Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/2/323830343a383665383a3a2f33322d313238203d3e20323732363734.roa
File:                     323830343a383665383a3a2f33322d313238203d3e20323732363734.roa (raw, json)
Hash identifier:          F/SEvydgD4jZwhjj4gh8qqyVztV5luXxapqRxzpa2GQ=
Subject key identifier:   36:7B:13:64:41:77:BC:68:AE:E1:93:80:E5:18:EE:63:90:F6:0F:53
Certificate issuer:       /CN=7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC
Certificate serial:       1009135EC77F671FE6CBA6E42B9AB5A6827FFE45
Authority key identifier: 79:57:B9:FD:FB:5E:8E:73:FB:ED:C1:96:5C:13:C4:3C:19:79:2D:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/2/323830343a383665383a3a2f33322d313238203d3e20323732363734.roa
Signing time:             Thu 04 Apr 2024 09:30:37 +0000
ROA not before:           Thu 04 Apr 2024 09:25:37 +0000
ROA not after:            Thu 03 Apr 2025 09:30:37 +0000
asID:                     272674
IP address blocks:        2804:86e8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/2/7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC.crl
                          rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/2/7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:09:13:5e:c7:7f:67:1f:e6:cb:a6:e4:2b:9a:b5:a6:82:7f:fe:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC
        Validity
            Not Before: Apr  4 09:25:37 2024 GMT
            Not After : Apr  3 09:30:37 2025 GMT
        Subject: CN=367B13644177BC68AEE19380E518EE6390F60F53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:83:3f:51:ce:09:d8:0c:f5:f9:80:e3:b5:db:
                    5d:85:e4:76:20:08:47:b2:2c:40:93:09:be:0e:53:
                    b7:8a:ae:8e:37:ff:d0:61:dc:8a:b3:f5:da:da:5f:
                    ce:0f:cf:e5:59:9c:bc:0b:c2:1e:4d:71:f8:71:17:
                    bc:82:02:82:a6:1b:bb:8c:64:b8:db:4c:84:e2:ea:
                    2e:52:ec:57:01:8d:d0:63:1d:c2:cf:01:75:04:92:
                    71:6d:cf:f2:22:f8:3e:12:51:b9:be:8e:a7:8f:ac:
                    da:18:df:57:55:d3:4c:1d:de:98:e7:a7:7f:3a:5b:
                    bb:ba:6f:25:66:d0:81:ab:09:f6:5b:6a:1b:ad:5a:
                    d7:a1:de:f2:44:f3:d0:45:34:06:8a:da:54:bf:be:
                    c5:15:88:ed:89:b1:ae:10:0a:d5:7b:76:c5:68:b5:
                    e2:d3:32:d8:09:cd:8b:e6:10:04:62:3a:42:2d:b6:
                    58:f6:28:a4:23:42:c9:18:a7:b4:d8:dd:a5:ea:6c:
                    19:1a:7e:85:bf:79:fa:5d:be:7e:92:26:ad:49:9a:
                    41:47:1c:78:ac:d4:0b:33:64:92:d5:3d:57:89:46:
                    d4:37:b6:de:4f:b5:c7:62:d1:c4:c8:f6:cc:6b:14:
                    9f:61:62:a9:d2:90:2b:3e:3a:7d:10:76:c4:68:6c:
                    dc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7B:13:64:41:77:BC:68:AE:E1:93:80:E5:18:EE:63:90:F6:0F:53
            X509v3 Authority Key Identifier:
                keyid:79:57:B9:FD:FB:5E:8E:73:FB:ED:C1:96:5C:13:C4:3C:19:79:2D:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/2/7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/2/323830343a383665383a3a2f33322d313238203d3e20323732363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:56:75:a2:fa:e2:c2:df:16:ce:57:6f:b7:86:c2:be:ef:63:
         a3:f2:e3:2c:07:37:14:a8:7b:02:81:4e:12:e2:c0:53:cf:14:
         53:1e:0f:e4:24:51:9a:70:4e:e0:c0:a3:22:db:e0:a3:96:57:
         c6:f4:29:d5:2d:c5:7b:2c:24:23:b9:48:1d:08:a1:f0:54:c7:
         d1:39:e2:61:2d:1b:53:d8:00:7c:ec:f5:83:28:db:0b:fa:bb:
         68:8b:ae:8c:71:bf:f8:81:9c:b9:a2:b1:59:cc:d8:82:2e:4c:
         dc:18:a4:c9:f1:aa:9c:90:06:25:b7:37:ef:67:9c:11:13:21:
         a5:55:25:2e:08:d3:cc:41:f9:7f:f9:fb:de:f6:79:78:21:f5:
         f5:72:3e:ed:fc:ab:55:da:09:8f:47:32:5d:64:ed:f9:0c:18:
         82:5a:d8:b8:33:a4:b8:d6:b0:ee:79:53:07:fc:d6:69:e1:b4:
         c9:5a:cf:23:25:fd:9d:6f:23:59:46:7f:75:ef:59:0b:18:0c:
         ab:23:05:c3:20:80:d2:78:43:7e:2b:28:84:cb:db:c4:33:cc:
         6e:9c:be:12:d4:92:2d:82:50:06:7d:e7:85:85:d0:fd:14:67:
         27:02:54:c0:72:48:5d:a4:b5:e3:66:c5:06:32:80:eb:58:05:
         f2:fa:de:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:50 2024 by rpki-client on console-fra.rpki-client.org