Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/323830343a353866343a3a2f33322d3335203d3e20323638313630.roa
File:                     323830343a353866343a3a2f33322d3335203d3e20323638313630.roa (raw, json)
Hash identifier:          yDLP68VCpzlg1NrZ+ERHUt4v1eoIKSLVa4THsjyy10o=
Subject key identifier:   83:2A:34:61:C1:5F:B5:12:6D:10:96:33:B9:CB:9F:EB:12:5D:11:6D
Certificate issuer:       /CN=620FC0DB62F1480AC8CF9B22F3885A9A4268099E
Certificate serial:       7B0F8CC6E6EAD7B6D8B028F743F7E41BEA8E9E1B
Authority key identifier: 62:0F:C0:DB:62:F1:48:0A:C8:CF:9B:22:F3:88:5A:9A:42:68:09:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/323830343a353866343a3a2f33322d3335203d3e20323638313630.roa
Signing time:             Thu 04 Apr 2024 13:22:05 +0000
ROA not before:           Thu 04 Apr 2024 13:17:05 +0000
ROA not after:            Thu 03 Apr 2025 13:22:05 +0000
asID:                     268160
IP address blocks:        2804:58f4::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.crl
                          rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:29:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:0f:8c:c6:e6:ea:d7:b6:d8:b0:28:f7:43:f7:e4:1b:ea:8e:9e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620FC0DB62F1480AC8CF9B22F3885A9A4268099E
        Validity
            Not Before: Apr  4 13:17:05 2024 GMT
            Not After : Apr  3 13:22:05 2025 GMT
        Subject: CN=832A3461C15FB5126D109633B9CB9FEB125D116D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:33:8d:cb:89:20:01:60:6f:33:ae:b5:81:c9:
                    a7:91:15:3a:3e:ea:ab:85:93:7e:b6:51:e8:63:33:
                    db:e8:b0:a1:ea:53:bc:54:f6:34:f4:df:ee:ac:c3:
                    69:45:b0:4b:73:3d:e9:e1:aa:a7:14:28:c2:15:a7:
                    02:09:00:c6:48:3d:52:63:4e:ff:61:6c:3e:54:aa:
                    ae:99:e4:71:83:1d:1c:c1:e8:4c:97:de:92:29:a5:
                    19:7b:19:25:07:ac:2a:a9:00:aa:ab:6e:7c:85:55:
                    53:71:c0:93:2b:04:38:63:f6:25:57:2e:a3:0b:c9:
                    f7:80:5f:92:0f:2e:62:f0:a9:02:8b:b8:c8:29:35:
                    bb:98:40:17:ed:35:5a:df:c4:bc:fe:fe:77:bc:7b:
                    2c:2c:c8:d2:19:c6:6e:0d:a1:86:e1:e8:95:d6:7d:
                    1f:76:8a:39:65:db:85:6e:69:00:a7:af:b4:87:62:
                    0d:6a:61:d7:e8:b5:6c:a4:09:7e:35:36:71:8e:95:
                    eb:97:ff:df:d7:cc:a6:7e:60:61:31:b7:2d:07:ae:
                    67:a5:1b:25:fb:8c:9c:b2:29:bf:04:43:ee:bb:4f:
                    ba:ce:51:7d:3e:77:8b:4b:25:a5:82:44:45:f0:ad:
                    b5:4a:4e:fb:52:88:60:60:08:54:6b:47:d8:d5:e3:
                    30:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2A:34:61:C1:5F:B5:12:6D:10:96:33:B9:CB:9F:EB:12:5D:11:6D
            X509v3 Authority Key Identifier:
                keyid:62:0F:C0:DB:62:F1:48:0A:C8:CF:9B:22:F3:88:5A:9A:42:68:09:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/323830343a353866343a3a2f33322d3335203d3e20323638313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:98:f7:37:c0:77:b6:58:1f:be:74:18:1f:05:33:5c:ac:51:
         72:cb:dd:c8:0f:29:1c:3b:6f:e8:6d:5f:28:1b:2c:94:88:e3:
         ce:f6:97:3e:d3:b4:56:61:ca:2e:75:43:5a:e3:86:04:d0:db:
         94:c9:07:73:69:2b:f6:9c:9f:5d:b4:40:c2:97:6a:a5:e8:4c:
         ec:df:29:23:54:c2:91:a1:09:26:7f:6f:9f:6d:e0:5c:71:e3:
         76:3a:4d:46:06:f2:f3:e3:fc:6e:c4:f9:96:de:c1:0a:50:43:
         df:fb:e1:9c:ec:40:32:58:33:fe:ad:37:e5:93:9c:0e:2a:6e:
         a2:bc:72:11:c4:fc:c2:d6:97:ca:5f:2f:2e:d8:a3:46:0e:05:
         4d:37:dd:ba:db:6f:cf:0d:f8:8e:03:86:70:98:36:ea:9e:d4:
         d0:44:d2:1d:57:00:32:75:32:24:91:0a:fa:d3:73:87:a1:b6:
         91:e8:ad:f6:dd:47:f9:ea:d7:9d:c7:a5:a1:bb:2c:4e:31:86:
         89:ea:01:f5:b4:a4:30:f5:4b:30:ba:ba:60:b5:c4:83:77:20:
         32:13:f0:45:bb:f6:59:12:4b:eb:a9:41:c7:a7:4a:05:34:be:
         57:7e:43:21:a2:d5:69:f8:d8:c8:12:9f:6d:36:7f:06:36:4f:
         13:4e:5b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:38 2024 by rpki-client on console-ams.rpki-client.org