Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2/323830343a376466303a3a2f33322d3438203d3e20323731353932.roa
File:                     323830343a376466303a3a2f33322d3438203d3e20323731353932.roa (raw, json)
Hash identifier:          Zt6hpSB77zmHht7aF57wv012OH+U1/uwP1kzh6JW9sI=
Subject key identifier:   DF:99:86:3E:D3:A6:EA:EF:8E:86:96:78:BD:AE:F5:44:27:C7:38:01
Certificate issuer:       /CN=0D87E481DDE13C2B08241FF1415855CEAAAD5A90
Certificate serial:       2665D553D055A50EC7CA7FDCBE197F300E98A014
Authority key identifier: 0D:87:E4:81:DD:E1:3C:2B:08:24:1F:F1:41:58:55:CE:AA:AD:5A:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D87E481DDE13C2B08241FF1415855CEAAAD5A90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2/323830343a376466303a3a2f33322d3438203d3e20323731353932.roa
Signing time:             Thu 04 Apr 2024 07:48:06 +0000
ROA not before:           Thu 04 Apr 2024 07:43:06 +0000
ROA not after:            Thu 03 Apr 2025 07:48:06 +0000
asID:                     271592
IP address blocks:        2804:7df0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2/0D87E481DDE13C2B08241FF1415855CEAAAD5A90.crl
                          rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2/0D87E481DDE13C2B08241FF1415855CEAAAD5A90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D87E481DDE13C2B08241FF1415855CEAAAD5A90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 12:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:65:d5:53:d0:55:a5:0e:c7:ca:7f:dc:be:19:7f:30:0e:98:a0:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D87E481DDE13C2B08241FF1415855CEAAAD5A90
        Validity
            Not Before: Apr  4 07:43:06 2024 GMT
            Not After : Apr  3 07:48:06 2025 GMT
        Subject: CN=DF99863ED3A6EAEF8E869678BDAEF54427C73801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:97:94:83:56:bf:f2:ce:1e:b8:91:d6:e7:25:
                    d8:05:06:16:bd:6f:1a:c1:95:d8:79:f8:96:66:92:
                    4e:61:34:ff:a5:47:36:2c:d2:bb:81:00:3e:b4:fb:
                    88:61:8f:eb:c6:01:29:1e:0d:69:5d:48:6a:fc:8e:
                    97:63:e0:71:88:14:0e:cb:d0:ba:32:fc:e0:cf:8c:
                    69:2e:d1:8d:2e:62:02:c1:e4:4f:09:21:9c:f0:cf:
                    12:11:e6:5c:d6:a3:31:67:7a:1d:11:08:7a:e6:d7:
                    e7:1e:ba:a2:4c:23:65:58:da:10:aa:e3:15:25:0e:
                    de:fa:61:4f:27:63:17:2c:ee:07:29:ee:50:95:d0:
                    69:6b:85:2c:92:f6:59:3b:e5:da:0d:47:68:f4:a4:
                    99:ae:8f:ca:21:c4:4b:9d:87:99:db:ec:42:34:f5:
                    0f:d4:c0:e8:ff:8d:aa:14:23:b6:16:b9:1f:11:81:
                    2e:cd:04:26:fa:01:7e:b0:4d:64:ec:36:30:f5:9d:
                    cd:f3:b5:b1:87:67:ed:d9:bf:89:53:26:52:ad:ab:
                    49:38:12:05:43:3a:cd:81:37:8c:88:c7:c1:74:47:
                    5a:42:bd:ab:60:40:83:57:5e:ee:ae:ae:c7:a1:cb:
                    38:22:af:86:4a:47:3e:b4:4e:a5:aa:ca:e9:42:03:
                    e8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:99:86:3E:D3:A6:EA:EF:8E:86:96:78:BD:AE:F5:44:27:C7:38:01
            X509v3 Authority Key Identifier:
                keyid:0D:87:E4:81:DD:E1:3C:2B:08:24:1F:F1:41:58:55:CE:AA:AD:5A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2/0D87E481DDE13C2B08241FF1415855CEAAAD5A90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D87E481DDE13C2B08241FF1415855CEAAAD5A90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2/323830343a376466303a3a2f33322d3438203d3e20323731353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7df0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:f0:02:65:56:61:bc:e3:8f:60:8a:36:0d:5b:85:a3:e3:c1:
         7c:a1:02:81:cf:f2:2d:50:7f:2c:76:15:14:f2:3a:ff:95:3d:
         10:1e:30:cc:f4:1e:f1:6a:30:55:0b:5f:5b:e5:94:74:cb:fb:
         d6:f9:f3:fe:49:db:ed:c8:21:ce:42:56:64:e1:95:11:4e:5a:
         c9:03:61:3c:bb:19:04:b0:b6:65:3a:14:4f:a6:64:09:11:e4:
         5b:8f:63:7d:38:90:26:70:fc:81:fc:eb:16:4b:2a:32:3d:59:
         60:21:c7:93:dc:16:85:f2:87:28:2a:8a:3b:c4:de:42:59:a0:
         59:3d:a8:27:07:8f:f1:64:7e:53:94:b9:a7:3f:2d:c4:b4:eb:
         c5:8d:68:f1:9d:65:e2:d8:7f:ac:42:f2:a1:b1:45:fb:65:f8:
         af:b5:cd:5f:01:af:24:73:6b:8a:7f:db:1e:f1:35:82:b7:d8:
         d3:9c:83:9b:11:57:f5:5f:35:a8:a3:a9:a8:fc:61:b8:ab:8d:
         c0:14:03:dc:d0:b9:62:2e:5e:c4:f2:b6:50:e1:f3:30:7c:2c:
         0a:4f:bf:fd:74:2b:92:a6:82:5c:4e:cd:cd:1f:f3:d2:bb:ac:
         9a:90:c7:ea:ee:7e:bb:c3:a6:06:3d:de:05:ad:e8:8e:a1:b5:
         ff:1a:b0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 14:21:47 2024 by rpki-client on console-fra.rpki-client.org