:98:de:
         cc:c2:09:8c:d2:6d:e9:c7:35:08:e0:6f:f1:28:f6:a1:3e:6c:
         a6:b1:7f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:31 2024 by rpki-client on console-fra.rpki-client.org