Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/323830343a323962343a3a2f33322d3332203d3e20323634303330.roa
File:                     323830343a323962343a3a2f33322d3332203d3e20323634303330.roa (raw, json)
Hash identifier:          +EgHOgybhJdLhRYRZZN3Btq5JvsXWnHVBtm2g0a81tM=
Subject key identifier:   A2:24:40:09:88:04:76:7E:BF:3A:F2:70:C1:4A:03:14:88:24:87:86
Certificate issuer:       /CN=972925A57A172EFE7255E798517DAC0C695452AC
Certificate serial:       6F3132AB8BB3D78C73C75E642B3B9697573D2C65
Authority key identifier: 97:29:25:A5:7A:17:2E:FE:72:55:E7:98:51:7D:AC:0C:69:54:52:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972925A57A172EFE7255E798517DAC0C695452AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/323830343a323962343a3a2f33322d3332203d3e20323634303330.roa
Signing time:             Thu 04 Apr 2024 19:23:19 +0000
ROA not before:           Thu 04 Apr 2024 19:18:19 +0000
ROA not after:            Thu 03 Apr 2025 19:23:19 +0000
asID:                     264030
IP address blocks:        2804:29b4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/972925A57A172EFE7255E798517DAC0C695452AC.crl
                          rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/972925A57A172EFE7255E798517DAC0C695452AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972925A57A172EFE7255E798517DAC0C695452AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:31:32:ab:8b:b3:d7:8c:73:c7:5e:64:2b:3b:96:97:57:3d:2c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=972925A57A172EFE7255E798517DAC0C695452AC
        Validity
            Not Before: Apr  4 19:18:19 2024 GMT
            Not After : Apr  3 19:23:19 2025 GMT
        Subject: CN=A22440098804767EBF3AF270C14A031488248786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:74:89:f5:88:47:69:be:bd:ea:7b:e0:06:56:
                    43:c5:e7:d3:b7:d6:e4:15:f2:6c:93:9b:b3:83:5f:
                    16:24:95:e0:fa:ba:97:cc:e1:d0:1a:8c:ca:cc:74:
                    88:a2:5f:a6:fb:b9:32:70:4c:0d:74:59:a3:2f:e6:
                    5e:34:27:52:61:3b:f7:50:1c:11:09:88:22:34:44:
                    cf:02:f6:d6:4a:fe:91:bc:9c:72:1e:58:71:82:8f:
                    92:ca:cc:52:91:55:b2:d2:94:71:10:21:e1:26:99:
                    2e:1b:c8:5c:a7:95:de:98:54:3f:d7:85:7d:3c:2f:
                    4c:22:a0:3c:bf:f1:e0:64:9a:10:5f:35:7c:b7:6c:
                    50:85:89:c7:a9:2d:96:76:c6:4b:21:9c:5f:d8:c0:
                    7d:c4:d4:a8:6c:50:e9:02:db:1b:a8:73:88:63:24:
                    92:d6:25:61:a5:24:b4:6c:12:01:41:ad:fd:9c:99:
                    0f:47:a6:f5:10:5f:f8:92:93:22:4e:bf:30:8a:e3:
                    e7:af:f3:33:3b:ea:ac:0f:b0:2b:f7:eb:1c:7b:0d:
                    34:2a:de:2c:50:9a:8c:81:1c:d5:7b:13:81:aa:c5:
                    5a:35:a2:91:45:fd:38:b9:8d:d0:d5:ad:f6:f1:bb:
                    4c:ac:8d:12:a0:62:e0:51:d1:69:c4:27:ec:fb:bc:
                    9b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:24:40:09:88:04:76:7E:BF:3A:F2:70:C1:4A:03:14:88:24:87:86
            X509v3 Authority Key Identifier:
                keyid:97:29:25:A5:7A:17:2E:FE:72:55:E7:98:51:7D:AC:0C:69:54:52:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/972925A57A172EFE7255E798517DAC0C695452AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972925A57A172EFE7255E798517DAC0C695452AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/323830343a323962343a3a2f33322d3332203d3e20323634303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:29b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:5c:b2:e8:dd:c5:3c:70:97:3b:ef:c4:ff:f5:d5:34:93:ab:
         fb:e2:b4:e8:83:70:da:1e:88:1d:77:07:15:c7:b7:88:96:98:
         8d:10:b9:0f:76:ca:f4:91:46:b9:e5:4e:ef:e9:3c:b3:d5:b8:
         f3:0c:3f:87:86:29:eb:bc:47:67:18:72:96:e8:d8:1b:2f:9b:
         92:34:48:59:a0:1d:00:28:b3:06:92:f3:0f:f7:bd:4d:f2:34:
         75:60:02:e2:74:58:a4:67:23:9a:bf:b4:7a:51:08:cd:06:d1:
         e6:d1:ee:f3:be:8d:e0:53:e6:ab:f3:91:a2:b0:7c:6c:ec:63:
         7b:66:d8:f5:59:d4:3f:ce:cc:dd:35:fc:57:fb:ec:7b:56:35:
         bd:53:15:47:e7:fd:9f:a1:cc:9f:d3:d0:e8:89:2d:bc:a1:85:
         11:03:2e:b9:2e:85:84:53:11:26:19:87:65:69:ea:c2:e7:ee:
         f8:30:94:c2:e9:ae:da:91:1f:a4:d8:37:d1:36:01:09:bc:9f:
         4e:64:39:5e:af:d4:bd:c3:91:20:46:b5:5f:e3:8c:f5:63:30:
         96:52:1a:0f:cd:8b:bf:32:e3:31:13:5d:69:f6:28:01:e9:a3:
         a5:87:23:47:ce:11:1e:23:33:18:57:12:7c:cd:ae:a6:64:30:
         52:64:53:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:03:53 2024 by rpki-client on console-fra.rpki-client.org