Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/323830343a346663383a3a2f33322d313238203d3e20323638333439.roa
File:                     323830343a346663383a3a2f33322d313238203d3e20323638333439.roa (raw, json)
Hash identifier:          H0G6E+Oyk0nrg2pDokEEY576NnluN6/oiKBPPQyo4LY=
Subject key identifier:   BA:A0:24:E7:CE:EE:60:2A:02:06:24:7A:CF:61:8C:45:21:0C:66:3D
Certificate issuer:       /CN=F21385055D4BA00AF1EC37AF53C91C003B6A5F8A
Certificate serial:       18EFEB652F64CD615EAAECC30E47976271E0874E
Authority key identifier: F2:13:85:05:5D:4B:A0:0A:F1:EC:37:AF:53:C9:1C:00:3B:6A:5F:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/323830343a346663383a3a2f33322d313238203d3e20323638333439.roa
Signing time:             Fri 24 May 2024 19:43:39 +0000
ROA not before:           Fri 24 May 2024 19:38:39 +0000
ROA not after:            Fri 23 May 2025 19:43:39 +0000
asID:                     268349
IP address blocks:        2804:4fc8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.crl
                          rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ef:eb:65:2f:64:cd:61:5e:aa:ec:c3:0e:47:97:62:71:e0:87:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21385055D4BA00AF1EC37AF53C91C003B6A5F8A
        Validity
            Not Before: May 24 19:38:39 2024 GMT
            Not After : May 23 19:43:39 2025 GMT
        Subject: CN=BAA024E7CEEE602A0206247ACF618C45210C663D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:44:55:64:39:e3:c9:8c:f7:78:6d:78:18:b2:
                    28:da:8d:e2:d4:f8:cd:a0:3a:88:a5:ab:08:03:ea:
                    59:d4:59:f6:c2:47:47:1f:ec:5b:0a:cc:ec:cb:36:
                    f6:f5:ce:69:6c:bc:2e:5e:b4:4c:56:94:47:76:f9:
                    f4:9b:eb:c4:ca:36:f3:27:a4:3b:03:21:05:85:2e:
                    25:30:6a:3a:67:87:1d:81:30:9a:da:46:66:fa:13:
                    96:98:97:f6:8e:84:fd:77:2d:69:e3:62:ed:27:85:
                    f7:ff:39:0f:3a:d6:61:d6:45:54:1e:af:fc:f9:b0:
                    c8:63:d5:a0:d3:ed:f8:51:62:73:f5:d3:80:a6:28:
                    32:3f:6a:7a:36:18:66:60:1d:e4:e0:67:48:f5:db:
                    7f:09:73:6b:59:26:e7:b9:38:e1:fb:84:cb:b5:b6:
                    9c:4b:4c:44:e5:20:6c:6f:56:13:cc:b2:da:41:66:
                    ef:89:43:d4:c6:37:a5:f4:16:e4:83:50:78:04:b4:
                    3f:af:0c:db:79:20:94:49:cf:66:f7:b5:10:55:7d:
                    83:a0:d1:eb:7a:de:29:ec:b5:08:a0:5e:a2:37:67:
                    5a:4d:d6:44:e1:71:4b:48:4b:e5:d7:34:c5:93:b2:
                    5b:35:e5:00:4e:d8:2d:9d:5a:b4:16:fd:8f:4e:f6:
                    77:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A0:24:E7:CE:EE:60:2A:02:06:24:7A:CF:61:8C:45:21:0C:66:3D
            X509v3 Authority Key Identifier:
                keyid:F2:13:85:05:5D:4B:A0:0A:F1:EC:37:AF:53:C9:1C:00:3B:6A:5F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/323830343a346663383a3a2f33322d313238203d3e20323638333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:2d:c2:c0:cb:80:1b:8e:53:d0:08:36:c0:0c:68:16:ee:f3:
         ae:60:0a:3b:0b:b0:43:cc:32:b4:bb:2f:a8:57:80:31:38:32:
         bc:0c:8f:34:5f:57:5b:7a:f1:d7:64:67:56:d3:8f:ee:46:59:
         22:52:6d:79:2c:a4:20:db:40:f2:50:ab:23:fd:8b:1a:48:d2:
         e0:91:00:b9:8f:76:31:4a:1c:62:2f:0f:ae:16:95:72:3e:93:
         88:53:03:c5:13:5d:75:06:b5:ac:d8:07:89:dd:4d:c1:65:8f:
         fc:a4:6c:cc:03:b8:58:e1:e1:e4:69:43:b0:72:76:ce:13:ff:
         03:20:f5:2c:00:c8:b7:3f:3c:bf:20:08:46:b9:21:ee:b6:de:
         58:79:ac:11:27:74:60:a7:11:a7:eb:f8:1f:b8:db:16:e6:92:
         1e:0d:6f:07:44:ca:98:85:9a:18:17:2b:36:91:39:7f:54:c2:
         2e:10:fd:9f:6b:71:3e:a9:36:85:53:e8:1c:58:b6:8a:7b:97:
         c7:1a:89:95:ce:e1:20:ec:fd:b9:53:52:0a:2c:31:04:0b:1c:
         d5:15:f9:c6:e6:13:c0:1a:ee:14:2d:19:a2:e5:e2:f9:6a:df:
         e8:e8:10:ad:f6:e3:29:ee:68:e6:8d:a2:a0:ab:9f:0b:3c:4a:
         30:56:f3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:48 2024 by rpki-client on console-fra.rpki-client.org