Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a3a2f33342d3334203d3e20323633393631.roa
File:                     323830343a323836383a3a2f33342d3334203d3e20323633393631.roa (raw, json)
Hash identifier:          2r5PWsw3Xpvbtc1fkCXkfQFrpWsaBkHe5eqAftdGenY=
Subject key identifier:   4B:91:35:B7:98:BF:21:C9:CE:66:72:F2:84:2D:24:B4:16:5C:47:23
Certificate issuer:       /CN=0839492B6227EABB7726A5A064BEBE04E53C824A
Certificate serial:       5668D9984F0908183F03C6FF4E9EC49BD474855A
Authority key identifier: 08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a3a2f33342d3334203d3e20323633393631.roa
Signing time:             Thu 04 Apr 2024 00:41:26 +0000
ROA not before:           Thu 04 Apr 2024 00:36:26 +0000
ROA not after:            Thu 03 Apr 2025 00:41:26 +0000
asID:                     263961
IP address blocks:        2804:2868::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl
                          rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:68:d9:98:4f:09:08:18:3f:03:c6:ff:4e:9e:c4:9b:d4:74:85:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839492B6227EABB7726A5A064BEBE04E53C824A
        Validity
            Not Before: Apr  4 00:36:26 2024 GMT
            Not After : Apr  3 00:41:26 2025 GMT
        Subject: CN=4B9135B798BF21C9CE6672F2842D24B4165C4723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c7:3c:64:d8:1b:ae:20:48:33:e2:fe:19:e6:
                    d1:c7:a1:c3:43:6b:68:c7:d5:8e:83:4b:4a:d2:dd:
                    13:67:33:03:a1:20:fa:5a:c3:e0:23:a6:27:4d:87:
                    9c:5d:94:6a:5b:60:80:70:5f:89:ee:e0:85:bc:60:
                    03:24:fb:02:09:be:19:48:51:a6:00:ab:90:4f:f4:
                    f2:5d:2e:a6:60:cd:dc:a2:bc:fc:a0:6c:b4:d3:e2:
                    ae:da:61:87:a2:e2:b4:41:3f:9a:03:b8:d6:5a:57:
                    c3:c1:ee:ec:8f:cd:0c:a8:6a:51:c9:a3:01:2f:e0:
                    d0:14:f9:fc:97:33:88:cd:66:2d:3c:ef:24:78:ca:
                    07:0b:97:d5:85:7f:22:8e:43:85:88:77:6f:be:9c:
                    08:8c:64:ba:87:8b:0b:48:9f:84:e5:35:cf:55:f2:
                    8b:f7:73:89:23:fb:1c:74:18:ba:fb:cc:4c:4e:51:
                    0d:9b:03:c8:cb:a6:6c:bf:fd:9f:19:13:e1:c4:b0:
                    9c:b2:dd:41:3a:5e:a6:d7:6f:1e:9f:75:3d:80:62:
                    28:8f:8d:30:ac:5d:38:38:16:e2:5b:15:5b:19:09:
                    45:b5:09:1f:c9:30:1a:9e:93:9c:6b:7e:10:10:40:
                    c0:12:f5:f3:a4:db:78:9b:0e:0a:87:79:c8:e9:5b:
                    e2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:91:35:B7:98:BF:21:C9:CE:66:72:F2:84:2D:24:B4:16:5C:47:23
            X509v3 Authority Key Identifier:
                keyid:08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a3a2f33342d3334203d3e20323633393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2868::/34

    Signature Algorithm: sha256WithRSAEncryption
         6e:23:ec:4e:a8:0b:5d:e4:f2:fc:b8:6b:b1:bc:03:1d:e0:e6:
         77:09:47:ec:e4:ef:18:c9:62:67:97:c5:bf:3e:2c:07:bf:2b:
         7a:84:11:39:c5:fd:c3:43:83:f9:2c:a5:bc:83:e9:e2:c3:0d:
         2e:9f:8a:02:86:96:1d:dc:81:2d:f2:0e:ef:63:2d:78:ad:bb:
         81:e4:67:4d:00:d8:9f:e9:30:b8:a0:c3:5b:b7:c2:b5:89:49:
         6a:e2:f9:55:cb:2e:3a:cf:ee:ec:d7:da:46:4c:a6:a9:22:63:
         cb:0e:01:0b:67:a3:cc:d2:ec:fa:78:f3:23:af:98:33:fc:ef:
         7e:6d:42:9d:f7:a4:2e:ab:29:4e:57:e7:74:0c:a6:b1:2a:97:
         7e:51:24:64:38:34:4d:fa:36:60:42:5b:5c:bc:e6:83:f2:78:
         0a:2f:37:27:58:2d:b5:77:09:de:61:a9:93:1f:c8:99:54:a4:
         fe:61:91:d7:46:88:c8:e5:9c:4a:02:b4:1e:ec:b4:3b:d7:b2:
         2f:45:9d:0d:80:e2:c3:4e:f7:4c:86:f4:51:20:0a:db:81:74:
         70:67:29:1e:f1:3e:c4:cc:52:ff:6e:e9:3f:61:00:8c:a9:05:
         63:ad:c2:02:f9:95:88:1b:9d:cc:db:84:75:87:f0:71:3f:bb:
         bb:14:11:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:58 2024 by rpki-client on console-ams.rpki-client.org