Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e203238323130.roa
File:                     323830343a6636633a3a2f33322d3438203d3e203238323130.roa (raw, json)
Hash identifier:          L+7g4eRwyPSE9ZBC0xyFsdPsfXpCzsmcYmjHxR1VQ8w=
Subject key identifier:   FA:95:DB:57:D1:52:0B:F2:7C:D8:FA:99:23:31:E2:41:5D:8B:12:ED
Certificate issuer:       /CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
Certificate serial:       1EE1C42A81D37044E6FE19A36BA269184046DC4F
Authority key identifier: 1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e203238323130.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     28210
IP address blocks:        2804:f6c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e1:c4:2a:81:d3:70:44:e6:fe:19:a3:6b:a2:69:18:40:46:dc:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c6:bf:08:4a:12:f5:5f:82:00:78:a7:9a:05:
                    ca:ae:1c:7f:49:f6:57:89:a5:2a:30:af:66:1c:cf:
                    a9:ca:b0:47:b9:76:c5:d4:18:bb:a9:bb:a5:41:6b:
                    16:c0:4d:d6:cf:c5:57:2d:b5:32:92:4d:61:40:27:
                    ac:76:85:3d:a8:c1:5c:83:1a:3d:cc:d3:cd:a0:c6:
                    01:8c:3e:ca:33:41:47:25:77:24:a3:f4:43:02:86:
                    df:0a:1c:68:74:a1:0d:9c:ce:03:fc:43:a6:a2:fd:
                    24:ae:3f:ac:25:e5:77:b5:b9:5c:52:18:1e:96:4a:
                    d8:06:15:fb:2f:b3:ce:d6:b2:10:8f:2c:d9:11:77:
                    3d:9d:47:ea:14:eb:39:34:07:f4:d9:df:6d:97:5a:
                    32:a1:14:55:8e:2a:21:1c:0f:86:51:7e:c7:7d:dc:
                    54:05:59:d7:b1:e1:b5:8f:49:77:99:4c:62:7b:5e:
                    08:be:f0:81:28:2b:c5:96:17:ad:68:48:bc:95:29:
                    b5:96:16:82:43:e1:e7:23:b1:f6:c7:c3:e6:07:32:
                    29:f1:08:b9:84:f3:e7:da:55:70:ac:54:bd:c9:a7:
                    8a:6e:cf:15:66:d8:6f:ee:97:c2:b3:c5:b8:53:58:
                    f3:bd:11:6b:08:13:9a:ab:0e:53:55:12:9c:d0:9c:
                    d0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:95:DB:57:D1:52:0B:F2:7C:D8:FA:99:23:31:E2:41:5D:8B:12:ED
            X509v3 Authority Key Identifier:
                keyid:1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:03:64:5c:cf:5a:bd:8c:d0:a7:02:38:e3:17:c7:7c:24:d9:
         f6:62:7c:03:96:6d:e4:28:12:45:a1:92:3a:46:84:8c:95:1f:
         23:2d:88:56:b6:2e:b8:63:78:68:6c:cf:87:c2:31:5e:d3:90:
         95:1b:c3:a3:86:76:79:54:23:b4:13:da:a0:b0:d3:7d:d4:2b:
         3b:ff:c1:30:74:24:21:ab:cb:d7:dd:ad:13:ae:b8:bd:6c:ed:
         89:da:ec:ed:fd:93:b8:b5:37:e2:34:60:b5:17:4f:f9:02:d7:
         4b:28:9a:38:cb:05:f6:f8:4a:f9:a7:29:4f:80:07:25:46:93:
         1b:7c:ea:a3:95:e0:6e:7f:b1:ce:81:0a:1f:18:e5:df:9c:3f:
         1b:b1:87:34:1c:ab:cd:9a:09:12:b7:69:bc:a6:50:e2:b6:77:
         54:f1:20:5b:d7:36:b2:af:e8:77:89:0f:0f:b6:a8:6d:e5:26:
         d1:0e:06:a0:49:08:d4:62:82:de:4e:07:ce:26:f1:00:67:90:
         15:ff:89:06:0f:2c:59:fd:4b:8c:d0:5c:26:bb:76:6c:1e:23:
         55:2a:6e:55:b7:35:44:9d:c3:2a:45:ea:cb:ff:3c:1a:15:13:
         4e:46:32:cf:3c:6c:df:0e:0b:2d:5a:2c:eb:ca:46:6d:6b:0a:
         8f:33:06:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:57 2024 by rpki-client on console-fra.rpki-client.org