Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/323830313a62363a3a2f33322d3438203d3e20323633303833.roa
File:                     323830313a62363a3a2f33322d3438203d3e20323633303833.roa (raw, json)
Hash identifier:          qHGFb01KSar+fCvJ6AdJC1nUD9ikg6gyeHX98dBi6Xo=
Subject key identifier:   1B:F4:C6:B3:3F:41:1E:83:74:77:0A:2C:C5:B4:5C:98:7B:90:9F:21
Certificate issuer:       /CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5
Certificate serial:       7D5C7C0A702022EEF90C28B7440AFC71DC1FD0FD
Authority key identifier: F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/323830313a62363a3a2f33322d3438203d3e20323633303833.roa
Signing time:             Thu 04 Apr 2024 00:35:43 +0000
ROA not before:           Thu 04 Apr 2024 00:30:43 +0000
ROA not after:            Thu 03 Apr 2025 00:35:43 +0000
asID:                     263083
IP address blocks:        2801:b6::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl
                          rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:17:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5c:7c:0a:70:20:22:ee:f9:0c:28:b7:44:0a:fc:71:dc:1f:d0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5
        Validity
            Not Before: Apr  4 00:30:43 2024 GMT
            Not After : Apr  3 00:35:43 2025 GMT
        Subject: CN=1BF4C6B33F411E8374770A2CC5B45C987B909F21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1d:2b:4b:1f:3a:6f:07:62:29:65:f5:14:0b:
                    18:9a:9d:07:a2:32:d8:5c:e0:6f:10:74:0f:7e:bd:
                    88:8c:59:ab:34:46:49:8a:6e:2e:53:ed:32:a5:d4:
                    1a:14:13:0f:76:88:1a:97:47:e6:77:19:54:5e:ec:
                    7d:af:32:5a:d8:b4:fa:5b:2f:f0:40:c1:df:21:87:
                    fe:9b:ee:b6:d2:04:5f:3d:88:22:8f:37:ca:ed:ca:
                    4f:28:15:5f:57:d0:58:73:42:03:d2:28:d5:12:ef:
                    bd:0c:75:0b:58:85:fe:8d:80:65:ed:fc:2c:58:08:
                    85:16:d9:62:3e:ac:cd:5c:5a:b3:5d:24:5c:47:a6:
                    c1:ea:88:c0:9e:bb:26:c6:10:0f:92:3f:5d:0f:26:
                    53:ed:f7:31:2c:5a:5b:bb:85:67:eb:44:f0:6b:f0:
                    49:a2:28:47:7b:36:eb:18:4e:c9:af:a9:16:8d:d4:
                    db:1f:c5:e7:fe:bc:21:c4:75:32:a9:9f:d6:32:68:
                    65:43:be:81:4c:3b:58:b8:d6:1c:44:fa:11:60:4b:
                    71:5c:3e:f3:e1:37:96:59:4a:d7:13:9c:91:6d:80:
                    c7:7f:0c:f3:3a:9c:4f:f7:27:4c:77:d5:04:12:48:
                    94:2a:f1:2f:c3:19:1a:48:07:f2:cd:9f:89:f9:07:
                    71:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F4:C6:B3:3F:41:1E:83:74:77:0A:2C:C5:B4:5C:98:7B:90:9F:21
            X509v3 Authority Key Identifier:
                keyid:F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/323830313a62363a3a2f33322d3438203d3e20323633303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:b6::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:c4:4e:f3:6c:95:b7:1c:4b:d2:bc:ad:02:fd:6f:8a:d7:9f:
         41:2c:40:58:ea:f1:71:16:64:cc:56:f0:e6:56:7b:8f:3b:67:
         11:70:29:5c:0e:a4:bc:34:75:4b:33:04:3e:9b:27:e2:7e:fd:
         ec:4d:7c:24:52:f5:33:6a:9b:c2:8d:41:95:11:29:f7:9a:a9:
         6a:6f:e0:5c:07:62:f8:d6:0c:72:66:92:99:36:fb:a3:fe:d2:
         08:b7:f1:da:87:aa:48:dd:0b:73:d0:ac:b5:8b:d6:38:c7:d8:
         70:05:9d:31:9b:6a:e3:86:24:16:20:3a:88:4f:5b:6b:2f:56:
         04:a6:5e:d6:8a:2c:a2:8e:22:df:a2:a9:6b:cf:86:57:63:43:
         ed:20:a8:cc:f1:52:0c:c9:ea:24:07:2d:4d:e8:49:75:61:1d:
         28:68:7f:7c:0f:50:24:d5:22:52:fd:3f:bc:cf:7d:d1:6a:46:
         1a:12:70:45:c6:d4:88:3f:0c:0d:a9:ad:b6:e6:8c:c6:6e:c2:
         c6:a2:e7:c7:11:3c:49:b8:df:84:16:04:2f:4c:0f:66:8b:fc:
         13:4e:53:30:97:50:49:9e:88:3f:a2:86:a5:54:25:11:3b:0a:
         4b:a3:83:70:23:e1:73:13:67:49:bf:ce:8c:85:ea:36:d9:5e:
         9e:73:8c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:09 2024 by rpki-client on console-ams.rpki-client.org