Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/323830343a323936303a3a2f33322d3332203d3e20323634303131.roa
File:                     323830343a323936303a3a2f33322d3332203d3e20323634303131.roa (raw, json)
Hash identifier:          W14nbwW0MQJX6Fe8uZT+zsThb6KythePJ3BnV0sF5IE=
Subject key identifier:   D7:D7:9C:D7:A9:8B:B3:82:58:00:28:51:F4:8E:BD:B3:DB:BA:AB:C7
Certificate issuer:       /CN=2E322CEA05DD556250D2E421A2366BA5D174766B
Certificate serial:       023477EEA3B84E156C3751A777B34B3CD9471D00
Authority key identifier: 2E:32:2C:EA:05:DD:55:62:50:D2:E4:21:A2:36:6B:A5:D1:74:76:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E322CEA05DD556250D2E421A2366BA5D174766B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/323830343a323936303a3a2f33322d3332203d3e20323634303131.roa
Signing time:             Wed 19 Jun 2024 18:20:07 +0000
ROA not before:           Wed 19 Jun 2024 18:15:07 +0000
ROA not after:            Wed 18 Jun 2025 18:20:07 +0000
asID:                     264011
IP address blocks:        2804:2960::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/2E322CEA05DD556250D2E421A2366BA5D174766B.crl
                          rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/2E322CEA05DD556250D2E421A2366BA5D174766B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E322CEA05DD556250D2E421A2366BA5D174766B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Jun 2024 22:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:34:77:ee:a3:b8:4e:15:6c:37:51:a7:77:b3:4b:3c:d9:47:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E322CEA05DD556250D2E421A2366BA5D174766B
        Validity
            Not Before: Jun 19 18:15:07 2024 GMT
            Not After : Jun 18 18:20:07 2025 GMT
        Subject: CN=D7D79CD7A98BB38258002851F48EBDB3DBBAABC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:15:16:b0:24:23:3c:40:bc:ec:be:f2:a3:76:
                    2e:28:b2:eb:07:43:3a:d2:25:2c:9c:38:0e:33:a0:
                    be:02:df:b9:91:96:da:6a:08:6e:83:dc:2c:d3:e2:
                    34:db:a3:1d:6c:6f:42:95:d0:3c:96:bf:e7:0c:a1:
                    4a:e8:42:82:4d:15:34:ff:62:88:8a:3c:c2:89:15:
                    d7:3e:88:8f:73:0f:d2:ff:38:f4:a8:15:59:4a:67:
                    41:eb:7c:32:f6:d5:33:f1:06:56:5d:aa:a7:42:ba:
                    94:b5:2b:09:da:cf:d1:49:bd:11:a5:95:2e:2b:38:
                    6f:b5:b1:24:37:51:da:33:dd:e7:c8:8c:44:25:6d:
                    9a:30:11:1c:df:76:16:b5:d3:0c:b5:4e:4c:2a:11:
                    7c:0f:6a:d5:9d:9d:2c:a4:65:c5:ff:77:6d:0e:9c:
                    b6:a6:0c:5d:c1:e5:7f:37:10:36:8f:75:6d:3b:8b:
                    19:ac:66:f6:dd:6c:32:76:a3:c2:b2:34:c2:df:7d:
                    d9:d6:3a:7b:f9:f9:0c:ff:f5:c6:9e:10:e2:61:d4:
                    8a:1e:9d:d0:50:30:91:91:2e:a8:de:72:3b:c1:1c:
                    8c:1d:a5:9e:00:c5:b7:ca:aa:12:c1:19:77:f0:14:
                    20:31:03:f6:1d:e2:e6:49:7b:a2:1a:8f:ef:e2:10:
                    55:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D7:9C:D7:A9:8B:B3:82:58:00:28:51:F4:8E:BD:B3:DB:BA:AB:C7
            X509v3 Authority Key Identifier:
                keyid:2E:32:2C:EA:05:DD:55:62:50:D2:E4:21:A2:36:6B:A5:D1:74:76:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/2E322CEA05DD556250D2E421A2366BA5D174766B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E322CEA05DD556250D2E421A2366BA5D174766B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/323830343a323936303a3a2f33322d3332203d3e20323634303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2960::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:fc:05:53:0c:d1:4e:33:3a:09:b1:01:b5:12:fb:4b:cc:02:
         77:49:73:c8:6f:0a:e9:20:d4:12:8a:98:ea:43:cf:20:4b:67:
         e0:12:4e:8e:2b:38:4f:88:f1:a4:3a:7b:97:36:db:c9:d9:43:
         5a:e7:71:d8:75:82:ec:3d:3b:9e:35:a2:7a:af:8f:fe:fa:e7:
         47:42:71:84:81:56:d6:bd:73:4a:98:a8:28:26:07:1e:94:51:
         41:8a:19:38:64:45:99:b5:ae:f6:50:12:f8:a4:25:f0:5f:67:
         2d:08:d4:2c:4c:77:ba:b1:67:23:29:d5:3e:67:c4:3e:fa:44:
         42:c5:c1:d9:3d:b2:d0:db:0d:54:f3:53:d3:96:3b:7f:1c:3f:
         a6:91:ce:fc:0e:20:08:2b:1f:b8:aa:5d:99:9b:9e:30:28:8c:
         9a:a5:c4:9a:0f:82:15:c2:2f:6c:10:4d:5a:4c:2a:21:89:41:
         43:51:f9:3f:30:c1:f2:7a:bb:b1:0d:ba:f1:d9:e3:9c:7a:eb:
         18:ca:74:a7:ed:9f:c4:ee:d9:54:b1:ec:3c:7e:6e:62:3d:05:
         ab:03:12:ae:da:54:49:e8:28:5c:39:93:cf:ae:75:20:74:b5:
         5a:3f:cb:56:ef:33:09:d7:a3:47:b9:0b:03:c3:f0:5e:bd:65:
         76:e5:7d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:06:00 2024 by rpki-client on console-ams.rpki-client.org