Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/323830343a386463633a3a2f33322d3438203d3e20323733333831.roa
File:                     323830343a386463633a3a2f33322d3438203d3e20323733333831.roa (raw, json)
Hash identifier:          Bh4a6bI03qRw7TCGFlhlswPa0O6QZUPxtGDEXFFDJRg=
Subject key identifier:   E0:15:10:F0:A5:21:2A:AE:8C:F2:55:35:E9:47:EF:FC:03:B7:67:76
Certificate issuer:       /CN=683DE3BC7AE9EEEF8F160B60C8FD37229C08B941
Certificate serial:       091F149042564EE406C7CEE950DD19B98B0161C2
Authority key identifier: 68:3D:E3:BC:7A:E9:EE:EF:8F:16:0B:60:C8:FD:37:22:9C:08:B9:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/683DE3BC7AE9EEEF8F160B60C8FD37229C08B941.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/323830343a386463633a3a2f33322d3438203d3e20323733333831.roa
Signing time:             Wed 05 Jun 2024 19:20:36 +0000
ROA not before:           Wed 05 Jun 2024 19:15:36 +0000
ROA not after:            Wed 04 Jun 2025 19:20:36 +0000
asID:                     273381
IP address blocks:        2804:8dcc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/683DE3BC7AE9EEEF8F160B60C8FD37229C08B941.crl
                          rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/683DE3BC7AE9EEEF8F160B60C8FD37229C08B941.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/683DE3BC7AE9EEEF8F160B60C8FD37229C08B941.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1f:14:90:42:56:4e:e4:06:c7:ce:e9:50:dd:19:b9:8b:01:61:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=683DE3BC7AE9EEEF8F160B60C8FD37229C08B941
        Validity
            Not Before: Jun  5 19:15:36 2024 GMT
            Not After : Jun  4 19:20:36 2025 GMT
        Subject: CN=E01510F0A5212AAE8CF25535E947EFFC03B76776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f6:0e:98:bf:39:d4:d0:95:21:36:2c:0d:68:
                    9f:f2:08:fe:d1:26:62:d5:61:3d:35:b4:d0:8c:45:
                    27:1c:3c:54:96:22:90:3f:fd:30:b3:16:f9:59:a5:
                    3b:4b:17:17:04:4b:d1:4b:e2:b4:49:9b:a0:04:82:
                    d2:76:de:7d:40:d2:b0:e3:64:9b:6e:af:2c:2d:68:
                    fb:f5:a9:5d:47:ce:68:22:62:bd:2f:24:42:82:70:
                    08:f7:3c:c1:2d:ed:59:08:99:2b:5a:7e:40:43:ba:
                    a6:40:7f:17:8d:13:c2:90:84:39:cc:e3:1f:46:89:
                    92:de:cc:0e:6f:c8:c2:75:b8:b6:60:df:20:68:01:
                    99:7d:4f:11:e4:ec:b1:02:f3:e7:71:5c:15:23:a2:
                    35:d9:57:be:bf:61:7a:f6:41:71:de:df:21:f8:1d:
                    75:9f:8d:45:be:06:a2:78:63:df:2e:7a:f9:16:95:
                    51:9e:dc:b6:e7:7a:7e:21:d8:5f:05:8a:3c:f0:4c:
                    5c:89:c4:6b:4b:60:62:47:ed:bd:9f:2f:1f:4c:ef:
                    7c:5a:ce:37:70:3e:27:e8:12:76:ee:ac:e6:13:02:
                    6e:27:91:58:cb:7a:fc:a1:ec:b2:75:17:43:6e:7b:
                    3d:99:0d:6a:f1:32:18:13:26:64:10:87:f5:a2:27:
                    5d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:15:10:F0:A5:21:2A:AE:8C:F2:55:35:E9:47:EF:FC:03:B7:67:76
            X509v3 Authority Key Identifier:
                keyid:68:3D:E3:BC:7A:E9:EE:EF:8F:16:0B:60:C8:FD:37:22:9C:08:B9:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/683DE3BC7AE9EEEF8F160B60C8FD37229C08B941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/683DE3BC7AE9EEEF8F160B60C8FD37229C08B941.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/323830343a386463633a3a2f33322d3438203d3e20323733333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8dcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:2d:21:4b:b7:88:d9:f0:72:23:59:ae:49:6b:f6:6b:05:c3:
         4a:2f:31:17:78:3f:0f:53:ff:08:78:fb:d7:2d:60:12:dc:e5:
         24:65:60:e8:2b:cb:3b:95:2b:6f:a9:fc:2d:40:12:ab:15:a9:
         85:89:42:5f:b0:7f:cf:ab:f1:d7:6a:3b:fb:95:01:48:e7:a9:
         15:58:4f:c4:ae:1f:15:02:c6:84:4e:2b:05:fe:9d:8d:6b:9b:
         9f:03:84:cf:e5:92:83:dd:52:77:93:80:c5:a5:24:8c:3a:7f:
         ef:24:50:45:04:50:1a:f5:4f:4f:e5:d3:f6:5c:62:0c:e5:e3:
         c3:8c:21:d5:14:3b:e4:da:db:c7:d4:39:c8:ae:35:7d:d8:ca:
         b5:1f:3b:cc:76:ff:00:00:82:5e:f3:0f:dd:4d:ef:bf:0b:19:
         8b:5f:1c:a3:8e:06:24:ca:c6:6c:5c:de:09:ad:6c:68:da:2d:
         d5:cb:34:26:45:17:97:ec:1c:e4:1d:e2:e2:ef:51:c0:88:5c:
         98:57:19:17:e7:79:22:96:fb:8a:d2:b6:5f:68:95:53:74:ef:
         1a:cf:88:d3:95:5d:93:b6:d1:40:5a:fd:d7:51:78:46:3a:de:
         c6:d4:06:63:f7:fd:34:9b:9b:5b:fd:6c:65:a1:e2:b5:8e:91:
         be:b0:72:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 16:37:50 2024 by rpki-client on console-fra.rpki-client.org