Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a343030303a3a2f33342d3334203d3e20323633393631.roa
File:                     323830343a323836383a343030303a3a2f33342d3334203d3e20323633393631.roa (raw, json)
Hash identifier:          WiIPStyXiGM5kuGGSxu60cbDr9a2FixkxCLVLjShaT8=
Subject key identifier:   97:70:7E:88:9E:6D:91:5B:B9:7A:DF:72:DC:80:EE:7F:F4:C9:CA:9E
Certificate issuer:       /CN=0839492B6227EABB7726A5A064BEBE04E53C824A
Certificate serial:       398B704CBC0ECA316987DEC15BF9F61A5826856B
Authority key identifier: 08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a343030303a3a2f33342d3334203d3e20323633393631.roa
Signing time:             Thu 04 Apr 2024 00:41:26 +0000
ROA not before:           Thu 04 Apr 2024 00:36:26 +0000
ROA not after:            Thu 03 Apr 2025 00:41:26 +0000
asID:                     263961
IP address blocks:        2804:2868:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl
                          rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:8b:70:4c:bc:0e:ca:31:69:87:de:c1:5b:f9:f6:1a:58:26:85:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839492B6227EABB7726A5A064BEBE04E53C824A
        Validity
            Not Before: Apr  4 00:36:26 2024 GMT
            Not After : Apr  3 00:41:26 2025 GMT
        Subject: CN=97707E889E6D915BB97ADF72DC80EE7FF4C9CA9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ea:c7:d5:3a:5b:60:ca:d3:73:4e:c5:04:ca:
                    71:fe:94:4f:c0:85:19:0c:d5:4c:da:94:39:74:15:
                    61:ed:39:db:85:3b:34:37:50:16:39:4a:63:cf:36:
                    7e:93:eb:1b:42:6b:59:ab:4d:b6:ad:af:60:44:92:
                    f8:87:ff:fc:e6:51:cd:17:75:c9:49:cd:f2:0a:7e:
                    15:3f:b5:3a:ea:5e:34:1e:2a:6b:fd:4f:8e:01:e6:
                    13:69:d5:7f:10:c6:b2:dd:31:91:15:55:b3:69:fe:
                    6b:5a:ce:9e:42:09:15:78:65:96:3b:80:5a:7a:e6:
                    57:37:a9:8b:9c:7e:aa:f3:a2:ff:e8:22:ef:90:26:
                    d7:28:e9:48:ca:e5:c5:ab:33:1a:34:41:5f:95:29:
                    b4:2e:b7:97:42:93:2c:17:f6:6c:5d:91:e3:90:5d:
                    ee:ff:82:f5:9e:de:66:90:bc:73:1b:70:18:3f:ae:
                    76:63:f4:1d:8a:f7:d8:9c:ac:78:72:42:b6:e1:02:
                    7f:fd:2f:3a:bd:4f:03:8b:aa:7c:3d:73:71:e0:2b:
                    75:90:87:e8:fa:e1:da:ef:12:27:11:4d:e7:2a:38:
                    86:3f:90:eb:b2:76:84:24:76:53:44:9e:91:66:27:
                    dd:14:dc:39:d7:06:3e:e3:80:97:23:56:2a:7e:d3:
                    e3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:70:7E:88:9E:6D:91:5B:B9:7A:DF:72:DC:80:EE:7F:F4:C9:CA:9E
            X509v3 Authority Key Identifier:
                keyid:08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a343030303a3a2f33342d3334203d3e20323633393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2868:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0c:c6:05:e5:ae:b7:64:0a:46:2a:8c:a3:0d:80:8f:bd:e9:fc:
         81:57:38:40:6b:ac:ae:40:42:e5:95:f9:ab:bb:77:1a:e9:75:
         c8:71:eb:5d:85:0d:a0:4e:60:9b:20:20:d9:93:cd:e5:73:4b:
         22:83:4b:b8:a9:6c:8a:5d:58:6f:16:db:b5:62:e8:62:12:67:
         dd:4c:28:78:f9:31:41:2f:f4:7b:cc:9c:d9:1e:c3:62:70:9a:
         f9:7a:92:00:5c:be:21:a3:fb:5f:d6:dc:24:f9:24:69:37:64:
         d0:c9:5b:41:dd:f4:15:0c:69:95:a7:0b:a4:84:e7:27:ec:07:
         36:e0:23:67:b0:29:9d:16:fb:22:c1:f0:f0:47:22:63:10:e1:
         f6:a6:cc:1a:3b:a7:73:33:15:d1:66:24:bd:3b:a0:11:39:d0:
         43:6c:3d:fc:12:13:72:fd:4a:e2:ce:f5:d1:92:e1:db:a7:dd:
         47:92:1b:0f:6f:55:de:9b:7a:7b:de:81:04:8a:f1:bf:7d:33:
         9a:08:9b:a8:d0:12:97:86:4d:ff:06:3a:73:3e:21:86:5f:99:
         c3:88:f3:58:85:49:fb:1a:cf:91:d4:79:30:b2:d0:73:d5:ed:
         45:1f:04:b5:44:df:18:6a:25:ac:42:e9:c6:4f:1f:aa:22:74:
         b6:b8:6f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:06 2024 by rpki-client on console-fra.rpki-client.org