Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/323830343a3735633a3a2f33322d3438203d3e20323632363337.roa
File:                     323830343a3735633a3a2f33322d3438203d3e20323632363337.roa (raw, json)
Hash identifier:          mHO2ymjF267nU1SnMPmkGKE0Z3zxDyW3Iqdhmke15Ro=
Subject key identifier:   C3:FB:F0:10:F4:56:45:4D:34:4B:09:F6:31:A7:86:B4:35:3D:0E:13
Certificate issuer:       /CN=B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD
Certificate serial:       60CA6EE55BF01A4129F9862A611205559E5C05E4
Authority key identifier: B9:02:C5:20:3B:F2:1D:82:8D:72:D8:FA:7C:EA:88:31:AD:EB:E8:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/323830343a3735633a3a2f33322d3438203d3e20323632363337.roa
Signing time:             Thu 04 Apr 2024 01:35:56 +0000
ROA not before:           Thu 04 Apr 2024 01:30:56 +0000
ROA not after:            Thu 03 Apr 2025 01:35:56 +0000
asID:                     262637
IP address blocks:        2804:75c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.crl
                          rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ca:6e:e5:5b:f0:1a:41:29:f9:86:2a:61:12:05:55:9e:5c:05:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD
        Validity
            Not Before: Apr  4 01:30:56 2024 GMT
            Not After : Apr  3 01:35:56 2025 GMT
        Subject: CN=C3FBF010F456454D344B09F631A786B4353D0E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cb:9c:b5:73:70:8f:05:fd:cc:b9:9d:80:dc:
                    69:32:e2:16:50:2d:8c:1f:69:05:7b:70:2d:46:03:
                    fa:5a:4b:05:a1:15:14:c0:14:24:91:66:cd:a1:23:
                    29:bf:9a:fc:10:18:81:b9:a6:87:9a:67:d4:70:4b:
                    cc:9d:d4:3c:9d:e8:01:bd:67:b1:91:18:31:a4:e1:
                    8a:ca:bc:88:4d:87:a9:ef:ea:34:ca:37:53:d6:f5:
                    02:e2:dd:70:c1:86:93:4e:86:26:73:4b:0c:14:d0:
                    51:10:68:5e:d3:94:41:ef:36:74:7b:df:8a:9d:5d:
                    4c:90:67:3a:a2:1d:c9:8e:d8:43:8f:f2:4c:3b:00:
                    3e:09:8d:21:61:1c:a1:0e:38:77:98:27:40:a9:02:
                    d5:a0:29:a8:0e:e1:2e:00:3d:39:ce:ea:77:fd:40:
                    0c:e9:57:f9:91:0c:cc:82:2a:5a:fa:62:ae:27:e6:
                    3f:0b:26:08:4f:f6:03:ec:4c:a6:20:44:47:70:e6:
                    36:25:62:c5:58:a6:4b:16:b2:76:21:de:e1:c1:f6:
                    e1:aa:18:4c:ec:27:93:72:ba:ea:6e:25:32:40:49:
                    4b:3a:69:0d:fd:1d:9d:21:01:bd:7f:97:eb:85:98:
                    19:55:68:16:c1:b0:6b:fd:3a:f5:4c:6d:97:71:5b:
                    9d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FB:F0:10:F4:56:45:4D:34:4B:09:F6:31:A7:86:B4:35:3D:0E:13
            X509v3 Authority Key Identifier:
                keyid:B9:02:C5:20:3B:F2:1D:82:8D:72:D8:FA:7C:EA:88:31:AD:EB:E8:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/323830343a3735633a3a2f33322d3438203d3e20323632363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:75c::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:27:f9:31:89:60:01:49:32:39:62:f9:88:4c:84:11:4c:c9:
         ac:90:1f:2a:ac:16:9d:9c:52:90:14:b3:0b:2a:db:00:18:c1:
         21:f3:2c:6d:d8:26:e4:d8:c4:cc:3e:8d:ef:28:fa:75:96:d4:
         e3:30:f4:c1:5d:d7:54:60:06:4f:64:40:75:8a:73:ec:32:16:
         b6:e5:aa:8e:af:38:47:04:90:98:f1:89:6a:f6:52:06:cb:77:
         a5:f0:bc:2b:87:f5:62:91:aa:ec:81:d6:0c:61:cc:82:0c:93:
         08:12:d0:75:27:b1:cc:13:16:d2:7a:ad:71:20:3d:c9:23:8b:
         7d:c1:32:bd:c4:e5:a9:7a:0e:75:3c:32:6f:77:b6:91:c9:ad:
         da:b6:ea:5c:2b:f7:97:90:3d:94:3e:be:b3:a1:6b:31:af:ad:
         da:b0:2b:96:79:98:26:fb:c1:d0:5f:5b:e0:e9:c7:4f:04:fe:
         2e:ad:9a:70:31:49:db:60:e3:3b:cb:07:49:34:9f:12:53:c6:
         94:ba:29:04:32:2f:c1:83:7f:87:12:4c:f5:6a:48:07:a3:1c:
         bf:2c:82:32:0c:a8:c1:a2:4d:08:0a:14:a4:49:a4:bc:e5:f1:
         ac:57:22:af:bd:be:d6:d8:9f:53:c7:65:1f:32:cd:e9:92:5c:
         fc:35:ec:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:03:59 2024 by rpki-client on console-fra.rpki-client.org