Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/323830343a336333633a3a2f33322d3336203d3e20323636313938.roa
File:                     323830343a336333633a3a2f33322d3336203d3e20323636313938.roa (raw, json)
Hash identifier:          R6qwnmAJl2ZDxnT42Atbbfhc4Ir4lRmT007g10QYga8=
Subject key identifier:   A6:8E:7A:76:11:7C:69:C2:69:77:CB:CC:56:32:54:6B:B1:6D:28:6A
Certificate issuer:       /CN=7953D59AEF2A6773CA8535EBECC18720D7980989
Certificate serial:       315517087BDDD0114D66329AC7FB14ECD210CFBB
Authority key identifier: 79:53:D5:9A:EF:2A:67:73:CA:85:35:EB:EC:C1:87:20:D7:98:09:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7953D59AEF2A6773CA8535EBECC18720D7980989.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/323830343a336333633a3a2f33322d3336203d3e20323636313938.roa
Signing time:             Thu 04 Apr 2024 19:02:01 +0000
ROA not before:           Thu 04 Apr 2024 18:57:01 +0000
ROA not after:            Thu 03 Apr 2025 19:02:01 +0000
asID:                     266198
IP address blocks:        2804:3c3c::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/7953D59AEF2A6773CA8535EBECC18720D7980989.crl
                          rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/7953D59AEF2A6773CA8535EBECC18720D7980989.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7953D59AEF2A6773CA8535EBECC18720D7980989.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 10:27:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:55:17:08:7b:dd:d0:11:4d:66:32:9a:c7:fb:14:ec:d2:10:cf:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7953D59AEF2A6773CA8535EBECC18720D7980989
        Validity
            Not Before: Apr  4 18:57:01 2024 GMT
            Not After : Apr  3 19:02:01 2025 GMT
        Subject: CN=A68E7A76117C69C26977CBCC5632546BB16D286A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:71:89:8d:5e:ba:1d:18:22:e6:8b:36:f7:9e:
                    6b:fc:85:a5:fb:07:5d:9a:3b:3c:51:2b:5d:8d:f1:
                    80:d2:f6:ef:7b:b0:20:d7:fb:e5:3c:f6:f8:e3:42:
                    16:86:47:ad:68:a6:4e:d9:f2:17:ec:82:0e:a9:e1:
                    fc:3d:ad:c1:e8:9e:6e:32:31:89:a5:e4:3e:12:a4:
                    ac:ca:2d:39:b9:79:7e:61:5b:29:78:a4:77:7c:2f:
                    a0:68:0c:3a:6e:ad:54:71:1e:7d:b1:57:ad:c4:98:
                    07:ea:66:b8:ea:dd:4a:6b:36:a5:5e:d3:dd:aa:7a:
                    dc:2f:e5:0d:aa:98:98:26:b6:4b:e7:03:87:8f:80:
                    43:21:5c:38:88:9b:43:1c:79:57:87:b8:b0:63:da:
                    90:c6:be:8f:17:b9:c1:39:1a:27:12:8b:67:aa:01:
                    77:c7:b6:44:54:33:56:22:e1:d9:82:5d:a4:0c:f8:
                    65:e7:40:95:57:0d:17:bd:7f:58:97:ff:ac:00:89:
                    da:e3:01:fc:d6:76:c8:b6:c1:ff:ca:ca:c8:ca:ec:
                    42:5f:af:81:1b:03:bd:0a:db:f5:43:0a:bc:49:da:
                    30:61:d1:21:c2:fa:0d:f8:13:a8:7a:ab:32:45:7c:
                    c6:7e:25:f5:59:81:51:4a:82:2e:ae:f4:f1:71:0b:
                    bd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8E:7A:76:11:7C:69:C2:69:77:CB:CC:56:32:54:6B:B1:6D:28:6A
            X509v3 Authority Key Identifier:
                keyid:79:53:D5:9A:EF:2A:67:73:CA:85:35:EB:EC:C1:87:20:D7:98:09:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/7953D59AEF2A6773CA8535EBECC18720D7980989.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7953D59AEF2A6773CA8535EBECC18720D7980989.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/323830343a336333633a3a2f33322d3336203d3e20323636313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         e9:a0:e8:b5:82:47:87:b0:15:6b:a6:9e:3f:d7:e5:3a:29:81:
         f0:fb:1b:15:8f:22:b4:e3:ee:d5:e0:78:03:29:d5:27:cd:45:
         5e:ed:da:19:f4:2a:cf:9c:e7:15:b5:1d:f7:93:df:a4:31:bb:
         60:af:65:d3:99:32:18:d3:e1:c9:e8:60:ab:5d:30:8b:f5:a2:
         14:eb:9c:24:b5:68:b9:9d:a9:fe:d8:16:1d:f2:74:80:1b:d3:
         d9:41:56:10:14:78:c6:6a:ef:7d:3f:fb:ac:9a:0f:14:ca:09:
         c1:09:91:5d:68:61:ba:6c:ca:95:11:83:63:f5:7f:e6:49:4b:
         e9:4e:a4:61:55:d2:da:a1:04:9b:00:2e:ff:86:b6:be:a9:25:
         70:2e:0d:0d:76:a4:eb:20:1f:f4:bd:0a:43:02:75:f3:fe:66:
         c6:2a:c1:a6:f6:d0:df:ae:f8:80:d7:3b:78:7d:e0:e9:13:e8:
         40:cf:4b:9e:c9:9d:6b:3d:70:7d:8a:0e:b6:14:e8:24:36:30:
         44:cf:20:e3:69:32:1e:ff:0f:17:12:b9:fc:30:02:d3:ce:58:
         13:13:1a:c1:f7:bd:c9:3f:b0:97:09:c6:69:b7:ca:e9:14:84:
         16:b8:cc:fe:9e:3e:25:55:09:22:5d:f8:f9:fc:d2:92:29:02:
         97:93:a3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:51 2024 by rpki-client on console-fra.rpki-client.org