Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/323830343a333966633a3a2f33322d3438203d3e20323636303633.roa
File:                     323830343a333966633a3a2f33322d3438203d3e20323636303633.roa (raw, json)
Hash identifier:          sz/6L9+NE4MD69YOu4d2VkQGIFxA9f2cV6XtMvuLg5g=
Subject key identifier:   5B:FB:76:80:6F:52:53:1F:3A:D5:81:62:B5:7D:91:7D:61:F3:26:A4
Certificate issuer:       /CN=98525FF70BD67C78C36BE3190E3463098E95DF2C
Certificate serial:       3261ADDE5BF17C0113B0C1C257A8E4EBF3616CD5
Authority key identifier: 98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/323830343a333966633a3a2f33322d3438203d3e20323636303633.roa
Signing time:             Wed 03 Apr 2024 23:17:38 +0000
ROA not before:           Wed 03 Apr 2024 23:12:38 +0000
ROA not after:            Wed 02 Apr 2025 23:17:38 +0000
asID:                     266063
IP address blocks:        2804:39fc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.crl
                          rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 11:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:61:ad:de:5b:f1:7c:01:13:b0:c1:c2:57:a8:e4:eb:f3:61:6c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98525FF70BD67C78C36BE3190E3463098E95DF2C
        Validity
            Not Before: Apr  3 23:12:38 2024 GMT
            Not After : Apr  2 23:17:38 2025 GMT
        Subject: CN=5BFB76806F52531F3AD58162B57D917D61F326A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:86:1f:84:af:55:0a:45:15:a5:d6:9b:23:db:
                    be:fd:e8:dc:15:2f:3a:40:8c:3b:29:d7:0e:ed:a7:
                    ca:39:18:de:01:fa:68:ea:1e:a5:04:1a:8f:72:54:
                    cd:b9:12:a2:7a:2e:b9:4f:8b:30:15:80:1a:5b:75:
                    0c:33:a2:0f:16:13:e7:64:58:31:50:3a:a0:24:ea:
                    c5:59:ac:78:b9:38:9f:2e:b1:0b:f8:bd:2a:4f:9a:
                    01:a0:2e:a9:3f:8e:85:7c:cf:0b:52:80:7a:5d:30:
                    4c:97:c9:35:b6:39:76:13:aa:a3:88:2f:b8:f1:b3:
                    16:1c:89:20:fa:19:c1:24:f2:87:41:01:41:06:f1:
                    1f:13:cc:15:3c:ef:28:80:0e:5c:d1:1c:17:9a:c1:
                    27:8b:f4:32:10:ac:3a:cc:e8:bd:2b:34:4a:59:50:
                    0e:1f:59:ba:45:8d:8b:5e:79:74:8b:0f:10:dd:86:
                    f5:7d:66:49:0f:ea:f9:ca:bb:51:30:b4:b9:be:48:
                    19:a1:c8:ac:ae:ee:b5:46:fc:1f:48:fe:0f:10:f7:
                    21:5b:7b:b3:64:79:57:3e:f2:64:64:fd:5c:03:31:
                    c8:4d:df:ed:0b:e8:ee:51:23:ff:7f:50:e5:f6:28:
                    f1:59:94:4d:cf:d1:21:61:34:f3:42:c0:bf:bb:e9:
                    95:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FB:76:80:6F:52:53:1F:3A:D5:81:62:B5:7D:91:7D:61:F3:26:A4
            X509v3 Authority Key Identifier:
                keyid:98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/323830343a333966633a3a2f33322d3438203d3e20323636303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:ed:c2:52:3c:22:2c:e8:5d:b4:ea:3d:e5:36:5e:bd:3a:5b:
         e6:e8:8a:43:70:d5:a5:be:09:47:b9:85:01:73:50:28:2b:f2:
         d5:8a:22:0b:ee:7f:78:81:8e:51:e7:82:ff:5b:a0:3b:b4:36:
         36:e6:2a:4d:fe:7f:ee:e6:6e:b3:88:e9:f8:cd:67:11:84:be:
         06:f4:93:f1:a0:7b:2d:92:b3:3d:20:e3:3e:11:53:8b:c9:18:
         74:56:f6:a2:43:7e:d1:83:a8:d0:0f:6d:79:85:07:5c:37:0b:
         59:5a:24:34:13:5f:80:44:61:fe:d6:ab:a7:b1:a2:53:b1:47:
         8e:28:c3:97:fb:33:64:19:1c:b3:de:a6:8c:1a:e7:4a:57:80:
         48:b6:22:46:4e:c0:7d:d3:9c:96:7a:f9:79:8f:1a:e5:a9:8b:
         67:8d:42:5e:dc:55:1a:bc:d9:8d:58:86:20:1c:8b:6c:62:40:
         46:54:a2:9c:4d:7b:34:8a:6c:31:37:58:2e:da:03:56:85:35:
         89:71:d4:29:92:94:b1:6f:9b:cf:5b:fd:15:5f:0a:80:34:fd:
         8c:0a:ce:81:83:3f:bd:8f:7b:4a:b8:f0:ef:ac:a6:59:c5:36:
         4a:7a:1e:bc:72:e1:d4:54:ac:b7:d4:66:50:63:c7:07:8a:e4:
         10:87:21:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 12:10:03 2024 by rpki-client on console-ams.rpki-client.org