Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/1/323830343a356162383a3a2f33322d3334203d3e20323638373931.roa
File:                     323830343a356162383a3a2f33322d3334203d3e20323638373931.roa (raw, json)
Hash identifier:          dBvEgjnUbQKbnVC6DPrllaavhlFcPc/bgTaSl1zALeU=
Subject key identifier:   11:57:7D:F6:D6:AA:E9:FB:84:72:95:BF:BF:EB:6E:49:6D:EF:89:74
Certificate issuer:       /CN=AC1072CCDEF9467DA0A709A02C47E32C059CFEC5
Certificate serial:       66022FBBEB526BF65FBC2690BA40B42190B79E87
Authority key identifier: AC:10:72:CC:DE:F9:46:7D:A0:A7:09:A0:2C:47:E3:2C:05:9C:FE:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1072CCDEF9467DA0A709A02C47E32C059CFEC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/1/323830343a356162383a3a2f33322d3334203d3e20323638373931.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     268791
IP address blocks:        2804:5ab8::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/1/AC1072CCDEF9467DA0A709A02C47E32C059CFEC5.crl
                          rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/1/AC1072CCDEF9467DA0A709A02C47E32C059CFEC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1072CCDEF9467DA0A709A02C47E32C059CFEC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:02:2f:bb:eb:52:6b:f6:5f:bc:26:90:ba:40:b4:21:90:b7:9e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1072CCDEF9467DA0A709A02C47E32C059CFEC5
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:dd:e2:75:9c:8d:6a:8b:c3:50:25:5c:41:db:
                    38:3b:d2:78:c7:28:29:90:52:2f:0b:a7:ce:24:a5:
                    39:8b:fe:ef:41:bd:fd:99:a5:da:9b:64:a6:8d:2b:
                    f7:61:a6:3e:7c:d7:46:73:df:e9:f6:17:05:8e:0a:
                    60:b9:f7:35:27:66:00:f5:2d:c1:9c:7d:0b:bf:a4:
                    b8:ad:a3:3b:e5:eb:4b:d1:14:46:d3:4c:20:57:fc:
                    79:42:ff:22:dd:69:ce:db:be:b1:15:2c:7f:af:00:
                    44:32:75:78:b7:c6:45:9a:9c:84:2c:7a:25:3d:49:
                    c2:c2:f7:f6:77:5e:de:22:94:28:62:ea:15:f4:4e:
                    85:60:a0:ad:23:91:22:6d:dd:5e:5c:e2:4a:19:cd:
                    2d:7a:6e:fb:c8:b4:4c:8b:07:6c:78:4f:c3:87:4b:
                    0e:e0:5a:e8:74:b5:e2:de:24:f4:32:4d:40:0f:5d:
                    86:45:f0:3d:c1:75:91:91:71:31:34:d3:d2:ed:6f:
                    b5:d7:45:ff:39:be:99:95:c8:2a:b3:95:e8:4b:5d:
                    92:18:eb:b2:cb:fe:de:d5:d6:d8:00:b8:66:80:e0:
                    72:61:b0:5f:82:09:08:5c:fd:29:2c:f6:bc:b1:a1:
                    33:f9:cd:b1:e0:28:ad:ff:ca:00:ca:f1:a5:6d:3e:
                    6a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:57:7D:F6:D6:AA:E9:FB:84:72:95:BF:BF:EB:6E:49:6D:EF:89:74
            X509v3 Authority Key Identifier:
                keyid:AC:10:72:CC:DE:F9:46:7D:A0:A7:09:A0:2C:47:E3:2C:05:9C:FE:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/1/AC1072CCDEF9467DA0A709A02C47E32C059CFEC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1072CCDEF9467DA0A709A02C47E32C059CFEC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/1/323830343a356162383a3a2f33322d3334203d3e20323638373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ab8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:2a:b1:31:d9:ce:89:05:41:9a:9f:c4:6a:2e:01:d8:b4:6f:
         54:07:11:fe:76:0b:6f:da:7c:e9:3c:23:33:f1:27:e0:72:fd:
         54:8c:4d:c2:79:28:15:4e:a8:04:a0:fd:9d:74:bf:66:6c:1e:
         08:14:08:ed:28:0b:e9:19:d8:87:88:a1:58:ca:a5:fc:63:8f:
         18:59:d0:a0:31:7a:54:6f:dc:7d:e2:cd:c3:7a:c7:b0:cb:4d:
         ea:fc:28:85:f8:7c:1e:12:b5:ef:ff:06:54:6f:10:af:4c:09:
         f5:c8:1a:83:a1:83:6b:8e:d4:03:d2:ff:00:08:2d:5d:bf:79:
         3d:0b:b7:6e:5c:d3:35:ec:3e:40:d7:bc:de:02:e5:a4:45:0a:
         21:ae:1f:a8:04:cd:bc:2d:4f:bd:e3:54:ad:35:a5:6b:09:95:
         9b:5c:62:9b:27:13:7f:ef:08:d3:c8:88:ae:d8:29:61:46:3f:
         46:21:ab:70:81:32:a4:32:d4:57:22:a2:5a:25:79:de:80:03:
         70:9e:69:11:d5:14:40:6b:d7:55:c3:3c:dd:04:cb:7b:1d:aa:
         4d:2c:84:d1:e2:ca:0e:20:1f:1d:20:05:f3:24:6c:58:5e:52:
         02:8d:5c:56:8d:46:2b:3e:ba:cc:2f:9b:b9:ae:f1:2d:61:75:
         6f:7e:bf:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:01 2024 by rpki-client on console-fra.rpki-client.org