Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/323830343a326233343a3a2f33322d3334203d3e20323635313430.roa
File:                     323830343a326233343a3a2f33322d3334203d3e20323635313430.roa (raw, json)
Hash identifier:          v7yMgZztlHbTh4W1LlEf0F/KNEorS4Xv6Gt4Qce59Vw=
Subject key identifier:   50:13:90:92:BE:97:8F:75:06:FE:D6:26:06:E8:EA:D1:70:84:EF:44
Certificate issuer:       /CN=68EC60223DF10BE63B7A84464ACF2A9697173D75
Certificate serial:       3CD7177A876EDD9B2E38BD350C2035432A5C4FAA
Authority key identifier: 68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/323830343a326233343a3a2f33322d3334203d3e20323635313430.roa
Signing time:             Fri 19 Apr 2024 14:17:55 +0000
ROA not before:           Fri 19 Apr 2024 14:12:55 +0000
ROA not after:            Fri 18 Apr 2025 14:17:55 +0000
asID:                     265140
IP address blocks:        2804:2b34::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.crl
                          rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d7:17:7a:87:6e:dd:9b:2e:38:bd:35:0c:20:35:43:2a:5c:4f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68EC60223DF10BE63B7A84464ACF2A9697173D75
        Validity
            Not Before: Apr 19 14:12:55 2024 GMT
            Not After : Apr 18 14:17:55 2025 GMT
        Subject: CN=50139092BE978F7506FED62606E8EAD17084EF44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e2:11:48:b3:73:3e:49:02:76:b2:dd:4c:03:
                    79:66:ae:d4:2e:db:9f:88:c0:1b:32:04:b2:65:e4:
                    f0:c3:cf:50:66:45:bd:0b:c2:0a:e7:8d:52:45:dc:
                    0b:2e:bd:57:39:2d:a2:db:e2:ea:3e:24:9b:25:39:
                    1c:b6:a9:4a:e9:36:0e:13:fd:2b:6e:d3:ac:8f:6d:
                    06:5b:17:02:23:89:f9:d3:c5:15:a2:8d:ee:cc:cf:
                    d9:f8:70:25:e7:96:19:d2:15:1b:2a:d5:1b:d0:2c:
                    aa:66:6c:1f:b4:ad:fb:50:d3:b4:c6:f1:b5:1f:15:
                    e5:36:d3:1d:86:ad:91:e8:d0:65:10:50:b7:e0:68:
                    c2:30:8f:d0:7e:a1:ac:2b:f5:14:bc:06:41:f3:fe:
                    55:02:c5:a0:45:54:c6:2d:af:91:7d:1a:70:c2:7d:
                    b2:63:04:34:9d:63:3e:78:78:6f:04:63:c2:19:1b:
                    c2:1e:1a:db:64:b6:d4:a2:8b:5a:a1:ca:b4:e8:f8:
                    b4:2a:cd:84:37:b4:93:96:e7:d5:01:87:42:cd:9e:
                    dc:57:a4:aa:aa:56:3a:77:69:15:f0:9b:ee:dd:48:
                    c7:bd:0b:41:b4:a9:6b:f0:b0:60:6f:e9:44:dc:1a:
                    87:e6:62:99:77:44:7f:c5:c8:6b:34:11:67:68:5a:
                    99:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:13:90:92:BE:97:8F:75:06:FE:D6:26:06:E8:EA:D1:70:84:EF:44
            X509v3 Authority Key Identifier:
                keyid:68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/323830343a326233343a3a2f33322d3334203d3e20323635313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b34::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:f1:2b:3b:a6:e4:5c:11:38:bb:98:ef:a6:b8:58:5a:0d:d2:
         fd:0d:8a:95:8c:69:92:98:12:c1:c0:8c:08:83:65:73:49:88:
         05:c7:18:b3:e5:2b:3b:d2:c9:de:3e:6a:1f:b9:63:db:8d:5b:
         f3:08:19:58:19:bc:28:3c:72:6c:fc:34:43:9d:8c:7e:cc:6d:
         2d:1d:22:e1:9c:df:5f:9f:da:f7:ea:1e:0d:e2:70:05:f3:17:
         1d:98:53:70:f5:80:e3:4e:17:a8:c8:4f:cf:c2:87:d9:e4:af:
         e5:7d:a7:86:f2:16:f6:09:d6:fc:61:45:1f:bd:ac:41:52:16:
         7d:fc:51:e3:d9:09:72:a8:39:0c:2b:8f:de:b8:cf:31:14:39:
         db:db:b8:ea:25:ec:3c:ee:4e:fd:03:34:f1:d3:d1:78:f2:73:
         d7:6e:6d:02:85:f6:fd:3e:fc:04:d4:12:b7:d1:66:ea:19:07:
         d2:42:03:0b:4f:81:09:25:ec:2b:6b:38:81:6d:b6:f8:4f:0d:
         c9:7c:01:2f:a3:e8:60:bf:9f:1c:92:20:23:70:26:a3:a7:11:
         cf:5e:7b:89:11:1d:ce:81:38:1b:5d:65:71:bc:a7:72:79:3e:
         57:2d:99:2a:a2:2e:ea:36:fb:ed:f0:4f:01:22:ba:36:e2:7c:
         fd:96:0e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:23 2024 by rpki-client on console-fra.rpki-client.org