Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/323830343a386233383a3a2f33322d3438203d3e20323733373139.roa
File:                     323830343a386233383a3a2f33322d3438203d3e20323733373139.roa (raw, json)
Hash identifier:          BXFTDAovDfHAhlJtRWkByGwB618BvVnQhgdd5kzyJyA=
Subject key identifier:   8E:82:1B:35:1D:44:42:19:F0:A3:59:F8:82:BF:33:A2:CC:72:35:77
Certificate issuer:       /CN=130DA06C9537B1DF6544F6290A638F863755DA73
Certificate serial:       332152465FA89FACAC04C387641CC9DD31DD29A9
Authority key identifier: 13:0D:A0:6C:95:37:B1:DF:65:44:F6:29:0A:63:8F:86:37:55:DA:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/130DA06C9537B1DF6544F6290A638F863755DA73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/323830343a386233383a3a2f33322d3438203d3e20323733373139.roa
Signing time:             Fri 05 Apr 2024 01:53:09 +0000
ROA not before:           Fri 05 Apr 2024 01:48:09 +0000
ROA not after:            Fri 04 Apr 2025 01:53:09 +0000
asID:                     273719
IP address blocks:        2804:8b38::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/130DA06C9537B1DF6544F6290A638F863755DA73.crl
                          rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/130DA06C9537B1DF6544F6290A638F863755DA73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/130DA06C9537B1DF6544F6290A638F863755DA73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:21:52:46:5f:a8:9f:ac:ac:04:c3:87:64:1c:c9:dd:31:dd:29:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130DA06C9537B1DF6544F6290A638F863755DA73
        Validity
            Not Before: Apr  5 01:48:09 2024 GMT
            Not After : Apr  4 01:53:09 2025 GMT
        Subject: CN=8E821B351D444219F0A359F882BF33A2CC723577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3a:97:1d:af:86:1a:b5:93:3e:60:b9:67:f5:
                    8c:0c:62:b4:9a:5f:69:a4:81:52:6b:3c:d5:bb:a4:
                    6f:17:2f:28:07:17:23:ae:b4:67:47:5e:90:de:06:
                    82:93:ae:de:6c:f9:66:01:44:18:66:ea:bb:63:e8:
                    e7:4e:67:32:1f:db:9c:b0:59:e3:d6:c1:1e:21:e0:
                    29:d5:d5:ad:60:d0:ca:e7:a8:84:e3:f9:1d:88:6c:
                    03:f6:41:b6:46:36:ab:c5:7c:a4:2b:dd:1d:b9:7f:
                    2d:d6:d0:42:b6:a3:74:04:03:82:02:37:a9:e4:e2:
                    65:6f:03:17:36:56:b9:ea:4d:28:cb:73:fa:54:9a:
                    31:51:b1:37:87:e6:b5:3a:0d:8f:26:c9:6c:24:db:
                    dd:f0:14:5e:be:7c:bf:0a:98:51:e0:d3:11:7a:d4:
                    ed:5e:7d:d4:a7:c0:b7:a9:84:18:43:7f:8e:39:45:
                    fa:64:4b:a6:6c:00:bc:68:b7:d2:77:cf:26:ee:c9:
                    68:97:0c:a3:24:1a:0c:3e:71:65:59:d4:43:e1:e7:
                    2a:c2:09:72:af:18:70:d9:48:04:68:60:46:ff:05:
                    4e:96:e7:95:1a:4c:13:d9:f0:ca:fc:26:20:9e:09:
                    10:6f:dc:55:45:16:fe:1b:fc:d7:8b:29:c2:c9:ff:
                    5a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:82:1B:35:1D:44:42:19:F0:A3:59:F8:82:BF:33:A2:CC:72:35:77
            X509v3 Authority Key Identifier:
                keyid:13:0D:A0:6C:95:37:B1:DF:65:44:F6:29:0A:63:8F:86:37:55:DA:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/130DA06C9537B1DF6544F6290A638F863755DA73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/130DA06C9537B1DF6544F6290A638F863755DA73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/323830343a386233383a3a2f33322d3438203d3e20323733373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b38::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:da:a4:2e:9c:82:74:24:20:9c:60:6d:fc:9c:92:ac:28:e1:
         fb:ff:f3:b9:74:ba:33:b4:f4:e8:bb:4c:48:a0:f9:c6:35:2e:
         ef:0b:54:f0:a9:67:d3:35:3c:bb:86:a2:a4:89:c0:d4:af:af:
         11:c1:6a:ac:91:f9:98:85:f3:a6:8f:60:e3:61:a7:1f:9d:5e:
         e8:1f:2b:40:ca:8c:45:04:34:29:57:76:be:b9:76:e5:94:74:
         aa:79:0c:1d:1c:2a:cd:ed:b4:3a:39:5a:2e:b2:f9:d5:14:36:
         ea:81:17:7d:6a:52:84:3e:fd:c4:dc:6c:ca:b1:f0:aa:46:81:
         ea:fe:f0:c1:99:3a:b5:29:57:40:9c:a1:a7:88:af:dd:17:ee:
         f8:d9:de:cc:cd:a3:d2:2b:7a:00:d0:ef:73:94:63:cd:b0:d3:
         f4:92:61:63:b8:df:1b:51:46:a8:bb:96:81:1a:e7:77:43:90:
         30:50:84:7c:f9:04:8b:be:05:ca:4d:2b:cf:1e:06:15:d1:0a:
         5e:7d:4b:78:88:fd:66:89:8f:a9:09:7b:75:fa:3a:bb:25:a9:
         35:c9:04:e4:f6:ed:84:ab:24:9b:e8:e9:96:c5:6d:57:41:ac:
         b7:d4:62:ef:51:75:d9:3d:15:c4:55:cd:01:72:25:6f:93:23:
         91:ea:bc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:46 2024 by rpki-client on console-fra.rpki-client.org