Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/323830343a323638383a3a2f33322d3438203d3e20323632343832.roa
File:                     323830343a323638383a3a2f33322d3438203d3e20323632343832.roa (raw, json)
Hash identifier:          2346Z9sA6sm1fdi4zzQqT2Hbv9Ho+FYcywRTHXQJPPM=
Subject key identifier:   D9:F2:65:EA:D5:81:B9:8E:A0:38:91:F1:61:3D:31:A7:DE:C1:C5:6B
Certificate issuer:       /CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0
Certificate serial:       1173DEF07360809CF76F7B7C408B3EFC01AF8304
Authority key identifier: 86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/323830343a323638383a3a2f33322d3438203d3e20323632343832.roa
Signing time:             Mon 22 Apr 2024 17:39:24 +0000
ROA not before:           Mon 22 Apr 2024 17:34:24 +0000
ROA not after:            Mon 21 Apr 2025 17:39:24 +0000
asID:                     262482
IP address blocks:        2804:2688::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl
                          rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:73:de:f0:73:60:80:9c:f7:6f:7b:7c:40:8b:3e:fc:01:af:83:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0
        Validity
            Not Before: Apr 22 17:34:24 2024 GMT
            Not After : Apr 21 17:39:24 2025 GMT
        Subject: CN=D9F265EAD581B98EA03891F1613D31A7DEC1C56B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9c:22:e1:3f:43:68:d1:41:06:9c:13:81:99:
                    ec:da:db:fd:75:dd:a2:75:e2:25:73:3a:4b:52:96:
                    23:54:ca:26:ae:b5:66:4f:4d:ee:e1:1f:0b:80:7f:
                    f1:ad:e3:ed:df:af:7c:11:f0:0e:b6:c3:6f:68:2c:
                    0f:37:8a:02:27:41:8b:b0:d0:4f:0c:43:c4:ae:c7:
                    f2:f3:8b:c7:59:3f:36:94:d5:1e:4c:6e:d8:3e:7c:
                    29:30:3e:ff:5f:2d:81:14:bc:f4:04:a0:6a:44:3a:
                    bc:ec:ef:79:98:1e:ad:87:9e:1c:cf:1c:e0:3c:40:
                    9a:24:85:a9:26:72:f3:58:74:fa:e8:dc:58:1b:d5:
                    1b:94:b2:72:29:95:4c:b9:99:d1:8b:97:7e:2c:71:
                    5d:65:06:8b:68:41:ee:01:9e:f3:7d:9b:7c:6e:00:
                    50:f4:94:f3:ad:54:90:00:9a:0f:64:db:fb:f1:ff:
                    59:61:aa:07:bc:1b:35:41:df:dd:d4:3c:a5:cb:95:
                    92:5d:08:be:46:e4:37:a9:d7:03:6b:42:f6:98:f1:
                    8a:22:cf:92:aa:66:4b:52:6e:61:b4:c5:e4:93:49:
                    38:68:21:61:11:cd:75:42:9c:68:78:40:4a:76:8e:
                    c3:73:24:5c:bf:ec:0d:69:32:66:60:95:35:0f:04:
                    a9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F2:65:EA:D5:81:B9:8E:A0:38:91:F1:61:3D:31:A7:DE:C1:C5:6B
            X509v3 Authority Key Identifier:
                keyid:86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/323830343a323638383a3a2f33322d3438203d3e20323632343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2688::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:c0:57:54:06:68:1c:74:8a:8d:2e:56:b3:f2:4a:61:6c:78:
         89:f1:5a:73:f4:a0:ac:e1:37:a1:ab:01:3c:b1:0d:63:de:db:
         9a:8a:64:1e:0f:6f:6d:2b:f1:81:95:53:53:77:f9:cf:70:1d:
         76:f4:a8:dc:4c:d9:9b:7e:4e:6f:87:bd:e9:c2:08:c0:b6:50:
         81:2b:01:83:e4:65:0c:9b:b3:e8:06:56:b1:43:43:d8:ab:86:
         8d:2e:a0:88:bd:9f:d2:20:92:42:c6:17:7a:f2:b5:41:72:de:
         d6:d2:2d:a7:32:d4:6d:66:a8:3a:59:b6:2a:30:d1:72:c2:f6:
         84:24:27:5a:61:b9:5d:c1:0e:f9:ef:17:c6:7c:98:2c:1e:be:
         61:37:26:85:79:d4:7f:c3:24:f8:c2:85:4a:b5:b4:e4:ef:fb:
         7f:50:70:58:e6:3d:dd:81:40:5e:43:b7:7d:dc:35:9e:12:22:
         75:a1:bf:14:70:87:7c:da:79:0f:93:2f:00:00:ad:d6:ae:9e:
         ed:3c:e6:4f:9b:7c:92:0b:cc:24:5a:57:38:dd:32:3b:80:0c:
         c9:a6:24:c0:62:c6:5c:22:e7:d2:aa:b3:fb:a4:f1:84:c7:d8:
         92:a0:95:d2:ed:1d:0b:af:d9:ec:b1:05:b1:56:66:63:c6:99:
         d9:a7:11:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:21 2024 by rpki-client on console-fra.rpki-client.org