Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/323830343a6438303a3a2f33322d3438203d3e203532363335.roa
File:                     323830343a6438303a3a2f33322d3438203d3e203532363335.roa (raw, json)
Hash identifier:          8eIID65VS7H6g2rElwHdbE95xPN0q5j7qbT6xjD91a4=
Subject key identifier:   C0:A4:4C:04:D5:56:58:A7:2E:F7:46:DB:04:BC:08:56:17:C0:B0:20
Certificate issuer:       /CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73
Certificate serial:       021C7A6408D3491B0694472A05093B6D292D7706
Authority key identifier: EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/323830343a6438303a3a2f33322d3438203d3e203532363335.roa
Signing time:             Wed 03 Apr 2024 18:30:30 +0000
ROA not before:           Wed 03 Apr 2024 18:25:30 +0000
ROA not after:            Wed 02 Apr 2025 18:30:30 +0000
asID:                     52635
IP address blocks:        2804:d80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl
                          rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1c:7a:64:08:d3:49:1b:06:94:47:2a:05:09:3b:6d:29:2d:77:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73
        Validity
            Not Before: Apr  3 18:25:30 2024 GMT
            Not After : Apr  2 18:30:30 2025 GMT
        Subject: CN=C0A44C04D55658A72EF746DB04BC085617C0B020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e7:ec:19:55:81:f4:ca:0c:94:07:7a:17:56:
                    b1:66:24:3c:37:fc:a4:63:d0:4f:8e:aa:5c:09:6a:
                    f1:b1:f3:42:52:48:ae:b1:30:c7:7b:7e:a0:a9:4f:
                    88:ed:8a:22:b2:e6:b9:6d:3e:48:49:c0:3f:92:4a:
                    73:1f:ee:a3:1d:25:9a:f5:45:18:20:83:7a:e5:d7:
                    ae:3a:86:95:88:6b:0a:aa:d8:ed:bd:96:5d:e4:c9:
                    da:b1:1b:fe:0d:6c:63:be:56:16:76:cc:93:c4:e8:
                    bc:be:ee:71:dd:05:54:62:e6:03:77:85:d2:65:ce:
                    79:87:47:94:64:d2:40:fb:25:5b:4a:66:ad:4c:24:
                    a9:cc:4b:0e:0e:24:c7:f0:50:df:d7:57:ac:af:8a:
                    1c:a7:43:81:37:7e:1f:b5:9d:ae:16:1c:8d:61:02:
                    69:03:d6:42:f1:ee:58:c4:45:07:4b:8a:85:d0:57:
                    70:45:dd:d1:8a:00:70:11:cc:3c:83:2b:eb:33:a9:
                    c9:53:f4:6c:53:bb:6c:98:a1:c6:5c:28:2c:57:16:
                    e5:ee:78:3b:0e:18:cc:33:63:5a:5a:7d:25:60:6d:
                    0c:c9:7b:aa:b9:e4:92:99:52:bf:2d:68:b2:f3:0f:
                    99:d4:53:dc:50:ee:7d:1f:53:e4:e6:58:bb:8c:ad:
                    db:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A4:4C:04:D5:56:58:A7:2E:F7:46:DB:04:BC:08:56:17:C0:B0:20
            X509v3 Authority Key Identifier:
                keyid:EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/323830343a6438303a3a2f33322d3438203d3e203532363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:98:ee:fb:61:23:be:2d:3e:9f:8b:de:d2:a5:57:66:5e:3a:
         5b:5e:1b:e6:02:5e:19:f3:df:37:bc:c6:60:4d:66:af:f2:15:
         d3:72:5f:0c:2d:ee:86:a5:1d:6c:f4:af:27:ae:12:ec:7e:bd:
         8d:98:16:c0:79:10:ca:c1:cf:93:d4:0a:7a:68:75:bd:56:ea:
         da:3c:a6:1d:78:1d:52:cb:8c:7f:94:f6:fe:79:44:8d:c4:5a:
         b9:08:6f:a4:11:78:1d:9e:a6:f6:e7:29:47:fc:e4:79:1a:15:
         75:e5:20:51:aa:72:69:6c:68:17:f7:60:68:4b:b5:b1:ac:54:
         18:34:1b:e3:6f:b0:0b:88:39:37:73:22:89:55:3a:50:3b:7e:
         aa:54:55:d7:b0:1e:29:ec:ad:a3:a6:54:46:51:31:c1:7a:ee:
         7a:c9:2b:97:9e:e0:8c:96:65:e2:e4:aa:a9:b1:98:e3:00:06:
         ed:ca:90:ad:05:cc:f5:7f:c1:9b:93:67:1d:d2:40:ca:ce:b4:
         ec:b2:e8:4d:02:9a:5f:be:ba:4f:95:ba:fa:b3:c8:db:1e:b7:
         56:ce:16:be:2d:b5:74:73:8f:76:07:8a:bc:1a:6b:d6:34:ef:
         fb:a5:b3:c1:84:63:96:e9:dc:89:8d:ef:f7:ca:e3:68:b5:fd:
         60:e3:73:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:28 2024 by rpki-client on console-ams.rpki-client.org