Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/2/323830343a333734383a3a2f33322d3332203d3e20323636343031.roa
File:                     323830343a333734383a3a2f33322d3332203d3e20323636343031.roa (raw, json)
Hash identifier:          rsd306Mn/fECeE9QIiyy44YeULqjBwNL8pYUXTosYRE=
Subject key identifier:   C3:F6:63:B7:B3:75:F3:66:7D:A7:9C:40:4E:47:36:00:9E:91:00:2D
Certificate issuer:       /CN=74038050DA0A7BBF9FC597CBE492853E26412E8F
Certificate serial:       771702BA2DE7CE706BB070332529CE098A8D8A6A
Authority key identifier: 74:03:80:50:DA:0A:7B:BF:9F:C5:97:CB:E4:92:85:3E:26:41:2E:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74038050DA0A7BBF9FC597CBE492853E26412E8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/2/323830343a333734383a3a2f33322d3332203d3e20323636343031.roa
Signing time:             Thu 04 Apr 2024 20:12:42 +0000
ROA not before:           Thu 04 Apr 2024 20:07:42 +0000
ROA not after:            Thu 03 Apr 2025 20:12:42 +0000
asID:                     266401
IP address blocks:        2804:3748::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/2/74038050DA0A7BBF9FC597CBE492853E26412E8F.crl
                          rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/2/74038050DA0A7BBF9FC597CBE492853E26412E8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74038050DA0A7BBF9FC597CBE492853E26412E8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:17:02:ba:2d:e7:ce:70:6b:b0:70:33:25:29:ce:09:8a:8d:8a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74038050DA0A7BBF9FC597CBE492853E26412E8F
        Validity
            Not Before: Apr  4 20:07:42 2024 GMT
            Not After : Apr  3 20:12:42 2025 GMT
        Subject: CN=C3F663B7B375F3667DA79C404E4736009E91002D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2c:ba:61:ef:e2:a0:7d:ab:00:5e:aa:dd:53:
                    2c:fd:fb:82:be:f5:83:01:71:b4:89:97:20:19:27:
                    61:02:85:fe:26:34:ae:41:6a:3b:10:21:31:dd:16:
                    10:0c:30:44:79:00:43:46:77:40:95:26:5c:8e:ce:
                    25:f1:f7:5d:1d:81:ab:ac:b7:b4:e9:6b:0a:9e:6f:
                    4b:49:34:60:9d:72:2e:95:8f:0b:32:fa:8d:d0:45:
                    5c:ca:57:01:45:a0:7f:cb:dc:3b:95:38:ca:8f:d1:
                    94:eb:c9:b3:d5:86:0d:32:68:dd:35:86:dc:f4:86:
                    82:8f:22:b3:f3:ed:15:e1:97:35:82:d3:ae:d4:db:
                    9d:7c:3a:90:1b:ee:fb:55:49:98:75:8e:ab:74:60:
                    b1:37:e0:6c:63:f8:fe:57:d1:fe:3a:29:bf:77:60:
                    27:7f:9e:b7:3c:88:d8:48:cd:5b:18:a5:71:5c:79:
                    63:a8:31:df:91:e4:45:3c:e1:c8:a1:17:77:78:1c:
                    cb:80:2e:f4:15:90:ad:b3:3d:65:fe:e2:6e:0c:69:
                    aa:78:b4:3b:3e:8c:df:14:3b:7e:1d:cf:6a:f3:ae:
                    e4:65:4a:8d:ee:97:55:d8:cf:be:53:a5:6d:09:6d:
                    5e:98:2b:54:ac:41:79:34:06:d1:fc:da:de:71:19:
                    f9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F6:63:B7:B3:75:F3:66:7D:A7:9C:40:4E:47:36:00:9E:91:00:2D
            X509v3 Authority Key Identifier:
                keyid:74:03:80:50:DA:0A:7B:BF:9F:C5:97:CB:E4:92:85:3E:26:41:2E:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/2/74038050DA0A7BBF9FC597CBE492853E26412E8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74038050DA0A7BBF9FC597CBE492853E26412E8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/2/323830343a333734383a3a2f33322d3332203d3e20323636343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3748::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:43:1a:e4:e6:62:df:32:77:3e:06:2b:57:36:08:b6:d2:6e:
         cb:0e:39:ed:59:a3:f3:af:87:3e:29:66:f0:a3:f3:c5:4b:47:
         af:44:17:5f:28:e9:07:b0:d7:83:64:a1:a0:3b:3e:46:1e:98:
         2e:1c:87:e0:7a:b0:55:70:2f:5f:ba:07:91:b8:e0:6f:79:73:
         17:ba:ec:ed:4b:a7:d5:83:8d:09:ce:24:84:ab:58:3e:1c:a0:
         b6:c9:21:d6:87:b4:1c:af:11:4e:e1:30:01:6a:04:14:64:19:
         79:08:10:57:23:80:84:57:35:17:53:16:22:15:31:aa:c3:9e:
         1d:9d:84:5f:c7:b2:a8:db:7e:7c:91:08:a1:ba:84:2c:25:99:
         7b:ca:4e:6f:03:c2:53:39:a9:8d:56:e0:4a:d7:92:97:bf:1b:
         65:65:1d:a1:e7:0f:25:f1:d2:04:0a:aa:40:a7:cf:c9:7f:2a:
         6a:5c:99:36:bb:aa:99:d1:c8:a1:ca:35:5c:52:df:af:2d:c0:
         2b:2f:07:47:f0:ef:84:f9:c4:aa:db:b3:e9:27:68:3a:f4:ae:
         ec:dd:3b:2d:50:df:2e:11:63:63:54:ab:ab:ba:6a:58:77:09:
         2d:c8:97:75:0a:71:11:aa:74:bc:2c:2b:e7:fa:d0:ad:9c:8a:
         44:ad:ba:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:17 2024 by rpki-client on console-ams.rpki-client.org