Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/323830343a3963303a3a2f33322d313238203d3e20323632393839.roa
File:                     323830343a3963303a3a2f33322d313238203d3e20323632393839.roa (raw, json)
Hash identifier:          elaEaTm6WdDq+CezjXk3sbssDZhMPqKpssnUcrCt/fo=
Subject key identifier:   57:C9:9B:DA:83:A4:22:5C:72:09:C2:35:E7:50:01:BB:B5:92:17:FC
Certificate issuer:       /CN=D322281463F194BEAD29926EC73A0E7378D1F259
Certificate serial:       28A55F4D935AA9D7886A5F20DAA67ACC4FA39F0B
Authority key identifier: D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/323830343a3963303a3a2f33322d313238203d3e20323632393839.roa
Signing time:             Thu 04 Apr 2024 19:59:12 +0000
ROA not before:           Thu 04 Apr 2024 19:54:12 +0000
ROA not after:            Thu 03 Apr 2025 19:59:12 +0000
asID:                     262989
IP address blocks:        2804:9c0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.crl
                          rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a5:5f:4d:93:5a:a9:d7:88:6a:5f:20:da:a6:7a:cc:4f:a3:9f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D322281463F194BEAD29926EC73A0E7378D1F259
        Validity
            Not Before: Apr  4 19:54:12 2024 GMT
            Not After : Apr  3 19:59:12 2025 GMT
        Subject: CN=57C99BDA83A4225C7209C235E75001BBB59217FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e8:c2:ec:6a:b8:65:da:35:63:d0:46:04:30:
                    ce:2e:3e:5b:2e:21:01:11:ef:17:96:8d:f2:c7:0d:
                    91:86:74:72:ee:c3:26:62:7a:8b:bb:a2:f3:ca:a5:
                    7d:49:11:8b:43:ad:16:04:7a:51:45:10:34:19:92:
                    ee:e2:b9:32:ef:73:ca:a5:c2:58:0a:7c:49:f5:8f:
                    d8:76:95:02:d6:19:ca:67:ac:d9:40:dc:e7:5e:3b:
                    ba:24:6c:79:fe:03:b6:21:00:8b:5e:98:d1:3b:8c:
                    45:70:5c:ce:c8:8d:b9:a7:37:97:a9:04:20:34:12:
                    46:55:22:1e:ba:3d:7a:54:b8:17:c8:51:e1:e5:cb:
                    8e:4f:2d:c3:cb:df:27:7c:8c:67:bc:76:68:47:98:
                    a1:f1:ea:81:bd:a5:91:4e:1a:a3:31:d4:5a:21:9e:
                    be:65:22:be:40:97:7f:db:d1:08:27:d2:a4:a4:96:
                    24:a5:09:86:e7:bf:d1:fd:12:92:c3:c7:1b:98:b3:
                    10:68:a9:82:ed:ae:2d:8d:c1:5b:d9:a0:68:b1:90:
                    aa:d9:79:5d:d6:1c:95:c9:aa:35:81:25:92:88:56:
                    00:d3:f5:cc:09:6c:19:a4:03:b3:39:46:32:e2:0a:
                    f0:fa:29:71:b7:03:05:29:58:71:87:c1:86:ef:d0:
                    fe:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C9:9B:DA:83:A4:22:5C:72:09:C2:35:E7:50:01:BB:B5:92:17:FC
            X509v3 Authority Key Identifier:
                keyid:D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/323830343a3963303a3a2f33322d313238203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:af:39:05:e8:1e:76:7c:de:6d:eb:c2:2d:6e:33:42:d6:9a:
         3b:41:e8:7e:b5:97:a0:fc:aa:f9:af:e9:4b:4f:c9:9d:31:22:
         03:69:fd:80:f5:11:ca:ca:f8:dd:97:04:74:a1:60:c7:ff:93:
         e6:d5:34:0b:d3:0b:58:d2:0f:c5:70:1f:71:1e:f2:d1:8e:64:
         32:d7:bb:72:01:0d:e4:e6:a4:db:f4:c4:a0:73:bf:5a:ed:22:
         a7:90:90:f7:27:9c:ff:f7:f4:a9:f1:42:b3:9e:55:39:24:e5:
         4c:e5:c8:60:23:eb:19:11:f7:26:89:45:8b:4a:95:f1:25:64:
         a0:62:a0:c9:e2:f5:c4:d6:5a:d4:29:bd:bc:49:a9:c9:54:93:
         27:3d:7a:e3:c3:a1:d7:d4:7c:9a:3f:b9:38:6e:09:ef:bd:24:
         33:d5:e2:23:6f:8e:e4:bf:3f:19:22:30:50:66:5d:47:7a:17:
         02:38:73:27:df:d2:0d:e2:06:65:8e:ca:86:7a:11:fa:86:bc:
         2e:e3:81:bc:8a:54:46:00:8c:e7:e0:ac:2c:74:23:09:dd:38:
         9f:9e:4c:50:67:ce:a8:0a:4d:a5:8e:6f:f3:55:8f:0d:1c:79:
         19:27:f2:23:be:52:e6:91:4a:1a:71:0c:8b:c9:6f:ff:ad:61:
         0c:be:05:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:15 2024 by rpki-client on console-ams.rpki-client.org