Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93uqARYdh5sFDibDC6WGdGao4uh4mAdjSyCNXSTopZ5V/1/323830343a336663383a3a2f33322d3438203d3e20323635393134.roa
File:                     323830343a336663383a3a2f33322d3438203d3e20323635393134.roa (raw, json)
Hash identifier:          oA/66cN95kxCe61BSYNoJPStf0Y2bG8skqhYuVdSnAY=
Subject key identifier:   C7:83:E1:8A:BC:D6:DF:E3:78:0B:EE:E2:44:67:31:DE:87:22:07:EB
Certificate issuer:       /CN=978C99F109F4BDA1A39540870319AF5A1798DF00
Certificate serial:       65048BCE1040DB53B2FFE2D8CEA342D83E81C6CB
Authority key identifier: 97:8C:99:F1:09:F4:BD:A1:A3:95:40:87:03:19:AF:5A:17:98:DF:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/978C99F109F4BDA1A39540870319AF5A1798DF00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93uqARYdh5sFDibDC6WGdGao4uh4mAdjSyCNXSTopZ5V/1/323830343a336663383a3a2f33322d3438203d3e20323635393134.roa
Signing time:             Fri 05 Apr 2024 03:12:06 +0000
ROA not before:           Fri 05 Apr 2024 03:07:06 +0000
ROA not after:            Fri 04 Apr 2025 03:12:06 +0000
asID:                     265914
IP address blocks:        2804:3fc8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93uqARYdh5sFDibDC6WGdGao4uh4mAdjSyCNXSTopZ5V/1/978C99F109F4BDA1A39540870319AF5A1798DF00.crl
                          rsync://rpki-repo.registro.br/repo/93uqARYdh5sFDibDC6WGdGao4uh4mAdjSyCNXSTopZ5V/1/978C99F109F4BDA1A39540870319AF5A1798DF00.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/978C99F109F4BDA1A39540870319AF5A1798DF00.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:04:8b:ce:10:40:db:53:b2:ff:e2:d8:ce:a3:42:d8:3e:81:c6:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=978C99F109F4BDA1A39540870319AF5A1798DF00
        Validity
            Not Before: Apr  5 03:07:06 2024 GMT
            Not After : Apr  4 03:12:06 2025 GMT
        Subject: CN=C783E18ABCD6DFE3780BEEE2446731DE872207EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fa:36:06:6a:71:3e:1b:50:5a:af:a2:30:1c:
                    93:dd:cc:e0:a0:39:fc:02:00:0a:63:e8:e3:e3:1d:
                    29:31:b2:e7:71:11:83:6f:bf:32:a0:bc:6d:af:ca:
                    88:9f:a2:12:9c:ae:93:bd:ad:19:8e:79:f6:26:f8:
                    c2:53:75:43:ec:da:cd:ad:b8:21:73:f6:0f:ec:40:
                    2c:98:8d:42:a4:b2:de:ba:14:ef:3d:92:5e:b3:55:
                    47:1b:bf:8e:ef:18:d0:ff:e8:39:ea:30:39:c5:ae:
                    f9:05:18:0f:55:8a:f4:e1:89:19:4c:e3:04:20:c4:
                    46:cf:86:1d:5c:c1:6e:85:17:17:8c:df:e2:41:a2:
                    f4:de:c1:5d:ce:85:40:fc:5f:75:37:cd:46:2d:de:
                    a6:9b:33:d8:92:5e:7b:da:1d:48:70:db:cc:fc:c5:
                    96:79:41:8a:b5:3c:04:27:19:33:be:75:6e:a3:b5:
                    91:d9:bf:00:3c:16:c4:4a:8e:df:6c:f9:36:19:85:
                    a0:9f:d5:f5:0c:b7:5d:6d:7d:a7:63:7b:e7:47:35:
                    7d:00:0e:d3:e3:4e:62:f6:71:02:d5:71:42:e2:56:
                    be:fa:d4:e6:aa:ea:b0:bc:db:ca:42:5f:a4:7c:c3:
                    55:96:27:d3:25:aa:35:f7:cc:63:56:aa:3b:b1:03:
                    d4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:83:E1:8A:BC:D6:DF:E3:78:0B:EE:E2:44:67:31:DE:87:22:07:EB
            X509v3 Authority Key Identifier:
                keyid:97:8C:99:F1:09:F4:BD:A1:A3:95:40:87:03:19:AF:5A:17:98:DF:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93uqARYdh5sFDibDC6WGdGao4uh4mAdjSyCNXSTopZ5V/1/978C99F109F4BDA1A39540870319AF5A1798DF00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/978C99F109F4BDA1A39540870319AF5A1798DF00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93uqARYdh5sFDibDC6WGdGao4uh4mAdjSyCNXSTopZ5V/1/323830343a336663383a3a2f33322d3438203d3e20323635393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:a7:56:ef:1d:60:24:9f:86:0a:26:ba:e2:a1:06:b5:27:69:
         ff:fe:ed:d6:0d:ee:d2:d3:15:16:fd:28:50:79:0b:2d:3e:42:
         38:ab:a3:b0:ff:9f:41:81:d7:30:30:47:01:eb:c2:6e:57:64:
         dc:96:00:7f:f4:03:49:72:46:08:49:eb:fe:1f:32:18:55:d5:
         e5:c5:43:24:d3:f8:02:d0:36:8e:d2:08:fc:d7:ea:ef:d3:66:
         1c:fb:bf:10:2b:23:71:83:c4:8b:2d:b4:13:66:23:8d:40:c8:
         c9:75:fe:fc:f7:13:f4:44:1f:ec:97:3e:db:38:0f:a6:f3:eb:
         c5:ea:06:dc:fb:44:dd:8b:58:00:c7:f3:eb:7a:14:e2:83:82:
         0a:73:5f:0e:bf:2d:1f:f3:ce:50:dd:dd:b8:f7:b9:21:29:9d:
         80:91:b6:57:2e:ed:80:22:ff:aa:dc:86:77:cd:41:94:0d:ac:
         57:50:34:8f:0d:58:30:f4:1e:86:19:64:b8:6e:fb:b4:b4:2b:
         dd:63:fe:6f:13:4f:a7:1c:88:81:7c:b7:aa:18:57:32:73:72:
         2b:c4:55:35:56:a6:e4:f1:07:35:b1:08:f1:d9:9b:a3:23:47:
         4f:7e:1d:8a:55:da:4e:69:b7:22:da:c5:7f:ce:62:40:5e:57:
         bc:59:e3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:04 2024 by rpki-client on console-ams.rpki-client.org