Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/323830343a316163343a3a2f33322d3438203d3e203631383834.roa
File:                     323830343a316163343a3a2f33322d3438203d3e203631383834.roa (raw, json)
Hash identifier:          Rv34AvbGLevelXnR78PoaBYLlimfFl0G3oeexPVrulc=
Subject key identifier:   E5:1E:AB:AE:57:85:F1:02:EA:BA:F7:C3:27:50:71:95:BE:B7:DA:ED
Certificate issuer:       /CN=65266773FE30988C76975E1CA92521B7BCB5897A
Certificate serial:       3FA315F1110D9D1D414B91F9209D4F048796EDBD
Authority key identifier: 65:26:67:73:FE:30:98:8C:76:97:5E:1C:A9:25:21:B7:BC:B5:89:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65266773FE30988C76975E1CA92521B7BCB5897A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/323830343a316163343a3a2f33322d3438203d3e203631383834.roa
Signing time:             Thu 04 Apr 2024 18:41:44 +0000
ROA not before:           Thu 04 Apr 2024 18:36:44 +0000
ROA not after:            Thu 03 Apr 2025 18:41:44 +0000
asID:                     61884
IP address blocks:        2804:1ac4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/65266773FE30988C76975E1CA92521B7BCB5897A.crl
                          rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/65266773FE30988C76975E1CA92521B7BCB5897A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65266773FE30988C76975E1CA92521B7BCB5897A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a3:15:f1:11:0d:9d:1d:41:4b:91:f9:20:9d:4f:04:87:96:ed:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65266773FE30988C76975E1CA92521B7BCB5897A
        Validity
            Not Before: Apr  4 18:36:44 2024 GMT
            Not After : Apr  3 18:41:44 2025 GMT
        Subject: CN=E51EABAE5785F102EABAF7C327507195BEB7DAED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6d:8a:47:4d:38:9b:eb:df:bc:82:b7:8a:21:
                    4d:c3:8b:89:43:3f:a8:de:56:29:3f:72:40:b9:0f:
                    0f:28:50:6f:68:ec:ec:2d:b4:10:54:d6:0e:4e:aa:
                    4a:03:e1:9f:91:2a:6a:a4:74:bc:a5:1b:cb:62:80:
                    06:e3:10:6f:d4:fc:ef:b6:68:bb:c3:00:c4:a1:67:
                    47:c2:bc:b1:58:0c:f4:3c:11:48:12:11:c0:c8:88:
                    72:25:b8:63:17:21:28:19:aa:0e:a7:15:b4:91:26:
                    c4:d6:b0:b5:7f:71:4e:46:53:c8:6a:8e:3d:b6:84:
                    3b:c7:41:8e:5c:75:d7:bb:8d:22:3a:32:f6:0c:3d:
                    86:96:86:6f:7d:47:70:7e:84:dd:52:dd:26:1c:04:
                    a1:ec:ad:1c:e0:ad:6e:05:80:41:ca:5c:e3:30:06:
                    0d:0d:06:52:33:ad:94:23:83:93:c0:98:eb:13:85:
                    78:84:89:bb:55:da:9c:c4:be:d1:97:85:86:dc:ed:
                    f1:1b:a2:30:36:45:0e:f8:2c:c8:88:d1:18:8a:bc:
                    9a:40:17:7a:30:7e:c1:60:9a:6e:1b:0a:b4:75:b5:
                    70:50:c1:0d:b6:7b:af:8a:c8:2f:c3:30:11:53:22:
                    b2:5c:7f:fb:36:49:db:19:d3:2f:f3:3d:a6:f0:07:
                    3b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1E:AB:AE:57:85:F1:02:EA:BA:F7:C3:27:50:71:95:BE:B7:DA:ED
            X509v3 Authority Key Identifier:
                keyid:65:26:67:73:FE:30:98:8C:76:97:5E:1C:A9:25:21:B7:BC:B5:89:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/65266773FE30988C76975E1CA92521B7BCB5897A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65266773FE30988C76975E1CA92521B7BCB5897A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/323830343a316163343a3a2f33322d3438203d3e203631383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ac4::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:ad:f4:46:d2:92:90:e4:ed:6f:26:73:e9:f3:59:8b:9e:d7:
         99:4a:f3:e5:e3:f1:76:11:fa:1f:f5:d6:ad:ef:6d:fd:36:91:
         58:c8:07:4c:8f:39:3d:40:02:b6:e0:69:e8:68:9e:3b:15:fa:
         cd:2f:2a:09:4f:34:05:68:18:f1:3e:e1:25:bf:99:3e:45:b3:
         1c:e5:10:22:c5:81:40:dd:5d:78:95:77:c8:b8:21:55:c8:99:
         14:b8:f2:9f:4d:dc:e5:b7:31:fc:cd:e1:2b:61:f6:d1:e2:0c:
         69:cb:9c:bf:b4:c5:a0:7d:bd:7b:99:69:ab:6a:be:25:15:f8:
         c1:d3:3f:a4:01:ca:b7:db:91:55:05:9e:5f:ac:f0:ce:f6:64:
         f5:f6:e9:8d:f8:43:f9:97:d5:10:f7:cd:6b:1e:be:ac:0d:22:
         73:0b:73:fc:f1:87:5d:cd:c1:b8:39:37:e5:8e:87:9d:fe:cc:
         aa:03:45:21:23:c2:0f:48:c2:4f:ff:d9:cf:e4:20:ad:5a:e2:
         28:f0:06:b4:5a:b8:5a:83:98:8a:6e:21:40:cc:d2:4b:80:d1:
         a3:20:f2:cf:d2:77:39:96:0c:3c:8b:70:ca:2c:39:15:5d:86:
         fc:5b:9d:31:8b:96:ab:a3:e6:d3:c5:56:62:be:59:3e:eb:4e:
         9b:d9:5d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:02 2024 by rpki-client on console-ams.rpki-client.org