Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/1/323830343a363131633a3a2f33322d313238203d3e20323639323133.roa
File:                     323830343a363131633a3a2f33322d313238203d3e20323639323133.roa (raw, json)
Hash identifier:          nxPITwHZcEZz9brigdlaLw3xwumCt2nFqn5kLghK0Q4=
Subject key identifier:   B9:73:17:97:C9:E8:ED:01:CD:EF:89:A9:8B:75:68:0F:99:54:70:86
Certificate issuer:       /CN=2CD9B2A2B015061457F1A9598631FA6CA2004705
Certificate serial:       30D087B2FC74AC2A06461F3E409EE0E14765E5E8
Authority key identifier: 2C:D9:B2:A2:B0:15:06:14:57:F1:A9:59:86:31:FA:6C:A2:00:47:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD9B2A2B015061457F1A9598631FA6CA2004705.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/1/323830343a363131633a3a2f33322d313238203d3e20323639323133.roa
Signing time:             Thu 04 Apr 2024 07:04:32 +0000
ROA not before:           Thu 04 Apr 2024 06:59:32 +0000
ROA not after:            Thu 03 Apr 2025 07:04:32 +0000
asID:                     269213
IP address blocks:        2804:611c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/1/2CD9B2A2B015061457F1A9598631FA6CA2004705.crl
                          rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/1/2CD9B2A2B015061457F1A9598631FA6CA2004705.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD9B2A2B015061457F1A9598631FA6CA2004705.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d0:87:b2:fc:74:ac:2a:06:46:1f:3e:40:9e:e0:e1:47:65:e5:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CD9B2A2B015061457F1A9598631FA6CA2004705
        Validity
            Not Before: Apr  4 06:59:32 2024 GMT
            Not After : Apr  3 07:04:32 2025 GMT
        Subject: CN=B9731797C9E8ED01CDEF89A98B75680F99547086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:10:62:b2:17:d6:2d:4e:0b:3e:71:93:86:a4:
                    54:fa:ec:5d:b4:b5:b8:a2:ad:40:bd:18:5b:9f:41:
                    07:d0:bd:b3:68:ab:af:8c:26:d5:c5:18:e0:0d:c8:
                    e2:df:2a:7f:1d:56:b3:bc:d8:d9:9b:97:cf:88:4e:
                    0b:ef:f1:41:36:09:d9:45:1c:79:96:78:26:fd:df:
                    e5:9d:7d:6e:fd:c7:49:45:38:79:ab:2f:7b:93:16:
                    16:be:b1:8f:e7:01:02:7e:a1:a4:a9:35:61:bb:8e:
                    b0:44:c1:38:9b:0b:9a:9d:e2:53:3e:b8:6f:53:39:
                    fb:48:40:14:01:66:d2:05:ca:ad:2d:4b:fd:a5:b5:
                    b0:98:65:f8:f2:52:c7:6e:d3:9d:1b:8c:5d:f1:6a:
                    17:a3:50:52:ac:74:c9:01:60:00:9c:9f:54:9d:89:
                    96:2c:9e:c1:39:26:fc:3b:cf:b4:42:8b:90:0a:23:
                    62:60:7a:91:84:b8:e7:b5:57:81:28:90:66:b0:07:
                    33:21:73:0c:04:4f:a1:53:13:e0:90:ec:03:73:c0:
                    ca:69:6a:f9:36:ff:d7:b5:8e:cb:07:72:2b:18:58:
                    36:85:9e:0b:a7:bf:bf:9f:f3:e8:15:d0:29:c7:59:
                    65:ed:87:dc:d9:6d:af:39:39:32:96:3a:5b:1a:55:
                    05:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:73:17:97:C9:E8:ED:01:CD:EF:89:A9:8B:75:68:0F:99:54:70:86
            X509v3 Authority Key Identifier:
                keyid:2C:D9:B2:A2:B0:15:06:14:57:F1:A9:59:86:31:FA:6C:A2:00:47:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/1/2CD9B2A2B015061457F1A9598631FA6CA2004705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD9B2A2B015061457F1A9598631FA6CA2004705.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/1/323830343a363131633a3a2f33322d313238203d3e20323639323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:611c::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:fa:31:e0:a1:be:e8:10:6e:25:da:a3:aa:90:25:a3:27:0a:
         f3:1a:fc:5c:97:49:4a:bd:e0:08:2d:2b:04:a4:86:94:59:d9:
         8b:72:68:80:88:2e:43:ca:3c:be:ff:85:93:bb:93:b7:9e:d6:
         58:87:43:93:58:dd:93:d0:f5:46:c2:4d:28:1a:12:35:f2:d6:
         8e:e9:96:d2:14:b6:bb:cf:3a:85:93:1a:65:5d:4b:10:12:8f:
         17:f2:a3:7d:cd:b2:9b:f2:ef:81:da:a4:1d:c9:28:c0:cd:dd:
         15:f0:c6:c7:88:ed:c6:05:b7:93:95:57:af:d9:b3:27:11:c2:
         55:2e:20:a9:45:28:f6:b5:24:1d:4c:60:d9:db:9b:73:4a:48:
         07:7c:99:3d:38:e7:dd:c1:30:f2:77:53:5a:03:9e:d1:d1:67:
         18:3a:c9:62:b5:68:5d:71:df:74:0d:42:53:bd:9b:83:1a:ee:
         72:f5:86:98:79:b1:7b:cb:2a:c6:dd:31:46:e8:42:25:d3:92:
         47:21:f6:d5:31:a6:f3:4c:8e:e8:c9:29:2a:31:30:4e:d7:0c:
         d7:20:52:1a:96:51:9f:4b:14:32:0a:dd:fb:49:00:9f:66:01:
         95:c9:54:db:e8:54:84:0b:09:b5:80:21:bd:34:90:de:0b:51:
         8b:fa:56:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 09:54:20 2024 by rpki-client on console-fra.rpki-client.org