Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/323830343a316439633a3a2f33322d3438203d3e20323634333831.roa
File:                     323830343a316439633a3a2f33322d3438203d3e20323634333831.roa (raw, json)
Hash identifier:          ErMcTtIvn2CbEoVh/yJwfL+dt0t9gIdnxi2apHWKgUg=
Subject key identifier:   EC:38:F2:00:8F:3B:93:70:DB:CA:A4:9C:CB:D7:CD:42:6A:72:C7:15
Certificate issuer:       /CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
Certificate serial:       6429454A9BEEF79BFC41878B28E11EF4DBB3AA15
Authority key identifier: 91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/323830343a316439633a3a2f33322d3438203d3e20323634333831.roa
Signing time:             Thu 04 Apr 2024 13:30:56 +0000
ROA not before:           Thu 04 Apr 2024 13:25:56 +0000
ROA not after:            Thu 03 Apr 2025 13:30:56 +0000
asID:                     264381
IP address blocks:        2804:1d9c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl
                          rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 16:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:29:45:4a:9b:ee:f7:9b:fc:41:87:8b:28:e1:1e:f4:db:b3:aa:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
        Validity
            Not Before: Apr  4 13:25:56 2024 GMT
            Not After : Apr  3 13:30:56 2025 GMT
        Subject: CN=EC38F2008F3B9370DBCAA49CCBD7CD426A72C715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e7:22:9d:18:4b:75:f7:81:b4:24:f9:67:90:
                    8e:70:25:40:d2:b7:2e:1a:d9:2e:d8:68:45:43:18:
                    3a:cc:70:fb:d1:eb:70:9d:dd:1c:c4:d1:c4:11:10:
                    7a:e2:9a:f3:92:39:30:8a:2d:40:70:84:64:83:10:
                    2d:d6:54:35:25:e2:d2:a1:b9:1e:28:fb:d0:c5:03:
                    7c:ad:e1:01:9c:35:aa:63:76:ca:18:19:98:19:c7:
                    30:90:bf:96:a7:c9:a0:42:5a:2b:ef:ca:f7:b7:8a:
                    e3:a5:0c:2d:72:52:ad:ce:03:05:c3:32:6a:77:e8:
                    1b:c4:c9:ab:fe:5f:5d:52:cc:dd:c7:7d:b4:c2:04:
                    80:20:79:67:f5:a5:11:e2:c0:17:00:0b:72:81:e0:
                    2f:cc:15:c0:bf:e6:c6:a0:14:b8:9f:6b:d8:d2:ef:
                    7a:5a:c2:55:3a:e5:30:d3:13:0f:83:fc:7b:2e:c8:
                    eb:e0:bf:ac:23:6a:a6:b1:03:a5:df:91:8b:27:b1:
                    20:5c:11:3f:8e:8e:be:53:bb:1b:04:46:86:fe:cd:
                    4a:6e:aa:15:b6:0b:de:c1:05:97:60:bc:6c:fc:f1:
                    60:75:57:6a:88:c0:08:1a:1a:61:23:b1:b1:3f:c7:
                    f0:2d:06:0a:85:b7:cb:58:b1:22:1b:03:ae:39:77:
                    75:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:38:F2:00:8F:3B:93:70:DB:CA:A4:9C:CB:D7:CD:42:6A:72:C7:15
            X509v3 Authority Key Identifier:
                keyid:91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/323830343a316439633a3a2f33322d3438203d3e20323634333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:72:4b:76:72:09:41:e8:23:fe:22:48:57:08:c6:a0:39:d9:
         d8:58:4b:76:02:24:b2:f0:33:df:28:00:99:79:ad:c4:13:2a:
         ac:f7:32:42:8c:e2:dc:16:3d:6c:6f:54:a9:b5:73:f2:61:63:
         8e:cd:98:bc:2a:07:51:3a:f2:dd:ef:c8:18:49:5b:64:e9:49:
         68:27:5d:86:63:23:91:54:b8:c9:87:36:6c:e5:38:8a:60:44:
         4e:e8:68:57:0b:ec:72:72:93:e5:4b:ae:90:b0:90:2c:e2:8f:
         25:41:a8:53:1c:28:a3:35:b5:da:3c:ba:73:d4:b6:cb:65:de:
         0f:b3:b7:3f:d6:2d:6b:ad:b4:27:6e:cb:8d:ec:75:5f:0f:c6:
         b0:6b:ff:cf:e6:bb:19:94:c4:02:dc:0c:41:c3:2c:f7:2e:2b:
         ea:18:ce:ed:14:01:87:eb:0b:d3:47:fe:37:6e:4e:02:30:17:
         97:85:72:ac:6d:1f:39:d9:2f:15:c9:5e:60:60:83:c3:2f:46:
         4b:0a:ac:03:6b:7c:cb:88:0b:32:bc:29:1f:ba:0c:a4:40:66:
         0b:28:90:70:4f:e5:04:bf:3d:8c:b0:d6:57:4e:7f:09:83:e1:
         3a:62:25:80:e9:3a:0b:d7:a0:fe:a2:79:51:28:17:81:66:36:
         6f:32:40:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:13:53 2024 by rpki-client on console-ams.rpki-client.org