Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/323830343a336238343a3a2f33322d3438203d3e20323636313534.roa
File:                     323830343a336238343a3a2f33322d3438203d3e20323636313534.roa (raw, json)
Hash identifier:          fRCj+xMp40y10h9fi6JUBtn2+LkDT+a0lsFWBabNkr0=
Subject key identifier:   68:0A:3E:78:09:4B:E5:F9:D9:1C:DC:EB:D7:88:5E:82:C5:63:0D:38
Certificate issuer:       /CN=032EBC04B31CCA7416FFF2267C50AACE979BC999
Certificate serial:       5A9B25AE3B1EA3E8D4912D5FF574F2343A7A4698
Authority key identifier: 03:2E:BC:04:B3:1C:CA:74:16:FF:F2:26:7C:50:AA:CE:97:9B:C9:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/323830343a336238343a3a2f33322d3438203d3e20323636313534.roa
Signing time:             Wed 03 Apr 2024 19:45:52 +0000
ROA not before:           Wed 03 Apr 2024 19:40:52 +0000
ROA not after:            Wed 02 Apr 2025 19:45:52 +0000
asID:                     266154
IP address blocks:        2804:3b84::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.crl
                          rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:9b:25:ae:3b:1e:a3:e8:d4:91:2d:5f:f5:74:f2:34:3a:7a:46:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032EBC04B31CCA7416FFF2267C50AACE979BC999
        Validity
            Not Before: Apr  3 19:40:52 2024 GMT
            Not After : Apr  2 19:45:52 2025 GMT
        Subject: CN=680A3E78094BE5F9D91CDCEBD7885E82C5630D38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:6b:24:66:e2:21:ae:38:93:51:da:b6:77:
                    25:45:05:99:74:68:79:a7:b7:6a:32:14:8a:46:62:
                    b5:3c:7c:d1:35:5d:6c:11:07:a2:ab:6f:30:94:47:
                    4c:10:6f:9b:45:4e:68:24:a8:87:58:37:ff:de:e5:
                    74:8f:b4:0e:4e:ee:76:2e:a2:5b:ce:5a:0f:ff:6c:
                    4d:eb:88:57:be:8e:81:98:7a:36:09:60:46:f1:0c:
                    68:80:46:f9:61:5e:44:25:a5:dd:33:80:ff:02:ad:
                    ec:ef:c8:8b:40:88:d4:9d:5b:22:14:c8:39:17:ab:
                    b4:a6:ed:06:03:86:f2:4e:e6:67:2a:78:21:c2:d4:
                    86:c2:e9:03:67:d1:a0:a6:4f:b8:63:2d:37:12:c1:
                    c1:d2:30:62:c1:5d:3b:5e:c0:b5:4b:46:d6:ff:cb:
                    e3:33:1c:ae:d9:80:22:97:7f:b6:7f:4c:13:05:d9:
                    bf:4f:c6:70:2f:ec:f7:f6:65:a7:f5:60:33:77:76:
                    3b:44:8d:be:06:24:96:20:a6:e9:7b:1b:54:e5:58:
                    b4:d8:6b:dd:f9:eb:4b:6b:41:af:96:31:1d:27:79:
                    79:3d:36:46:90:94:56:b8:aa:3a:0f:95:39:87:25:
                    d9:79:5a:27:19:d1:2d:1e:5c:06:1b:4e:49:99:8f:
                    31:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0A:3E:78:09:4B:E5:F9:D9:1C:DC:EB:D7:88:5E:82:C5:63:0D:38
            X509v3 Authority Key Identifier:
                keyid:03:2E:BC:04:B3:1C:CA:74:16:FF:F2:26:7C:50:AA:CE:97:9B:C9:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/323830343a336238343a3a2f33322d3438203d3e20323636313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b84::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:c4:60:df:7d:f4:43:a6:ee:d9:87:e2:bd:44:06:12:2d:f9:
         cd:de:67:bf:c4:83:06:f7:8d:97:7c:f0:12:0c:fa:2c:a3:dd:
         f4:ba:11:f0:36:ab:62:9f:72:c7:4d:73:5d:45:1a:b8:bf:69:
         4d:39:7b:5e:20:0f:d6:11:87:27:79:39:d3:9a:7a:98:f8:8f:
         5b:94:29:21:c1:7a:1f:ff:8c:3f:27:78:42:6c:fe:7f:ea:8d:
         61:3c:f4:c9:4f:03:fa:b7:c7:80:76:15:c0:f1:8b:a6:89:27:
         f7:d1:8c:6b:75:5d:e5:14:2c:0c:61:04:8c:85:69:e9:77:9a:
         fb:36:c2:72:1b:3b:55:9e:68:ca:69:d1:25:17:31:11:a6:42:
         a8:ca:45:d9:de:e4:5b:75:c4:85:f4:02:a1:5b:2b:80:6d:93:
         d9:fa:eb:8e:a3:4b:aa:b5:ea:9a:49:2c:ee:73:3d:2c:b8:cc:
         e6:c4:b4:83:39:cc:e3:ab:14:77:7c:a5:6b:9f:dd:cc:db:9e:
         9d:f2:15:87:00:da:72:04:f0:95:88:f2:96:c1:f8:66:3c:65:
         4d:23:7e:b3:45:99:b7:ee:82:61:39:df:8d:5f:1a:61:75:11:
         9f:90:32:b5:d5:bd:7b:99:4e:9d:9e:46:33:9d:25:81:9a:d4:
         aa:c7:d3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:02 2024 by rpki-client on console-fra.rpki-client.org