Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/323830343a343037383a3a2f33322d3332203d3e20323635393631.roa
File:                     323830343a343037383a3a2f33322d3332203d3e20323635393631.roa (raw, json)
Hash identifier:          juMjWkUJL0sO1irM+JwxO2H/EGF/y3xkbFBgT36inJI=
Subject key identifier:   D9:F9:FC:A5:19:0E:7E:95:70:F3:EF:F7:5A:62:32:25:41:1F:F9:EA
Certificate issuer:       /CN=AFD283B2F992237C0CFFC2A33A97A3AEEDF56F7E
Certificate serial:       4035BC07CA2881DFCF64D8E56607126CBBA659E2
Authority key identifier: AF:D2:83:B2:F9:92:23:7C:0C:FF:C2:A3:3A:97:A3:AE:ED:F5:6F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFD283B2F992237C0CFFC2A33A97A3AEEDF56F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/323830343a343037383a3a2f33322d3332203d3e20323635393631.roa
Signing time:             Sat 20 Apr 2024 02:38:55 +0000
ROA not before:           Sat 20 Apr 2024 02:33:55 +0000
ROA not after:            Sat 19 Apr 2025 02:38:55 +0000
asID:                     265961
IP address blocks:        2804:4078::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/AFD283B2F992237C0CFFC2A33A97A3AEEDF56F7E.crl
                          rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/AFD283B2F992237C0CFFC2A33A97A3AEEDF56F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFD283B2F992237C0CFFC2A33A97A3AEEDF56F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:35:bc:07:ca:28:81:df:cf:64:d8:e5:66:07:12:6c:bb:a6:59:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFD283B2F992237C0CFFC2A33A97A3AEEDF56F7E
        Validity
            Not Before: Apr 20 02:33:55 2024 GMT
            Not After : Apr 19 02:38:55 2025 GMT
        Subject: CN=D9F9FCA5190E7E9570F3EFF75A623225411FF9EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f6:44:98:c8:a5:e7:07:18:3d:64:19:2a:94:
                    4e:6f:08:cf:ad:bc:da:1b:25:36:ce:06:df:72:fa:
                    a4:26:8f:32:46:52:e2:36:ad:94:b6:0b:0a:82:50:
                    6f:44:96:aa:2f:27:a7:ac:5c:7d:40:27:6b:a5:61:
                    5c:6c:27:10:98:8c:a4:fc:47:65:5e:b4:a6:dc:d6:
                    dd:29:0c:d7:bb:31:f6:f1:14:ab:a4:5d:22:4d:3e:
                    c5:08:6d:6c:01:f1:0b:01:02:4c:8a:ba:64:e2:33:
                    3c:65:e3:66:08:bf:41:03:8d:9a:33:42:02:a8:19:
                    f6:ae:89:a5:35:aa:ad:09:c0:43:b0:16:67:0b:6f:
                    3d:fc:f1:21:1c:4d:1b:fc:34:88:bd:6d:7b:ec:c9:
                    54:01:af:ce:32:12:58:e9:d4:53:1f:d1:b1:a8:89:
                    6d:e4:46:a8:28:09:1b:84:d9:80:e7:b8:0e:95:96:
                    d8:37:15:a4:ff:c3:85:b4:5a:aa:cd:55:a2:24:2e:
                    9f:dc:56:a8:0c:ec:81:0f:bb:d5:cf:f9:e9:ea:45:
                    23:a6:40:98:24:51:84:fa:25:f4:47:ff:1f:9b:1b:
                    54:72:62:07:b1:c7:16:23:6b:45:09:8c:13:08:ea:
                    4c:64:ee:48:6a:07:84:7c:30:3d:c6:5b:43:4e:66:
                    e8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F9:FC:A5:19:0E:7E:95:70:F3:EF:F7:5A:62:32:25:41:1F:F9:EA
            X509v3 Authority Key Identifier:
                keyid:AF:D2:83:B2:F9:92:23:7C:0C:FF:C2:A3:3A:97:A3:AE:ED:F5:6F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/AFD283B2F992237C0CFFC2A33A97A3AEEDF56F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFD283B2F992237C0CFFC2A33A97A3AEEDF56F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/323830343a343037383a3a2f33322d3332203d3e20323635393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4078::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:3e:b5:db:43:17:21:3a:f1:c4:9f:3d:dc:08:47:70:36:93:
         a6:b3:79:2e:70:4b:03:bb:da:ec:3c:de:6e:29:e2:50:99:ad:
         f7:ab:9f:bf:23:b3:99:2f:4a:75:26:db:b3:94:07:91:0b:09:
         61:14:05:4c:8e:04:0b:6a:b9:af:01:9a:cf:00:45:74:45:df:
         23:fb:10:c3:9e:c5:00:57:05:20:36:33:79:13:03:8b:be:ab:
         51:61:90:b3:75:97:d1:c3:16:49:4e:ff:a1:ad:c6:74:1c:c2:
         51:f1:c9:00:8e:c4:81:85:6c:a8:e6:dc:bc:ee:6c:b7:50:97:
         65:f1:3c:c2:b2:f2:e7:52:1c:26:5a:59:99:d7:ed:94:2b:6c:
         28:c5:fe:fd:91:f5:de:c5:4e:10:4a:71:9f:36:84:b5:17:3c:
         43:40:1e:a3:1f:1c:ef:09:ff:e4:d6:94:25:08:db:4d:da:52:
         4a:0c:bc:42:8a:58:8f:a4:0c:b8:e7:1c:4d:32:85:2c:6e:84:
         d8:c6:c7:4e:b2:df:c1:68:a5:97:05:e6:52:d0:e8:9f:0a:32:
         d5:bb:5f:b9:e6:07:d0:7e:22:f9:b5:38:8c:14:74:27:11:1e:
         db:01:62:90:06:05:76:ac:87:01:61:2e:34:a5:f8:ec:61:3a:
         1d:6f:13:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:28 2024 by rpki-client on console-fra.rpki-client.org