Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/323830343a3230343a3a2f33322d3438203d3e203238313836.roa
File:                     323830343a3230343a3a2f33322d3438203d3e203238313836.roa (raw, json)
Hash identifier:          VpdBk8zw4+1lvPewzZhAKwbcfMqe03my4ma9c8ch3nI=
Subject key identifier:   CB:13:1C:D7:43:C9:5A:2E:49:7F:9F:D3:98:35:F3:D0:DD:97:4D:88
Certificate issuer:       /CN=2E81F2956E5C1958C1F538A1AAA9994DCB83DA21
Certificate serial:       5E7B469D0A5E95FB7E4112FFF540FBEF606807AD
Authority key identifier: 2E:81:F2:95:6E:5C:19:58:C1:F5:38:A1:AA:A9:99:4D:CB:83:DA:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/323830343a3230343a3a2f33322d3438203d3e203238313836.roa
Signing time:             Wed 03 Apr 2024 22:48:06 +0000
ROA not before:           Wed 03 Apr 2024 22:43:06 +0000
ROA not after:            Wed 02 Apr 2025 22:48:06 +0000
asID:                     28186
IP address blocks:        2804:204::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.crl
                          rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:7b:46:9d:0a:5e:95:fb:7e:41:12:ff:f5:40:fb:ef:60:68:07:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E81F2956E5C1958C1F538A1AAA9994DCB83DA21
        Validity
            Not Before: Apr  3 22:43:06 2024 GMT
            Not After : Apr  2 22:48:06 2025 GMT
        Subject: CN=CB131CD743C95A2E497F9FD39835F3D0DD974D88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:4e:1d:b5:5a:ee:ad:58:68:02:66:6e:ae:
                    97:da:78:53:d5:47:4c:c6:7c:4e:ae:97:f4:d5:71:
                    51:60:eb:d4:f0:ee:5e:fc:c9:f2:7d:7d:43:86:11:
                    0e:1e:81:a5:53:43:a7:9a:b6:35:bd:bc:f6:36:fb:
                    ae:05:13:0b:05:cf:28:1f:50:67:5f:4c:16:67:1d:
                    cd:eb:2a:b5:19:86:fa:d7:c2:26:1a:57:0b:00:85:
                    7a:e7:53:f0:83:b4:f2:ce:f6:a2:fe:c7:bd:8d:4b:
                    16:b5:fe:46:af:5a:b2:13:76:8e:fc:28:d6:59:ac:
                    75:ef:01:95:96:b8:29:c9:24:5e:e2:d9:52:67:e4:
                    9e:ff:1f:1e:73:b5:ce:05:14:63:91:02:3a:73:92:
                    01:ec:ca:06:3c:bb:91:75:ef:84:44:01:0b:e6:1b:
                    cf:87:b5:99:6b:cf:f9:ef:ca:d8:b1:df:be:82:b7:
                    5b:66:37:1d:27:14:d2:2c:19:f2:cf:33:c4:94:05:
                    21:79:b4:0f:41:39:d9:ae:fe:bf:bc:eb:f9:33:b4:
                    f8:cc:0f:c7:94:4c:0f:9f:f6:41:94:43:53:a4:eb:
                    b6:34:1f:5e:d0:86:1f:25:54:fd:f3:68:23:1f:21:
                    05:5b:31:4a:4d:87:15:af:e6:1f:c7:ef:f8:f7:35:
                    98:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:13:1C:D7:43:C9:5A:2E:49:7F:9F:D3:98:35:F3:D0:DD:97:4D:88
            X509v3 Authority Key Identifier:
                keyid:2E:81:F2:95:6E:5C:19:58:C1:F5:38:A1:AA:A9:99:4D:CB:83:DA:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/323830343a3230343a3a2f33322d3438203d3e203238313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:204::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:2e:cb:3b:37:4e:25:81:5e:35:4b:cf:d3:69:e4:7d:fb:ff:
         ff:90:6f:26:b7:a1:54:11:8a:e2:c3:03:b2:16:0c:79:cd:6c:
         68:58:7e:95:a0:ea:89:10:be:42:99:5d:a0:35:60:84:89:62:
         7f:05:b0:eb:bd:97:02:3d:b6:ec:b2:8d:91:9d:2a:d9:92:5b:
         81:6e:87:1c:7d:b2:48:4e:d1:12:56:60:40:cd:1b:81:42:00:
         27:ed:cc:b5:2d:40:65:1b:69:a0:52:83:93:e4:5d:87:e2:c6:
         73:59:9f:e7:06:a0:39:7d:81:80:1b:2f:f5:6a:ce:10:7f:37:
         0b:28:e8:a4:ef:32:d3:5d:86:53:a2:24:ad:65:9a:62:b1:62:
         c0:2f:b7:a3:fe:5c:1d:6d:21:77:c2:7f:cc:5e:ef:69:34:f7:
         cd:38:ae:4d:e0:9f:e5:f2:c0:ad:27:0e:65:ff:66:69:74:ad:
         6e:d2:4a:2f:0c:85:e9:8b:94:3c:fa:6d:c6:de:e2:46:28:25:
         72:f4:49:08:4b:3b:02:fc:0d:ae:d2:29:e8:ae:4f:a0:17:d3:
         ed:36:54:d7:8b:e3:52:86:c7:a4:7a:0e:04:d1:ba:ca:c1:65:
         38:48:4f:d7:49:23:65:51:67:a6:23:25:fa:a0:ad:04:f9:1d:
         55:da:d5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:17 2024 by rpki-client on console-fra.rpki-client.org