Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/1/323830343a346466343a3a2f33322d3438203d3e20323638323330.roa
File:                     323830343a346466343a3a2f33322d3438203d3e20323638323330.roa (raw, json)
Hash identifier:          JFObH4SBLK8y+inrSRJnUkamTG9YKwKHHKazzhwFxw8=
Subject key identifier:   60:04:9A:B8:8D:E8:6A:5F:4D:67:7E:DA:4A:51:1F:BC:A8:23:47:07
Certificate issuer:       /CN=00128F95DB8A5B29D029F4525401E18331575DBD
Certificate serial:       06B95697697794E2D1A92E9FC45F00D2931BDFEA
Authority key identifier: 00:12:8F:95:DB:8A:5B:29:D0:29:F4:52:54:01:E1:83:31:57:5D:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00128F95DB8A5B29D029F4525401E18331575DBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/1/323830343a346466343a3a2f33322d3438203d3e20323638323330.roa
Signing time:             Thu 04 Apr 2024 07:33:59 +0000
ROA not before:           Thu 04 Apr 2024 07:28:59 +0000
ROA not after:            Thu 03 Apr 2025 07:33:59 +0000
asID:                     268230
IP address blocks:        2804:4df4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/1/00128F95DB8A5B29D029F4525401E18331575DBD.crl
                          rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/1/00128F95DB8A5B29D029F4525401E18331575DBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00128F95DB8A5B29D029F4525401E18331575DBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b9:56:97:69:77:94:e2:d1:a9:2e:9f:c4:5f:00:d2:93:1b:df:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00128F95DB8A5B29D029F4525401E18331575DBD
        Validity
            Not Before: Apr  4 07:28:59 2024 GMT
            Not After : Apr  3 07:33:59 2025 GMT
        Subject: CN=60049AB88DE86A5F4D677EDA4A511FBCA8234707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d3:7e:b6:73:c5:5d:da:19:b2:b0:5f:b5:86:
                    16:0c:79:66:2e:db:d6:c8:0a:16:66:df:15:c0:0a:
                    9f:98:50:15:fe:a0:4e:08:db:c9:80:05:a3:50:3e:
                    bf:be:8b:14:84:f8:09:71:bb:f3:b2:5b:b3:55:60:
                    16:93:7a:db:d3:6d:29:e6:69:2f:d8:89:1d:3b:2d:
                    f4:fb:fb:85:33:5e:06:d7:ef:3d:db:b6:28:fb:6f:
                    1b:a1:7a:51:d4:0c:3d:ea:54:9e:7f:33:d4:9a:73:
                    88:96:8c:31:43:11:87:d3:ac:55:2e:b3:29:d5:34:
                    ea:68:12:48:4f:42:26:9f:5e:32:f4:ff:61:d6:4f:
                    42:a6:6b:18:94:20:f5:7d:09:f2:b8:f0:63:17:de:
                    26:68:58:7c:1a:53:fc:62:f6:b8:80:3f:f0:5c:b6:
                    c8:ce:76:ca:ba:38:00:c4:47:d4:76:fe:9d:f2:c8:
                    08:3f:d3:14:71:c1:43:a3:bc:b2:a8:77:b1:1f:61:
                    cb:b2:52:82:ab:bb:2d:dc:49:74:ae:6a:72:48:03:
                    e4:8e:ef:36:bf:72:68:d2:7b:fd:82:7d:cf:21:f5:
                    c2:5b:76:20:f0:d1:7f:f1:f5:d7:6b:36:2d:23:51:
                    ba:2f:76:51:89:c4:9f:f5:21:36:ba:b1:32:52:c9:
                    cd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:04:9A:B8:8D:E8:6A:5F:4D:67:7E:DA:4A:51:1F:BC:A8:23:47:07
            X509v3 Authority Key Identifier:
                keyid:00:12:8F:95:DB:8A:5B:29:D0:29:F4:52:54:01:E1:83:31:57:5D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/1/00128F95DB8A5B29D029F4525401E18331575DBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00128F95DB8A5B29D029F4525401E18331575DBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/1/323830343a346466343a3a2f33322d3438203d3e20323638323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4df4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:0f:ad:c4:bd:0b:34:eb:95:b1:de:03:fd:e2:cc:5b:ae:0b:
         cb:3f:fb:66:96:bc:a9:de:8d:fd:ff:dc:ee:b3:0d:be:1e:c3:
         00:5c:80:9d:e5:f2:30:97:94:96:90:29:4d:5a:a3:5a:38:f5:
         e5:c2:ea:76:91:a4:c6:59:b5:c0:9f:ee:58:b8:5b:9d:cc:02:
         a5:05:b6:b2:48:f5:6a:8b:c8:2e:8e:2b:41:e1:cd:17:89:e6:
         94:77:3f:99:ad:88:69:dd:65:f3:35:ed:57:35:57:82:c8:7d:
         25:12:e8:21:44:a5:4d:70:16:d7:3b:4c:47:23:e7:f5:b1:01:
         e4:de:c4:0b:ab:9a:30:99:89:32:74:cd:23:3e:f0:bf:0b:85:
         5f:66:83:a1:59:33:4b:c6:12:f9:fa:39:b5:a9:24:ba:71:b8:
         8d:82:f6:a9:04:a8:ab:7e:81:d9:4b:0a:1d:db:86:53:35:67:
         bd:50:da:6f:ce:08:87:27:d7:b6:d3:4c:22:c4:ce:1c:c0:a3:
         7b:20:93:93:d1:c2:8e:3b:03:fb:77:5f:f7:78:ca:48:4d:16:
         bd:6d:e3:89:19:32:54:8d:8b:d3:d8:8e:c4:e6:ae:46:52:98:
         d5:0e:0e:31:8d:13:8b:2a:76:e7:fd:f2:03:ba:e2:7f:74:d8:
         d6:53:00:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:45 2024 by rpki-client on console-ams.rpki-client.org