Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/323830343a313964383a3a2f33322d3335203d3e203631383232.roa
File:                     323830343a313964383a3a2f33322d3335203d3e203631383232.roa (raw, json)
Hash identifier:          5o1FWnhbaZbUFriDvWg99K4BgzUm7ncPvPGuuwjyRbM=
Subject key identifier:   C0:95:58:85:FC:77:7C:4A:B7:39:0E:6B:66:0E:F9:BD:C9:71:B0:75
Certificate issuer:       /CN=D83644536B842CD15686D699796D2336D6F94682
Certificate serial:       3E5E7D770460F971376E7DFDD83221E86A3FFDD8
Authority key identifier: D8:36:44:53:6B:84:2C:D1:56:86:D6:99:79:6D:23:36:D6:F9:46:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83644536B842CD15686D699796D2336D6F94682.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/323830343a313964383a3a2f33322d3335203d3e203631383232.roa
Signing time:             Wed 03 Apr 2024 18:32:34 +0000
ROA not before:           Wed 03 Apr 2024 18:27:34 +0000
ROA not after:            Wed 02 Apr 2025 18:32:34 +0000
asID:                     61822
IP address blocks:        2804:19d8::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/D83644536B842CD15686D699796D2336D6F94682.crl
                          rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/D83644536B842CD15686D699796D2336D6F94682.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83644536B842CD15686D699796D2336D6F94682.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:5e:7d:77:04:60:f9:71:37:6e:7d:fd:d8:32:21:e8:6a:3f:fd:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D83644536B842CD15686D699796D2336D6F94682
        Validity
            Not Before: Apr  3 18:27:34 2024 GMT
            Not After : Apr  2 18:32:34 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:13:8d:8a:11:8b:32:05:8c:99:93:1a:42:4b:
                    15:e5:7e:da:3d:84:13:fe:ae:7f:0e:d4:9f:f5:50:
                    18:69:ea:97:6b:65:e4:c9:12:61:03:52:7f:e1:6d:
                    c8:ac:10:35:8c:c3:75:f2:17:7d:a1:a0:64:be:4a:
                    07:7a:10:53:96:38:cd:a5:27:4f:33:3e:cd:bf:b5:
                    60:26:a1:01:74:b2:48:b5:aa:b3:bc:ba:40:7d:c7:
                    59:8c:dd:4a:2f:a1:f6:5b:9a:74:4e:02:ce:97:93:
                    85:ea:96:d8:f2:92:81:78:94:1d:55:f9:a1:46:b6:
                    06:2c:ff:a9:92:84:5c:19:53:78:dd:69:a8:99:c8:
                    09:8e:96:c9:79:d5:1b:5e:32:f7:81:f5:61:19:18:
                    df:e4:ce:91:ed:1a:c8:b9:9c:1e:fc:a8:d0:30:c8:
                    c4:63:00:cd:46:89:4f:4c:df:b5:a3:3b:be:39:93:
                    f9:2f:d8:e1:04:f5:d1:8b:6d:42:06:76:53:73:87:
                    4a:c5:db:9c:f2:ab:a6:ae:c0:65:dc:9b:a0:3e:ca:
                    4f:9d:d1:46:7f:e7:53:b7:67:44:ac:51:40:9e:49:
                    f9:15:92:14:99:3c:80:9b:a3:09:5c:e4:13:b0:4b:
                    b4:82:2c:6a:60:97:c7:35:07:37:35:59:6d:02:e5:
                    df:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:95:58:85:FC:77:7C:4A:B7:39:0E:6B:66:0E:F9:BD:C9:71:B0:75
            X509v3 Authority Key Identifier:
                keyid:D8:36:44:53:6B:84:2C:D1:56:86:D6:99:79:6D:23:36:D6:F9:46:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/D83644536B842CD15686D699796D2336D6F94682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83644536B842CD15686D699796D2336D6F94682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/323830343a313964383a3a2f33322d3335203d3e203631383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:19d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:50:31:b1:3b:91:0e:f2:46:ad:a1:04:c2:82:9f:b3:39:25:
         7c:39:ca:7e:de:85:0d:f2:0b:f9:0f:32:3f:e0:05:c2:b7:6c:
         c9:96:87:df:36:2e:bc:9f:71:e2:73:d6:51:5f:34:ca:4a:8b:
         36:6f:5c:25:47:17:5d:ce:7e:3d:a9:33:a4:b0:84:88:1f:75:
         63:e9:47:38:74:a8:72:3d:e8:4e:0b:b0:0b:62:97:91:6c:1f:
         d0:04:9e:c7:ae:1b:b0:3e:6b:c6:0a:70:f9:de:fb:18:6e:38:
         7a:7a:f5:5f:f1:fb:9e:65:de:05:ff:d4:cb:1a:da:4b:e9:e3:
         02:83:4b:98:e0:74:4f:67:48:f7:18:6b:a4:b3:1a:c3:25:85:
         9b:7d:df:eb:a2:8a:64:25:a3:85:89:01:14:c7:02:71:3b:84:
         75:5b:e4:9c:c8:6b:7a:24:5c:4f:01:07:65:10:83:81:70:80:
         17:0f:2a:b1:78:ec:e6:b4:c8:ba:c0:e4:1a:d7:2f:bd:f4:c0:
         80:a4:99:d1:ef:c4:b2:d9:69:fd:f0:43:5a:98:15:0b:17:fa:
         1e:62:2c:73:60:b4:8e:e4:11:26:ab:8c:ec:f9:0e:b3:9e:2b:
         a8:51:de:53:35:30:e4:cb:cd:de:8e:7a:bc:86:26:fc:b5:7e:
         20:48:42:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:45:01 2024 by rpki-client on console-fra.rpki-client.org