Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/1/323830343a323966303a3a2f33322d3438203d3e20323634303436.roa
File:                     323830343a323966303a3a2f33322d3438203d3e20323634303436.roa (raw, json)
Hash identifier:          F7xNioVPA1qpdGSWx8ausyqrPIPACGJ4waKu+yYOY8A=
Subject key identifier:   54:6A:7C:28:DA:87:8E:8D:F0:7A:75:A1:5C:21:4B:5F:40:98:EC:3A
Certificate issuer:       /CN=862365C41E0481AF7ACA562E7517210802E490EB
Certificate serial:       72E50455820B9FB1D8897D6669F41DCFA236212D
Authority key identifier: 86:23:65:C4:1E:04:81:AF:7A:CA:56:2E:75:17:21:08:02:E4:90:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/862365C41E0481AF7ACA562E7517210802E490EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/1/323830343a323966303a3a2f33322d3438203d3e20323634303436.roa
Signing time:             Thu 04 Apr 2024 11:07:38 +0000
ROA not before:           Thu 04 Apr 2024 11:02:38 +0000
ROA not after:            Thu 03 Apr 2025 11:07:38 +0000
asID:                     264046
IP address blocks:        2804:29f0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/1/862365C41E0481AF7ACA562E7517210802E490EB.crl
                          rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/1/862365C41E0481AF7ACA562E7517210802E490EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/862365C41E0481AF7ACA562E7517210802E490EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:15:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e5:04:55:82:0b:9f:b1:d8:89:7d:66:69:f4:1d:cf:a2:36:21:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862365C41E0481AF7ACA562E7517210802E490EB
        Validity
            Not Before: Apr  4 11:02:38 2024 GMT
            Not After : Apr  3 11:07:38 2025 GMT
        Subject: CN=546A7C28DA878E8DF07A75A15C214B5F4098EC3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a0:cc:8c:e4:bd:7f:d4:ce:c6:33:e3:c3:4f:
                    dd:03:e7:45:77:f6:b4:3f:2f:b0:7f:c5:f0:4f:82:
                    2b:91:1a:2a:fe:46:16:cc:a2:86:66:64:1e:a4:93:
                    73:5e:be:15:ff:2e:aa:bf:76:28:df:3a:52:b3:e5:
                    31:50:40:a1:07:b1:09:f9:90:d0:e1:8a:ec:04:7a:
                    26:78:aa:dc:9b:7c:dd:61:9f:1c:06:b5:13:ea:1c:
                    eb:56:c0:c9:4e:56:f6:7b:d3:ab:bf:2a:24:78:de:
                    fd:50:1d:30:02:c9:df:d1:99:00:fb:63:03:e6:56:
                    31:4f:66:fb:74:27:4f:38:48:c9:da:83:1f:94:bb:
                    f8:11:91:ca:d2:52:da:0f:14:3a:34:bf:fb:d9:56:
                    7b:d0:40:82:c8:c0:9b:4b:18:77:4b:b2:55:75:78:
                    2e:da:9a:fc:08:f8:67:cc:5e:0f:9c:b7:37:c7:e2:
                    f0:05:d0:56:ea:f9:56:27:02:84:5a:0e:a6:e4:36:
                    b0:30:c5:f0:d0:89:f3:c0:4d:ae:9b:d3:cc:83:22:
                    ec:7d:79:20:7b:87:e2:0e:04:44:6c:9c:18:12:29:
                    85:59:db:15:2b:ce:b8:9b:b4:27:be:8e:16:94:99:
                    a7:58:db:bf:eb:e5:11:d9:3f:a4:04:ac:11:a3:d4:
                    81:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6A:7C:28:DA:87:8E:8D:F0:7A:75:A1:5C:21:4B:5F:40:98:EC:3A
            X509v3 Authority Key Identifier:
                keyid:86:23:65:C4:1E:04:81:AF:7A:CA:56:2E:75:17:21:08:02:E4:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/1/862365C41E0481AF7ACA562E7517210802E490EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/862365C41E0481AF7ACA562E7517210802E490EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/1/323830343a323966303a3a2f33322d3438203d3e20323634303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:29f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:f0:9e:fa:1d:ec:ae:e1:f3:62:9a:78:e9:bb:51:ce:31:2e:
         5d:f9:73:75:92:c5:b8:53:6e:e0:b0:c1:dd:95:94:0f:ab:39:
         0e:88:13:87:87:86:dc:cf:25:1e:72:c0:c0:42:2a:e2:16:14:
         28:e4:4a:d2:98:bd:c8:20:e9:24:1a:51:18:a4:02:fd:7e:a2:
         fb:18:13:ee:20:47:fd:04:1b:d0:fb:44:57:02:c5:5f:6c:63:
         c6:cb:4d:ac:19:eb:d6:28:86:7f:a7:2e:b6:f3:0d:39:59:f7:
         2c:01:35:c6:3b:08:94:9e:f3:84:ca:26:89:55:fc:9b:92:02:
         d4:6a:54:24:ff:68:da:9d:5b:42:10:6a:04:2f:fa:ad:25:e0:
         cc:54:6c:91:99:6b:66:e1:1e:9e:0c:69:7b:da:2f:37:3c:d5:
         96:d4:5d:98:a5:29:0c:2f:1a:67:09:41:1f:28:ef:55:19:12:
         cf:cf:ee:97:81:fd:f1:67:47:2b:78:ff:da:a5:42:9a:55:3e:
         6c:91:b0:c3:c9:dd:24:42:79:3b:18:81:2c:b9:b6:b9:46:7a:
         bc:ed:69:3e:a7:8f:de:cd:21:c0:cf:4f:c3:1d:f0:31:fd:02:
         0b:19:63:76:f3:6d:08:1a:9a:40:f8:70:1f:6b:76:64:ad:81:
         de:c5:43:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:55 2024 by rpki-client on console-fra.rpki-client.org