Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/323830343a326330383a3a2f3332203d3e20323635313839.roa
File:                     323830343a326330383a3a2f3332203d3e20323635313839.roa (raw, json)
Hash identifier:          3mAM/pSH+qkU/JcLn3Drf2g5x07a1xMn14tY4IljHHI=
Subject key identifier:   88:63:7C:91:00:38:9D:EF:CA:96:F6:01:48:8E:B6:57:07:27:19:41
Certificate issuer:       /CN=37F55E9132B65DF93AC7E8F542B2A3115CFE1A79
Certificate serial:       40F9D63948EDFCC2576CD07F68DCD70B1AD3723B
Authority key identifier: 37:F5:5E:91:32:B6:5D:F9:3A:C7:E8:F5:42:B2:A3:11:5C:FE:1A:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/323830343a326330383a3a2f3332203d3e20323635313839.roa
Signing time:             Thu 04 Apr 2024 07:44:48 +0000
ROA not before:           Thu 04 Apr 2024 07:39:48 +0000
ROA not after:            Thu 03 Apr 2025 07:44:48 +0000
asID:                     265189
IP address blocks:        2804:2c08::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl
                          rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f9:d6:39:48:ed:fc:c2:57:6c:d0:7f:68:dc:d7:0b:1a:d3:72:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37F55E9132B65DF93AC7E8F542B2A3115CFE1A79
        Validity
            Not Before: Apr  4 07:39:48 2024 GMT
            Not After : Apr  3 07:44:48 2025 GMT
        Subject: CN=88637C9100389DEFCA96F601488EB65707271941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:03:76:51:4b:aa:b9:bc:02:a0:6a:a7:e8:f4:
                    6a:38:f3:63:c3:45:8b:e6:c3:68:8e:e4:8e:e9:d0:
                    ea:50:9c:a9:05:d0:d6:87:b6:16:b7:e5:a6:e1:ec:
                    c3:40:6f:d2:49:05:0c:8b:5a:73:42:02:95:e0:f9:
                    0c:68:0c:e1:72:af:96:4c:7b:eb:5f:13:c2:3f:75:
                    f3:e7:bc:47:13:ee:da:72:4c:f9:05:e5:c3:2b:24:
                    9d:fe:eb:1b:fd:a6:af:8c:45:7f:be:24:12:5c:f6:
                    c4:6d:c3:6a:51:2a:d3:98:cb:61:20:18:14:68:60:
                    54:cc:e6:8b:a1:f3:ce:b2:54:03:84:1d:da:04:33:
                    1e:08:e2:bb:c1:bb:fe:7e:95:9c:f3:8f:fd:3b:5c:
                    e2:bc:34:c3:97:58:ef:c8:d6:37:b9:d8:24:56:69:
                    3a:3d:f3:c5:12:c5:bf:76:60:b0:67:02:40:1f:be:
                    25:ab:71:c4:2e:11:dc:54:d7:37:da:04:fc:84:6b:
                    0e:83:d6:24:a1:e4:d6:37:69:6d:56:10:11:52:4a:
                    9a:ed:0a:d6:2f:9c:55:c2:27:c4:52:ee:0e:3a:63:
                    ba:33:14:72:e0:2e:12:b2:cb:c5:26:cb:9b:24:d0:
                    d3:07:ac:d2:9e:7b:05:d7:84:06:c2:f8:99:79:13:
                    dc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:63:7C:91:00:38:9D:EF:CA:96:F6:01:48:8E:B6:57:07:27:19:41
            X509v3 Authority Key Identifier:
                keyid:37:F5:5E:91:32:B6:5D:F9:3A:C7:E8:F5:42:B2:A3:11:5C:FE:1A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/323830343a326330383a3a2f3332203d3e20323635313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c08::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:91:7e:fb:2f:5e:f4:56:c5:dd:29:76:e3:27:b9:cf:40:79:
         89:68:30:a2:0b:a3:00:71:06:db:79:57:0a:64:df:13:d6:24:
         3c:2b:9d:c4:81:ae:f2:a7:4e:9b:32:ed:bc:d5:12:c9:3e:d8:
         07:60:8a:33:21:0d:45:51:24:a7:c8:87:68:e1:62:af:d0:71:
         98:3c:b7:ff:c2:90:78:98:46:4b:b7:ba:10:af:2a:87:6a:d1:
         45:af:5e:1f:58:49:d5:81:21:fe:4f:7f:32:6c:26:ef:af:8f:
         da:af:81:86:fb:bf:bd:d6:87:4e:67:d9:26:9a:4b:e9:7c:5f:
         7d:32:c9:c1:13:22:62:ff:ac:5b:30:a3:9e:7a:82:c4:74:ef:
         59:e4:79:e3:c7:11:ff:af:64:86:ca:bc:4d:ba:06:ce:07:1d:
         3f:d6:f6:f8:6a:31:fb:04:3a:9c:ac:f5:b5:0a:6d:c3:18:82:
         f3:d5:bd:9d:7a:f9:2a:19:ac:3a:c3:6d:d5:b8:9b:ac:c7:d5:
         5a:eb:4f:29:39:e8:0a:b8:c4:5f:1c:66:f8:69:81:a3:1b:d8:
         de:b7:72:52:45:d3:96:1f:c7:f8:55:2a:b3:c7:7c:95:18:4a:
         0a:5f:db:08:96:51:7c:d5:ea:0f:b6:2f:bb:5a:9c:9e:0c:1f:
         86:6d:cf:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:08 2024 by rpki-client on console-fra.rpki-client.org