Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/323830343a333265303a3a2f33322d3336203d3e20323635313032.roa
File:                     323830343a333265303a3a2f33322d3336203d3e20323635313032.roa (raw, json)
Hash identifier:          +/kw8eeByhYpWYcWOvvr1dEnPhA11DUOI2hvQUnbr1A=
Subject key identifier:   96:42:C3:AF:4E:93:63:37:4D:8B:83:4F:5F:3B:36:85:80:3D:E8:76
Certificate issuer:       /CN=F3FCF467FB0A7C8DA1A865BDB9B46D8ABF2D79DF
Certificate serial:       10418CA767BD591E9739DDB026C10AB1DF2F4329
Authority key identifier: F3:FC:F4:67:FB:0A:7C:8D:A1:A8:65:BD:B9:B4:6D:8A:BF:2D:79:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FCF467FB0A7C8DA1A865BDB9B46D8ABF2D79DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/323830343a333265303a3a2f33322d3336203d3e20323635313032.roa
Signing time:             Sat 08 Jun 2024 15:21:00 +0000
ROA not before:           Sat 08 Jun 2024 15:16:00 +0000
ROA not after:            Sat 07 Jun 2025 15:21:00 +0000
asID:                     265102
IP address blocks:        2804:32e0::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/F3FCF467FB0A7C8DA1A865BDB9B46D8ABF2D79DF.crl
                          rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/F3FCF467FB0A7C8DA1A865BDB9B46D8ABF2D79DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FCF467FB0A7C8DA1A865BDB9B46D8ABF2D79DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:41:8c:a7:67:bd:59:1e:97:39:dd:b0:26:c1:0a:b1:df:2f:43:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3FCF467FB0A7C8DA1A865BDB9B46D8ABF2D79DF
        Validity
            Not Before: Jun  8 15:16:00 2024 GMT
            Not After : Jun  7 15:21:00 2025 GMT
        Subject: CN=9642C3AF4E9363374D8B834F5F3B3685803DE876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:26:39:5f:f9:99:6a:c9:67:a6:92:1e:96:e2:
                    ec:0a:be:65:40:c9:1b:b4:f9:18:b0:0a:e1:f7:44:
                    9a:cc:08:85:45:c4:87:66:69:a9:71:71:e6:17:48:
                    20:8a:b3:97:62:90:24:09:0b:f9:5d:d2:d1:9d:90:
                    00:e4:9c:8b:ad:79:4c:ee:81:64:ae:a8:5f:7c:c7:
                    a7:5a:fd:cd:1c:ca:92:c7:fd:33:37:00:46:cb:31:
                    45:73:e0:93:dd:60:4b:72:fc:ff:a9:de:07:36:9f:
                    13:4e:09:6b:77:cb:49:49:e2:b5:79:7b:9a:64:3c:
                    3d:bf:94:9b:d6:18:85:9d:e2:0d:80:0c:ba:34:c3:
                    a4:aa:73:e6:bf:93:54:0e:12:4f:f0:3e:c5:5d:27:
                    9b:48:3c:e0:57:17:ca:25:45:47:8f:c9:98:c1:cf:
                    5d:06:14:c2:bc:27:3b:fa:da:fd:ec:f1:0e:bb:74:
                    df:e8:4b:f4:a0:32:8d:49:a3:d4:ae:16:74:3d:f4:
                    50:24:3c:15:f4:23:ae:00:8d:f3:53:ea:09:b3:70:
                    08:b5:7a:33:ee:2f:10:71:5f:af:b1:ea:85:1e:e8:
                    1a:6c:ea:74:e3:27:a8:0c:4b:5a:1d:14:9a:29:5d:
                    ec:6c:14:b1:f1:e8:fc:39:1c:d6:e1:b2:b8:54:33:
                    46:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:42:C3:AF:4E:93:63:37:4D:8B:83:4F:5F:3B:36:85:80:3D:E8:76
            X509v3 Authority Key Identifier:
                keyid:F3:FC:F4:67:FB:0A:7C:8D:A1:A8:65:BD:B9:B4:6D:8A:BF:2D:79:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/F3FCF467FB0A7C8DA1A865BDB9B46D8ABF2D79DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FCF467FB0A7C8DA1A865BDB9B46D8ABF2D79DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/323830343a333265303a3a2f33322d3336203d3e20323635313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:ec:11:e5:d3:bc:86:43:ce:3e:52:af:36:64:00:87:01:f7:
         1b:96:86:44:66:f0:0e:ff:77:0c:cc:4c:5e:d5:b9:5e:75:3e:
         91:cf:82:5d:b9:15:64:5f:35:dd:14:b4:66:1e:62:36:81:f7:
         f3:dc:0d:6e:ff:4a:5e:ce:b0:04:f9:2a:bd:cd:c7:89:4f:f3:
         3c:b4:53:18:12:15:43:76:f6:be:f1:de:91:b3:1c:9a:2a:a4:
         d7:5d:3b:5f:43:a1:de:66:9a:f9:99:a0:3d:e7:38:43:3c:2f:
         2b:a4:7c:8f:18:03:60:27:26:a7:dd:bf:1a:ca:ce:ef:05:83:
         35:3e:65:8a:33:7a:93:f3:52:5f:65:33:22:fb:93:22:01:3c:
         67:dc:2c:a6:4c:de:2c:d4:0e:df:ad:53:a1:d7:cb:18:9c:e7:
         e2:d6:e3:37:dd:fe:64:6e:82:04:8b:0f:ac:8c:1d:eb:ed:2c:
         93:b3:f5:19:f5:0d:a2:95:14:ed:99:4b:3f:f2:d6:d6:0d:19:
         a0:cd:3d:0b:f6:e0:5a:b8:84:12:b0:45:00:83:b9:6a:6a:6f:
         f8:5a:5f:60:a8:1e:cd:50:d5:7d:8a:ac:65:12:82:98:24:bf:
         00:61:15:7c:76:6e:27:59:55:f0:36:93:2a:4c:89:c3:a2:d9:
         7d:99:e8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:49 2024 by rpki-client on console-fra.rpki-client.org