Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a3a2f33322d3332203d3e2032373136.roa
File:                     323830343a3a2f33322d3332203d3e2032373136.roa (raw, json)
Hash identifier:          NebL74D1QrJmqd1oxkFDeBtE3+eQo2E85mia8k5/Y98=
Subject key identifier:   AC:37:D1:74:A8:AB:E5:7F:1D:98:BF:38:0F:2D:8A:34:B6:9D:E0:D6
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       06F198C2B26BBD17BA6CCF346ADC952D0A9438DC
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a3a2f33322d3332203d3e2032373136.roa
Signing time:             Wed 03 Apr 2024 18:30:31 +0000
ROA not before:           Wed 03 Apr 2024 18:25:31 +0000
ROA not after:            Wed 02 Apr 2025 18:30:31 +0000
asID:                     2716
IP address blocks:        2804::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f1:98:c2:b2:6b:bd:17:ba:6c:cf:34:6a:dc:95:2d:0a:94:38:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Apr  3 18:25:31 2024 GMT
            Not After : Apr  2 18:30:31 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:43:bb:3f:40:25:f7:f1:25:45:d8:68:c0:1c:
                    2d:0d:a2:1a:20:e5:c5:b6:99:94:ab:66:59:75:39:
                    3c:43:92:d3:cd:bc:a2:62:85:5e:48:54:01:4c:8d:
                    ff:17:6d:c2:cb:69:1b:4d:70:49:23:70:94:3e:28:
                    1f:3a:34:d4:88:b6:be:8e:42:b2:14:9b:87:1e:ad:
                    51:5b:c1:7e:e3:3c:09:bb:c5:64:de:49:1c:94:8d:
                    dc:c9:9e:a8:f3:40:4a:75:6a:3e:ef:a0:08:55:16:
                    12:7d:b3:49:23:c0:d4:a0:ed:9e:ab:9c:6a:1c:e3:
                    f5:52:2b:a1:66:d9:16:06:38:b3:7f:05:32:29:88:
                    5b:b0:e6:96:f0:9d:3e:72:e9:5f:be:c7:cc:af:01:
                    b1:37:3a:83:53:6a:77:b4:ce:90:88:39:21:7c:83:
                    dd:1c:8e:a5:b4:67:c5:85:0c:91:18:c3:c6:77:bb:
                    8b:62:6d:b1:80:3a:91:16:e9:6b:45:e0:93:23:d6:
                    7d:4d:71:f9:c5:5d:d9:30:55:2b:7b:66:2d:2a:bd:
                    5d:f0:e2:89:86:7e:54:2d:ed:5e:c1:b4:0c:56:42:
                    2f:56:04:cf:a1:a2:51:f8:d4:46:cd:fa:e8:9e:c8:
                    43:c4:f7:f3:11:e1:21:b1:3d:36:1c:bf:d0:be:a2:
                    64:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:37:D1:74:A8:AB:E5:7F:1D:98:BF:38:0F:2D:8A:34:B6:9D:E0:D6
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a3a2f33322d3332203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:3e:0b:fa:e3:59:c7:8e:b0:97:4d:87:a4:bf:a3:04:1c:ec:
         99:e3:f5:5f:9b:d5:3b:bf:70:25:b8:0a:af:c9:f4:7b:bb:bb:
         e8:a1:54:a4:19:87:ab:db:5f:ce:9d:68:8e:b3:b8:d9:61:34:
         d4:29:59:6d:09:b0:38:57:ce:bc:ac:88:98:7b:93:4b:e3:69:
         71:19:0a:ba:38:1e:d8:00:92:3c:7f:b9:2f:2e:28:1a:9d:2b:
         4e:ce:a0:70:9d:f1:14:e1:cf:78:47:82:fc:8f:c3:63:ab:e2:
         a8:58:96:b0:f5:ca:3f:ef:a8:14:76:5f:15:c6:8d:79:e2:69:
         b6:a9:d5:34:c0:a6:83:50:90:c3:9b:c2:e8:9e:48:ea:43:ee:
         b3:74:27:8c:c7:8e:62:c7:6a:3f:ed:6f:d4:25:e9:d8:7f:3c:
         0b:8f:02:3e:85:de:27:75:5c:e8:28:32:6f:4e:8b:bf:6a:c4:
         76:ef:2d:52:5f:9c:1c:53:88:3f:4a:6a:54:ab:72:4d:91:46:
         3b:eb:b2:de:80:2f:b0:35:06:7c:00:24:be:d0:fa:32:74:78:
         79:84:33:78:00:a1:bf:4b:35:03:92:14:80:28:dd:81:dc:de:
         f8:f8:03:f0:21:18:5a:7b:fa:b8:68:cd:f1:19:09:1a:d0:87:
         d1:6e:5a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:33 2024 by rpki-client on console-fra.rpki-client.org