Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/323830343a323762383a3a2f33322d3335203d3e20323633393138.roa
File:                     323830343a323762383a3a2f33322d3335203d3e20323633393138.roa (raw, json)
Hash identifier:          e96kR+6AcT9BIZrpYbChamVuIYb4Rulz4y3uBHMetKQ=
Subject key identifier:   B2:36:6F:08:B5:71:5C:8D:44:74:DB:73:FB:DA:49:03:A6:F5:1A:EE
Certificate issuer:       /CN=6837437B682D69085C3574DE4EE122A490D3C359
Certificate serial:       28D44683D7AF418AC088F23D10A67184A2B9BEA6
Authority key identifier: 68:37:43:7B:68:2D:69:08:5C:35:74:DE:4E:E1:22:A4:90:D3:C3:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6837437B682D69085C3574DE4EE122A490D3C359.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/323830343a323762383a3a2f33322d3335203d3e20323633393138.roa
Signing time:             Wed 03 Apr 2024 18:32:12 +0000
ROA not before:           Wed 03 Apr 2024 18:27:12 +0000
ROA not after:            Wed 02 Apr 2025 18:32:12 +0000
asID:                     263918
IP address blocks:        2804:27b8::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.crl
                          rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6837437B682D69085C3574DE4EE122A490D3C359.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 15:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d4:46:83:d7:af:41:8a:c0:88:f2:3d:10:a6:71:84:a2:b9:be:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6837437B682D69085C3574DE4EE122A490D3C359
        Validity
            Not Before: Apr  3 18:27:12 2024 GMT
            Not After : Apr  2 18:32:12 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e1:a0:d8:f1:ab:d5:f1:75:59:04:71:7b:4d:
                    92:47:fe:6c:32:cf:8a:7b:e6:2b:78:9f:9a:23:38:
                    17:0a:46:bf:c9:88:63:7f:c4:88:ea:27:c8:be:22:
                    1d:b2:68:62:24:3a:e2:6d:a8:72:00:55:1f:7c:6c:
                    b9:5d:b2:06:f3:0d:82:70:a9:e3:ca:b3:03:18:84:
                    d0:26:16:ee:6e:e5:e2:eb:ca:74:2b:c3:3a:79:a4:
                    4a:bb:e2:58:ae:21:e9:2b:f5:b8:15:0b:47:5c:56:
                    25:ea:4f:7c:18:7d:12:c0:c2:08:d0:97:4c:1d:e3:
                    66:18:2e:83:04:2f:74:35:43:ab:80:01:2f:24:10:
                    a3:c0:c8:37:f4:1e:27:79:d7:84:8b:f8:1d:53:c4:
                    37:c8:6a:6a:1a:a5:b2:22:62:cd:ae:e5:f6:b2:e8:
                    c8:35:f8:92:94:1c:81:d9:2e:f8:c0:4e:2c:55:3d:
                    73:ab:f8:b9:e8:0a:86:93:76:54:83:cb:57:21:b6:
                    e3:c0:48:64:a7:8e:4e:ef:14:fd:a3:b9:87:59:44:
                    e3:a9:38:f8:cf:bc:4a:42:b7:df:7a:13:f1:97:ef:
                    a8:de:b6:16:e1:5e:59:09:c1:9e:67:c7:c6:51:ef:
                    00:c6:db:cf:bf:3f:1b:cc:8a:c8:a9:8d:97:81:5a:
                    bf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:36:6F:08:B5:71:5C:8D:44:74:DB:73:FB:DA:49:03:A6:F5:1A:EE
            X509v3 Authority Key Identifier:
                keyid:68:37:43:7B:68:2D:69:08:5C:35:74:DE:4E:E1:22:A4:90:D3:C3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6837437B682D69085C3574DE4EE122A490D3C359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/323830343a323762383a3a2f33322d3335203d3e20323633393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:eb:54:4b:8f:f2:49:a6:65:b0:08:32:ce:d1:63:e6:b4:cc:
         0f:20:ae:10:da:23:1d:bd:3d:f4:a5:43:a4:60:60:12:f6:5b:
         15:5a:9b:be:ea:c8:33:61:24:a1:fb:6b:86:6e:3b:97:ce:98:
         8a:67:7b:e6:6d:a4:2a:fe:93:48:26:0e:72:f9:f8:3d:44:74:
         c8:4f:3d:2c:1d:2f:b3:99:55:06:a5:ff:60:7e:37:9a:46:c6:
         02:e3:9b:c7:ab:c9:74:ab:bf:c7:12:d2:42:d9:4f:d4:a1:ea:
         4c:33:1b:d4:c9:a1:b8:ae:7c:d3:69:bb:f1:5c:3d:b3:8b:b1:
         4c:8a:12:a8:d8:71:e3:e0:93:92:59:3e:81:c3:43:fb:e4:86:
         8c:aa:12:e9:20:12:47:52:38:00:b5:43:23:c2:82:2d:b1:e9:
         ac:35:f3:9f:9e:d4:9e:b9:d2:89:e2:d3:18:5a:a3:ea:ea:8f:
         45:9c:8e:6a:55:31:65:20:77:ec:5b:d1:4a:46:ed:b8:7e:c9:
         6d:c9:69:07:72:c4:dd:d5:17:0c:30:35:66:70:cb:ad:3f:d4:
         16:08:07:8c:48:15:1c:8b:de:95:c6:b2:f9:32:88:3c:3a:4c:
         b4:45:a6:51:41:6d:64:3f:37:81:b9:1a:29:01:fe:51:7d:8e:
         8f:19:c4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 16:32:27 2024 by rpki-client on console-ams.rpki-client.org