Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/323830343a353833303a3a2f33322d313238203d3e20323638313132.roa
File:                     323830343a353833303a3a2f33322d313238203d3e20323638313132.roa (raw, json)
Hash identifier:          xSWR2xIqJcDTT0yhy6hvYIToPFBg2Wzncor55OOr9XM=
Subject key identifier:   84:F1:80:03:E5:CA:96:B8:0E:31:EC:74:BB:AB:39:CB:15:09:21:DE
Certificate issuer:       /CN=1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC
Certificate serial:       65756E888B6C1C107CE37FC347FB58CAD86E2181
Authority key identifier: 1B:17:47:FF:CB:5B:39:7A:C6:6D:00:BF:76:A4:03:AA:7D:0B:2D:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/323830343a353833303a3a2f33322d313238203d3e20323638313132.roa
Signing time:             Wed 03 Apr 2024 23:44:19 +0000
ROA not before:           Wed 03 Apr 2024 23:39:19 +0000
ROA not after:            Wed 02 Apr 2025 23:44:19 +0000
asID:                     268112
IP address blocks:        2804:5830::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.crl
                          rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:75:6e:88:8b:6c:1c:10:7c:e3:7f:c3:47:fb:58:ca:d8:6e:21:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC
        Validity
            Not Before: Apr  3 23:39:19 2024 GMT
            Not After : Apr  2 23:44:19 2025 GMT
        Subject: CN=84F18003E5CA96B80E31EC74BBAB39CB150921DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2b:25:9b:52:f6:56:ab:64:8c:77:b1:b9:73:
                    d2:05:a3:63:b5:df:02:f5:ce:87:70:cc:e1:ee:0c:
                    1b:a4:68:a3:d2:29:9c:9b:5d:49:1f:01:ef:b4:52:
                    a7:d1:42:e6:5a:18:80:5f:5a:df:69:a7:a4:12:63:
                    da:58:61:22:1b:c9:01:6c:43:d0:cc:62:be:87:5f:
                    03:5d:01:fc:f4:f3:7e:39:2c:33:d9:15:3a:fa:3e:
                    f6:c6:8a:dc:09:3a:a8:ef:0e:a0:17:0c:57:47:5c:
                    eb:f8:27:86:74:3c:48:b7:87:1c:10:41:cb:5c:c3:
                    a7:ed:e2:15:e7:b2:25:30:92:b9:57:50:4a:77:37:
                    c8:77:57:2a:f7:89:43:b0:20:31:4a:bd:03:51:af:
                    44:21:42:84:98:ed:97:e3:a8:ee:73:d9:f6:96:4b:
                    8c:3d:50:e7:9c:b7:63:cc:f0:94:2e:11:a3:58:2e:
                    cd:57:36:39:95:ef:0b:ec:29:ca:e1:f6:c4:4d:29:
                    6d:fd:77:b1:17:d7:a1:32:43:fa:9e:e7:75:38:9b:
                    df:43:60:81:14:50:60:9d:22:64:be:da:20:87:90:
                    49:12:39:27:05:ce:f8:21:c8:22:5b:55:ab:ba:e5:
                    26:87:41:7d:ea:6c:e8:66:19:50:d5:b1:3f:92:2a:
                    b2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F1:80:03:E5:CA:96:B8:0E:31:EC:74:BB:AB:39:CB:15:09:21:DE
            X509v3 Authority Key Identifier:
                keyid:1B:17:47:FF:CB:5B:39:7A:C6:6D:00:BF:76:A4:03:AA:7D:0B:2D:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/323830343a353833303a3a2f33322d313238203d3e20323638313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5830::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:d6:29:f4:c3:ae:52:e9:7a:f3:12:b8:7c:c5:61:80:d6:8a:
         e2:6f:b2:87:55:e2:32:60:18:70:c8:80:b1:06:7d:6c:d1:2a:
         86:e4:09:ef:e0:c6:0c:ec:95:fa:0e:e4:e8:99:82:05:7c:f4:
         bf:1a:90:7e:c7:7e:8b:91:53:bb:80:bb:bc:fe:12:c0:e7:c0:
         b9:d5:e6:22:31:64:c8:62:d8:14:ec:4e:37:51:bd:2c:99:73:
         4b:fb:49:f6:32:7b:17:cb:57:5a:e7:50:d3:76:7b:4d:f5:4e:
         e7:69:be:f3:50:39:f5:69:a2:db:41:d1:9f:6e:e2:6c:b1:2e:
         06:34:3b:a2:01:cf:4b:d6:e3:1e:a3:6a:27:52:0a:3e:48:2a:
         c5:cf:41:76:a1:f4:50:d2:44:ad:e5:f8:78:aa:fd:3a:10:c5:
         ba:35:05:3a:e7:b6:f8:27:91:c0:ba:bc:23:e6:f6:85:3e:6e:
         3f:19:fe:0a:28:93:a5:2f:e0:b7:51:fc:e1:64:89:4b:20:11:
         c4:6e:1a:ca:e7:84:f7:9c:ce:d0:f4:f4:be:d8:bb:ea:b1:6d:
         e3:c8:da:e0:e4:17:c9:b7:3a:30:ca:a9:8b:fd:cf:76:f3:b8:
         12:c2:c6:a8:93:93:72:f0:67:46:33:b1:40:10:1f:99:d0:a9:
         55:30:04:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:08 2024 by rpki-client on console-fra.rpki-client.org