Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/323830343a336361303a3a2f33322d313238203d3e203631353939.roa
File:                     323830343a336361303a3a2f33322d313238203d3e203631353939.roa (raw, json)
Hash identifier:          SEdsYRtoo61SkuvzSIj9dGNBjOHrozas2HXFJOV24uM=
Subject key identifier:   C3:27:4B:B2:E2:76:64:05:9A:B7:AA:24:28:CF:60:1B:89:B4:38:69
Certificate issuer:       /CN=014DBFDCD468F68848FADACA4E0EF0702750FA7C
Certificate serial:       0602134A97AE7DF3E1B59ABCB85079CCA570FB0D
Authority key identifier: 01:4D:BF:DC:D4:68:F6:88:48:FA:DA:CA:4E:0E:F0:70:27:50:FA:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014DBFDCD468F68848FADACA4E0EF0702750FA7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/323830343a336361303a3a2f33322d313238203d3e203631353939.roa
Signing time:             Thu 30 May 2024 23:08:17 +0000
ROA not before:           Thu 30 May 2024 23:03:17 +0000
ROA not after:            Thu 29 May 2025 23:08:17 +0000
asID:                     61599
IP address blocks:        2804:3ca0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/014DBFDCD468F68848FADACA4E0EF0702750FA7C.crl
                          rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/014DBFDCD468F68848FADACA4E0EF0702750FA7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014DBFDCD468F68848FADACA4E0EF0702750FA7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:02:13:4a:97:ae:7d:f3:e1:b5:9a:bc:b8:50:79:cc:a5:70:fb:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014DBFDCD468F68848FADACA4E0EF0702750FA7C
        Validity
            Not Before: May 30 23:03:17 2024 GMT
            Not After : May 29 23:08:17 2025 GMT
        Subject: CN=C3274BB2E27664059AB7AA2428CF601B89B43869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ec:b6:4d:2d:f3:c5:2f:c2:41:c3:63:c9:c2:
                    0f:20:b3:96:26:df:44:7c:48:ab:a6:68:69:f3:18:
                    52:23:f7:9d:74:e2:4f:69:25:8b:c5:23:c8:4d:64:
                    dd:f2:a0:96:3c:8a:4f:1c:f7:15:9a:70:39:f5:f1:
                    36:23:ea:1d:cf:e3:2b:98:41:32:16:3c:6e:10:9d:
                    1d:b0:da:19:73:81:18:03:f1:a6:45:18:7c:a7:b7:
                    fa:4f:c0:9c:bd:02:94:8c:eb:a4:05:03:72:a0:e1:
                    f9:a4:30:95:d3:a7:60:0d:38:e2:7f:b1:fe:5e:69:
                    c9:2d:d4:57:dc:38:5e:1d:57:78:0f:28:97:2f:3b:
                    5c:e2:bf:06:7a:d5:f4:bb:02:46:56:c9:f1:0f:d2:
                    dd:e2:ac:d0:a0:6f:c7:8a:9a:3a:be:83:df:b0:d5:
                    be:65:56:01:b7:e3:4c:aa:d4:5b:ea:b4:09:78:9f:
                    e5:22:bf:fc:2e:26:28:37:e8:64:34:40:9e:90:34:
                    eb:0d:03:8c:9f:4b:4c:23:dc:3a:90:34:ef:93:54:
                    30:96:ed:74:eb:18:f1:81:c5:67:b3:03:0d:82:ab:
                    9f:ea:0a:5a:0c:f3:f6:85:3b:71:e4:d0:78:be:1f:
                    8b:c9:c5:10:d2:44:03:f7:16:f0:8f:cd:c8:c5:81:
                    52:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:27:4B:B2:E2:76:64:05:9A:B7:AA:24:28:CF:60:1B:89:B4:38:69
            X509v3 Authority Key Identifier:
                keyid:01:4D:BF:DC:D4:68:F6:88:48:FA:DA:CA:4E:0E:F0:70:27:50:FA:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/014DBFDCD468F68848FADACA4E0EF0702750FA7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014DBFDCD468F68848FADACA4E0EF0702750FA7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/323830343a336361303a3a2f33322d313238203d3e203631353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:83:0f:4a:04:fe:28:c4:7d:ff:f4:c4:ad:14:b7:a9:be:a3:
         7d:57:6c:2f:0a:cd:0b:c8:83:70:59:0f:fc:c7:a6:1d:4b:2f:
         36:ad:3e:bf:ec:00:57:30:cc:22:60:07:14:64:95:b7:1b:f0:
         b4:72:24:00:b2:08:32:42:f3:cc:9f:8d:3a:14:cc:ce:0e:a6:
         25:75:8c:fd:cc:c9:84:2b:ae:8f:ba:f9:ee:94:5c:cc:0f:ce:
         c9:35:8e:c7:9e:53:9f:08:aa:a5:c6:ff:3b:29:f9:4b:1a:b2:
         b2:e3:6c:c3:24:49:ec:20:bf:2d:e2:a6:53:77:51:0b:08:cc:
         56:ce:4f:50:8a:24:61:ee:44:0e:11:71:d5:97:42:51:8b:f5:
         b4:eb:75:06:0b:23:bc:5a:8d:5a:68:04:37:f0:35:08:07:1f:
         1f:10:65:0b:59:be:bc:f1:81:80:60:e3:ac:46:df:7c:08:4a:
         f6:a9:f3:a4:b7:42:bb:98:91:d1:1a:05:0c:c2:d8:83:ae:d9:
         49:21:f2:26:31:66:14:44:ce:fc:54:bf:1a:f5:32:27:60:33:
         ff:c2:b9:84:83:2f:b5:87:8d:9f:06:d3:aa:cd:cb:04:7b:cc:
         68:c0:5f:52:a2:f4:7a:6b:86:96:78:ad:50:39:69:6a:95:0a:
         03:6c:6d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:09 2024 by rpki-client on console-fra.rpki-client.org