Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/1/323830343a313263383a3a2f33322d313238203d3e20323633343938.roa
File:                     323830343a313263383a3a2f33322d313238203d3e20323633343938.roa (raw, json)
Hash identifier:          77fgMWkUESra4IGfpKTTXhVLjmKe8qTAuk0Hy8XZi08=
Subject key identifier:   FC:76:B1:32:12:96:88:CE:6F:B5:15:D6:EF:8A:AF:35:F4:39:6B:F9
Certificate issuer:       /CN=D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A
Certificate serial:       2C54411E8D8914D2F9ADE6BD7124A85AFB334331
Authority key identifier: D6:92:6C:4B:4A:CD:BF:FD:6E:E3:F1:0B:70:25:53:EC:A2:7D:77:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/1/323830343a313263383a3a2f33322d313238203d3e20323633343938.roa
Signing time:             Wed 03 Apr 2024 20:20:54 +0000
ROA not before:           Wed 03 Apr 2024 20:15:54 +0000
ROA not after:            Wed 02 Apr 2025 20:20:54 +0000
asID:                     263498
IP address blocks:        2804:12c8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/1/D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A.crl
                          rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/1/D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:22:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:54:41:1e:8d:89:14:d2:f9:ad:e6:bd:71:24:a8:5a:fb:33:43:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A
        Validity
            Not Before: Apr  3 20:15:54 2024 GMT
            Not After : Apr  2 20:20:54 2025 GMT
        Subject: CN=FC76B132129688CE6FB515D6EF8AAF35F4396BF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fb:f3:76:49:f7:9f:84:91:44:bc:81:d9:ad:
                    91:3f:c8:b1:fc:9c:e4:23:63:ca:10:93:77:9c:af:
                    6a:99:12:7a:b1:3e:61:94:d5:76:68:1c:9a:af:80:
                    63:d9:67:2b:b8:04:89:97:68:ed:18:0d:98:75:60:
                    42:26:8a:6b:37:d6:08:c9:e6:fb:47:98:55:30:fc:
                    5a:c6:8a:4a:6f:dc:be:52:1d:2c:e1:95:73:fe:02:
                    e0:ce:4a:f4:69:19:31:c5:ca:b9:49:54:af:f7:6f:
                    ce:4d:0e:a2:04:04:c6:90:83:f4:bc:da:0d:71:68:
                    00:24:76:bf:69:0b:09:7a:15:71:37:b5:0d:28:2f:
                    a4:54:ab:8b:95:c2:85:c9:08:b3:91:17:ff:36:95:
                    51:d2:4e:a5:ec:b6:7d:72:d0:ad:a8:8d:6c:94:61:
                    0f:17:a4:6e:a1:a1:5f:c7:2d:e9:cc:5a:6a:03:57:
                    36:9b:8d:a8:66:25:be:f6:36:24:d0:cd:bf:e9:4c:
                    cd:ae:37:c6:25:df:5d:53:89:a8:0f:d8:49:db:24:
                    b3:85:7c:49:c2:71:73:ec:3a:08:6d:bd:b3:72:ec:
                    eb:2f:e0:8e:63:b8:0b:df:a6:fd:12:87:00:3f:80:
                    b2:6c:bd:55:be:61:16:5e:85:8f:ff:fe:2f:73:6c:
                    4f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:76:B1:32:12:96:88:CE:6F:B5:15:D6:EF:8A:AF:35:F4:39:6B:F9
            X509v3 Authority Key Identifier:
                keyid:D6:92:6C:4B:4A:CD:BF:FD:6E:E3:F1:0B:70:25:53:EC:A2:7D:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/1/D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/1/323830343a313263383a3a2f33322d313238203d3e20323633343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:e7:cf:9c:1e:92:49:15:2c:75:57:a8:03:1a:6c:62:85:e7:
         be:69:2d:57:a8:34:df:6e:53:0b:38:38:a0:1e:0b:79:8d:82:
         13:4a:ea:f7:53:7e:a2:08:a4:15:14:c3:05:cf:74:68:c8:49:
         0f:76:b4:70:e8:7b:f9:01:1e:cd:95:d4:c0:a8:f3:82:4e:b3:
         b8:96:10:6e:ef:c4:77:1b:b7:96:94:6f:9c:58:3d:43:38:83:
         2a:4d:5b:3a:ee:0a:73:9a:b8:31:d2:e5:18:32:d8:56:55:b1:
         c3:de:4c:bc:51:a0:0b:99:82:1b:70:51:cf:72:d8:31:a1:5a:
         fd:38:10:18:e3:5e:97:15:eb:1b:97:49:c4:fc:89:f9:f2:a5:
         a1:7e:81:9c:92:81:16:41:09:f2:5a:59:28:c2:1a:3d:2c:dd:
         7d:d6:8c:7d:93:9c:20:2f:9f:a6:7c:83:8e:c0:c1:4e:4a:61:
         1b:b8:8a:3b:2f:ab:ef:3e:d0:59:12:f4:43:80:5f:5d:a1:1d:
         b8:fe:40:eb:6b:a4:12:b1:89:eb:3d:c1:ad:50:85:f3:52:7d:
         18:94:3b:d5:8e:50:49:78:6b:6c:11:95:cc:33:57:0a:0d:ce:
         ee:51:aa:58:5d:e8:aa:a8:aa:7e:4d:2a:54:54:5f:d7:13:0c:
         94:db:c3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:11:00 2024 by rpki-client on console-fra.rpki-client.org