Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8tV3CLz5GBJWsWJ9W1EMiEgoQz4N7HzNRLUEpunnt7ui/1/323830343a383631303a3a2f33322d3438203d3e20323732363138.roa
File:                     323830343a383631303a3a2f33322d3438203d3e20323732363138.roa (raw, json)
Hash identifier:          +QXTP1VqV2zDTzX225wQF85pT6tFZqxaBlRR4GeWwUQ=
Subject key identifier:   BF:72:FB:8C:D4:67:F0:6E:97:E8:AA:44:DA:34:3F:0E:A5:2C:22:33
Certificate issuer:       /CN=B192E36D3AFFBFF2FFDCCD24F351215930336F1E
Certificate serial:       6EF5729AB7032B3586710F615A4F2A254F1D26D1
Authority key identifier: B1:92:E3:6D:3A:FF:BF:F2:FF:DC:CD:24:F3:51:21:59:30:33:6F:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B192E36D3AFFBFF2FFDCCD24F351215930336F1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8tV3CLz5GBJWsWJ9W1EMiEgoQz4N7HzNRLUEpunnt7ui/1/323830343a383631303a3a2f33322d3438203d3e20323732363138.roa
Signing time:             Thu 04 Apr 2024 18:39:31 +0000
ROA not before:           Thu 04 Apr 2024 18:34:31 +0000
ROA not after:            Thu 03 Apr 2025 18:39:31 +0000
asID:                     272618
IP address blocks:        2804:8610::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8tV3CLz5GBJWsWJ9W1EMiEgoQz4N7HzNRLUEpunnt7ui/1/B192E36D3AFFBFF2FFDCCD24F351215930336F1E.crl
                          rsync://rpki-repo.registro.br/repo/8tV3CLz5GBJWsWJ9W1EMiEgoQz4N7HzNRLUEpunnt7ui/1/B192E36D3AFFBFF2FFDCCD24F351215930336F1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B192E36D3AFFBFF2FFDCCD24F351215930336F1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f5:72:9a:b7:03:2b:35:86:71:0f:61:5a:4f:2a:25:4f:1d:26:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B192E36D3AFFBFF2FFDCCD24F351215930336F1E
        Validity
            Not Before: Apr  4 18:34:31 2024 GMT
            Not After : Apr  3 18:39:31 2025 GMT
        Subject: CN=BF72FB8CD467F06E97E8AA44DA343F0EA52C2233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:78:14:5d:2e:e1:ea:0c:4d:4a:38:bd:7a:14:
                    e6:c6:0b:d0:56:b9:e6:a0:4f:8d:4a:0d:3e:86:96:
                    ca:94:f9:9b:63:dd:be:82:ef:99:b3:c1:98:23:7e:
                    0e:6f:41:6a:51:9c:46:49:27:1d:37:63:e2:1f:74:
                    f9:4a:07:ec:67:d9:c1:6c:a6:29:73:c4:b8:3c:75:
                    01:61:1e:99:13:c0:8b:25:dd:73:d5:7f:4c:0a:7c:
                    b2:63:a6:04:8a:7a:00:77:8b:f9:c2:ed:1b:77:b2:
                    01:55:0d:24:42:4b:4c:6d:1c:62:ba:12:7c:13:38:
                    ec:f1:cf:a0:cd:6f:32:09:3b:62:c6:a5:0c:c4:6a:
                    87:91:1b:68:84:16:06:cb:1c:ad:40:cd:8b:04:59:
                    01:ca:dd:d7:e9:9e:61:57:3c:88:3c:7e:2d:6b:32:
                    50:bf:e0:10:bc:4c:88:66:5d:b1:a4:82:e9:b1:67:
                    f9:a3:28:c9:1b:88:b6:98:d4:a4:a8:27:0c:6c:35:
                    0e:ea:f8:81:bb:ea:cc:5b:c4:1e:42:ae:68:a4:67:
                    5e:fd:3e:70:a0:84:c3:b2:97:a6:30:12:26:80:5e:
                    f6:75:d7:8a:84:91:85:57:e1:44:e0:0a:3a:f3:6d:
                    93:6e:ff:f0:57:7a:b5:7f:17:c8:4a:b7:e9:4f:87:
                    f8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:72:FB:8C:D4:67:F0:6E:97:E8:AA:44:DA:34:3F:0E:A5:2C:22:33
            X509v3 Authority Key Identifier:
                keyid:B1:92:E3:6D:3A:FF:BF:F2:FF:DC:CD:24:F3:51:21:59:30:33:6F:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8tV3CLz5GBJWsWJ9W1EMiEgoQz4N7HzNRLUEpunnt7ui/1/B192E36D3AFFBFF2FFDCCD24F351215930336F1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B192E36D3AFFBFF2FFDCCD24F351215930336F1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8tV3CLz5GBJWsWJ9W1EMiEgoQz4N7HzNRLUEpunnt7ui/1/323830343a383631303a3a2f33322d3438203d3e20323732363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8610::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:24:3e:c0:f3:0d:f6:b9:42:75:53:ab:3d:03:7a:61:e0:d1:
         7c:b6:48:43:35:71:04:f5:68:59:da:1b:71:89:55:89:a9:ce:
         a1:6d:55:07:b0:05:04:d7:71:31:67:3a:56:68:f4:b2:c3:49:
         54:21:05:97:7b:24:91:2d:bd:b3:47:48:fe:6e:7c:0a:b1:00:
         1b:7b:e2:de:95:13:64:ee:a5:f5:66:52:6b:fe:05:15:66:7b:
         c6:09:33:c3:36:af:27:c3:33:2e:6a:d7:9f:d1:2c:23:0f:bf:
         c6:29:f8:03:4c:4e:62:a9:e5:a7:dc:31:46:82:b9:9d:94:8a:
         99:89:2b:58:45:db:b9:70:e2:48:3b:41:6a:f7:22:05:de:32:
         aa:5f:0a:fd:17:f6:5c:58:55:19:98:ee:ba:8d:26:43:c0:2c:
         96:bc:83:66:f0:3e:ae:b0:0f:48:f5:9f:36:5e:0f:3f:bf:36:
         08:b5:c5:5f:c4:c4:15:1f:31:e0:16:b0:a7:2a:98:89:75:a8:
         8a:50:48:cb:c1:74:3b:c9:bd:00:70:08:ef:71:36:80:3c:2c:
         17:5b:38:6c:71:8b:f5:b1:cf:3a:0f:31:86:bd:9d:d8:29:7e:
         31:f7:06:56:31:6a:6d:b0:cb:9e:fa:a3:5e:32:39:b0:af:d3:
         30:92:0f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:20 2024 by rpki-client on console-fra.rpki-client.org