Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/323830343a3137303a343830303a3a2f34302d3430203d3e203238313331.roa
File:                     323830343a3137303a343830303a3a2f34302d3430203d3e203238313331.roa (raw, json)
Hash identifier:          IqwF15pPmNMKmJ/qSqFIQtApM5i1GAnQqwxp+Q3JunE=
Subject key identifier:   F5:B4:D6:54:E8:FC:DD:F1:3D:32:B9:97:CC:A8:04:DE:EE:56:BA:C1
Certificate issuer:       /CN=03981ED1B457034CCBAC00F384454B3A021E294E
Certificate serial:       17DA900C6ADB907D91569EB7CA0B40534DDB55BA
Authority key identifier: 03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/323830343a3137303a343830303a3a2f34302d3430203d3e203238313331.roa
Signing time:             Thu 04 Apr 2024 03:10:28 +0000
ROA not before:           Thu 04 Apr 2024 03:05:28 +0000
ROA not after:            Thu 03 Apr 2025 03:10:28 +0000
asID:                     28131
IP address blocks:        2804:170:4800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl
                          rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:da:90:0c:6a:db:90:7d:91:56:9e:b7:ca:0b:40:53:4d:db:55:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03981ED1B457034CCBAC00F384454B3A021E294E
        Validity
            Not Before: Apr  4 03:05:28 2024 GMT
            Not After : Apr  3 03:10:28 2025 GMT
        Subject: CN=F5B4D654E8FCDDF13D32B997CCA804DEEE56BAC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:82:2c:36:35:cb:53:a4:dc:ee:ec:e4:d3:67:
                    c4:6a:d1:0d:0f:45:b3:5b:a9:f3:e3:ef:21:be:f3:
                    d7:95:08:a0:4c:51:da:38:ed:e6:16:d7:e9:a0:1e:
                    d2:e3:ec:bb:f7:5f:4c:81:d8:11:cd:02:95:77:1b:
                    b3:c3:6a:77:b6:2e:e2:9c:d0:08:71:44:06:c9:1a:
                    d5:c4:84:57:6d:e9:3d:2c:02:d3:da:75:2f:76:7c:
                    38:a0:87:da:7a:0a:55:94:fb:82:8e:1a:88:f7:be:
                    2c:ed:44:18:15:4c:ea:ec:d6:a2:7d:17:59:be:6b:
                    a8:4c:b3:bf:e5:8c:90:ac:07:4e:e5:58:50:a4:45:
                    bb:9d:57:fa:7a:4c:bb:ea:00:71:63:e5:45:1e:42:
                    bd:bf:47:be:75:72:51:85:86:47:6e:c0:13:67:53:
                    a3:84:7c:c1:81:ee:61:7d:6f:04:69:15:46:e6:c0:
                    1a:3a:34:3a:1e:90:d2:50:d6:6c:49:66:31:f6:30:
                    b3:73:92:ec:a4:2b:bb:b1:09:3e:c4:ee:8a:b5:6d:
                    6d:71:66:3a:3f:73:a3:31:91:b7:90:5f:f9:1a:ec:
                    36:99:ee:f2:f2:d1:8e:b9:95:ca:68:49:06:13:3f:
                    d8:2a:ff:d2:bd:7a:59:dd:a8:27:94:93:20:dc:f6:
                    e4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B4:D6:54:E8:FC:DD:F1:3D:32:B9:97:CC:A8:04:DE:EE:56:BA:C1
            X509v3 Authority Key Identifier:
                keyid:03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/323830343a3137303a343830303a3a2f34302d3430203d3e203238313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:170:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         53:57:55:b4:fc:95:99:0c:40:c3:81:ca:73:97:33:a3:f9:24:
         ea:ac:29:52:63:d1:8a:dd:35:6f:86:3d:52:8b:48:1a:ef:89:
         2a:ab:7d:64:6b:e6:41:06:46:5e:ba:58:93:45:6e:3e:a0:b1:
         9b:8c:ce:9b:ea:39:04:c8:2b:cd:92:46:4d:e9:e9:31:4d:d8:
         75:69:d2:c1:f5:ef:25:0f:5e:92:b1:d9:3c:1b:f2:c5:22:57:
         c5:5f:ca:2a:c7:4b:92:02:a7:e6:04:17:c0:e0:28:14:a6:22:
         e1:e2:c4:8d:ad:ef:7d:d2:0c:20:5a:5c:f9:9f:9e:44:24:aa:
         ea:8c:29:58:42:be:92:4c:2f:04:2c:39:8b:23:a4:b9:c0:0d:
         0d:16:fe:f3:e8:2a:65:4a:39:55:ab:e4:1b:d9:37:6b:fa:fd:
         60:b5:95:b2:8b:6c:b4:76:be:5c:45:7e:c9:93:71:16:fb:79:
         6b:85:c8:34:82:5a:e5:29:2d:10:a6:e2:f3:d3:56:5e:01:b3:
         ab:70:15:28:0d:9b:a9:74:15:ac:68:91:b6:ae:6b:5f:93:2d:
         b4:55:b2:56:9d:8b:26:ae:00:10:d7:1b:f7:5c:d7:f1:14:7b:
         4d:4d:e7:4a:bc:f6:a9:6f:32:12:03:7d:34:22:44:e6:b8:6c:
         00:14:ab:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:20 2024 by rpki-client on console-fra.rpki-client.org