Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/323830343a323464633a3a2f33322d3438203d3e203238313836.roa
File:                     323830343a323464633a3a2f33322d3438203d3e203238313836.roa (raw, json)
Hash identifier:          oNpKJpegfOMdX7zu23MGT3V0dfkthR0b2vz1BozVpns=
Subject key identifier:   C8:A7:EF:0D:46:D6:5A:09:43:00:3C:E6:33:90:57:2B:D9:33:16:CF
Certificate issuer:       /CN=2E81F2956E5C1958C1F538A1AAA9994DCB83DA21
Certificate serial:       6A76BF255C9B2B043D70F36C6A29F746E870EC9E
Authority key identifier: 2E:81:F2:95:6E:5C:19:58:C1:F5:38:A1:AA:A9:99:4D:CB:83:DA:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/323830343a323464633a3a2f33322d3438203d3e203238313836.roa
Signing time:             Wed 03 Apr 2024 22:48:06 +0000
ROA not before:           Wed 03 Apr 2024 22:43:06 +0000
ROA not after:            Wed 02 Apr 2025 22:48:06 +0000
asID:                     28186
IP address blocks:        2804:24dc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.crl
                          rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:76:bf:25:5c:9b:2b:04:3d:70:f3:6c:6a:29:f7:46:e8:70:ec:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E81F2956E5C1958C1F538A1AAA9994DCB83DA21
        Validity
            Not Before: Apr  3 22:43:06 2024 GMT
            Not After : Apr  2 22:48:06 2025 GMT
        Subject: CN=C8A7EF0D46D65A0943003CE63390572BD93316CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0d:bb:2c:93:95:9d:aa:7a:bb:29:83:08:14:
                    e4:db:f5:15:57:09:fe:e2:8b:b6:92:aa:4d:2d:07:
                    5f:5d:ba:47:68:29:47:49:69:21:1f:f7:c3:b7:26:
                    d5:07:69:c4:ea:78:36:79:7e:50:73:83:84:22:a5:
                    be:4a:23:c7:d8:c3:1e:ef:5c:2b:e8:cd:8d:ab:6a:
                    7f:ee:de:a8:a5:ca:46:0b:ee:f0:72:48:cc:e6:30:
                    64:02:f0:1f:5f:82:67:c0:be:15:d5:a6:65:dc:ee:
                    71:fd:5c:b9:bb:dd:24:7d:9e:d1:f4:04:ad:3a:ce:
                    31:37:31:29:26:b5:b9:30:af:13:51:13:fe:53:99:
                    ae:db:b3:d9:77:21:bc:bf:5e:da:3e:be:46:a3:6b:
                    8d:ad:f0:78:dc:44:86:90:ee:13:85:aa:15:bc:3b:
                    c1:7e:ff:e6:cf:e5:70:2b:9f:2e:44:15:db:2a:fe:
                    5a:06:78:15:23:44:2e:2b:4c:d1:68:81:01:23:9a:
                    b4:98:c6:83:ab:28:15:c4:aa:11:6b:ef:00:e1:bc:
                    eb:2c:75:55:c9:34:02:c8:35:62:df:e4:63:44:a4:
                    9c:1b:6b:e5:22:1f:83:f2:83:39:15:4d:e3:a8:b8:
                    8b:03:d9:8a:c2:c6:9d:1e:8a:44:5b:c2:54:b9:16:
                    e0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A7:EF:0D:46:D6:5A:09:43:00:3C:E6:33:90:57:2B:D9:33:16:CF
            X509v3 Authority Key Identifier:
                keyid:2E:81:F2:95:6E:5C:19:58:C1:F5:38:A1:AA:A9:99:4D:CB:83:DA:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/323830343a323464633a3a2f33322d3438203d3e203238313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:94:a7:04:b0:5d:3f:0f:42:32:af:63:5c:d3:6c:fe:36:81:
         12:89:5f:2a:2e:fb:11:2f:5a:bd:10:34:42:dc:85:4c:c0:6b:
         e9:37:54:57:7a:b9:ad:a1:e7:0c:3f:56:d7:76:32:1f:f5:11:
         eb:24:e1:23:15:10:8a:53:9e:6f:04:fc:55:65:a7:31:b1:44:
         d9:71:23:c4:30:fc:7f:22:b9:85:b3:b6:50:97:e8:9b:07:c2:
         35:11:8d:60:33:3c:e2:46:11:12:9d:9a:61:43:20:8f:8a:28:
         24:4b:39:d7:47:be:21:6f:f6:64:5c:4f:71:3f:30:b8:96:d4:
         65:ff:32:c3:2d:56:87:9b:c2:50:c9:38:77:ce:de:ac:3e:94:
         9d:7b:fe:89:e1:25:e4:47:07:93:fa:85:68:2a:9e:c4:85:8b:
         f4:26:3c:e4:53:d3:05:f7:bd:ad:2c:8a:78:8d:aa:58:09:03:
         52:21:01:c2:e6:bc:ea:d8:59:ce:9f:a7:74:c6:78:8e:1e:b6:
         ea:db:fb:ce:7b:b0:df:30:ce:5c:90:4a:cc:7c:32:97:f6:ce:
         fd:28:3b:15:78:94:66:1b:5f:51:00:c4:39:d0:c5:fa:de:db:
         f3:94:fa:d1:da:b3:f2:90:3a:af:ee:96:f1:9c:ab:94:54:45:
         55:ff:86:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:17 2024 by rpki-client on console-fra.rpki-client.org