Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a383030303a3a2f33342d3334203d3e20323632363432.roa
File:                     323830343a326561383a383030303a3a2f33342d3334203d3e20323632363432.roa (raw, json)
Hash identifier:          hQZEKJJvWFcvMTm3IinrTJkgJlkdG5Uq+cDUQ6B/CYY=
Subject key identifier:   26:38:C2:0B:76:F8:58:19:49:EB:57:15:51:A7:14:08:81:97:E4:C0
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       638C3A8A5C7D25841BFCC6454E99638481558703
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a383030303a3a2f33342d3334203d3e20323632363432.roa
Signing time:             Thu 04 Apr 2024 03:24:13 +0000
ROA not before:           Thu 04 Apr 2024 03:19:13 +0000
ROA not after:            Thu 03 Apr 2025 03:24:13 +0000
asID:                     262642
IP address blocks:        2804:2ea8:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8c:3a:8a:5c:7d:25:84:1b:fc:c6:45:4e:99:63:84:81:55:87:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Apr  4 03:19:13 2024 GMT
            Not After : Apr  3 03:24:13 2025 GMT
        Subject: CN=2638C20B76F8581949EB571551A714088197E4C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d3:50:a6:e8:74:0f:9f:f3:e2:81:4a:c2:03:
                    53:b7:d0:87:79:df:f1:10:55:b6:05:5b:d9:19:9c:
                    17:2a:e6:51:c3:38:c3:ce:be:63:98:ee:b2:b9:e2:
                    fe:ef:b8:ee:ad:15:44:76:3c:10:91:22:08:66:0b:
                    9b:57:e0:08:42:73:49:04:70:3c:c8:77:d9:2d:37:
                    49:89:f5:af:52:c5:9a:a1:18:c8:6b:99:6d:84:3b:
                    6e:58:2e:ee:f0:6f:9f:af:ee:29:85:30:fe:1f:d5:
                    09:52:c6:e9:b7:4b:ad:7b:d6:ee:89:d9:36:70:9e:
                    81:8e:09:b2:a4:e1:e4:23:54:7f:5a:d7:03:f4:a0:
                    28:3a:f2:b6:d0:9d:f1:9d:48:31:76:b4:dc:7b:f6:
                    a1:ed:99:46:50:1e:5f:41:84:d4:de:cc:50:58:8b:
                    46:25:93:4f:01:d6:0d:49:fe:54:eb:66:59:30:33:
                    81:60:02:bb:29:72:f2:d0:8e:19:4b:2a:b2:f0:2e:
                    c3:bf:a1:89:78:e7:69:89:47:eb:f0:d7:0d:94:e8:
                    1e:24:4b:4a:4f:8d:d9:eb:c6:76:27:84:0c:e5:f3:
                    b9:0e:c0:06:40:53:d6:04:d9:eb:67:4b:a8:14:e7:
                    07:fc:17:8d:c6:a3:26:8e:08:31:fb:3e:94:55:f7:
                    80:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:38:C2:0B:76:F8:58:19:49:EB:57:15:51:A7:14:08:81:97:E4:C0
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a383030303a3a2f33342d3334203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ea8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7e:2d:a3:6a:fd:b5:28:06:2f:d2:07:be:0b:8f:d6:47:5f:b5:
         a9:f5:a6:af:3f:5d:1a:fe:5c:1a:51:03:7a:22:69:ab:0d:b7:
         a1:87:eb:02:d3:9b:bb:b7:3a:ff:05:e2:28:73:22:06:b7:7a:
         4d:83:2d:05:bf:74:ad:34:db:c5:7b:8c:df:80:ef:c9:67:a0:
         f8:8d:c5:30:88:d7:5f:4b:c2:c4:2f:d4:06:30:97:77:26:4f:
         ae:5a:7e:ae:2b:c9:47:cf:62:87:75:d7:d0:05:b7:64:6e:1a:
         0e:e5:cf:f8:58:ed:b1:d2:94:df:33:0d:80:e3:6d:89:c6:12:
         0b:3c:cb:a2:0d:bd:b0:a7:1c:67:14:20:82:05:35:57:66:57:
         5b:de:2f:8b:ad:60:3b:d9:69:c3:f3:f9:52:13:03:2e:30:d6:
         87:0b:37:74:4f:db:36:84:72:b1:bc:2a:f5:0c:8a:b0:55:e3:
         5b:cd:b2:58:a5:ac:41:8c:ef:67:c7:3f:19:bb:fd:33:62:3a:
         cc:91:cd:3b:22:2a:20:f4:c9:78:3c:9a:37:22:57:2c:2d:cb:
         f1:85:2e:de:8d:97:aa:6c:0f:e5:7e:9d:6f:1f:5b:c1:27:5d:
         b9:e8:49:f8:f9:10:9d:ce:10:0c:1f:e4:5e:58:80:93:b7:fd:
         5a:19:67:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:22 2024 by rpki-client on console-fra.rpki-client.org