Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/1/323830343a336238633a3a2f33322d313238203d3e20323636313536.roa
File:                     323830343a336238633a3a2f33322d313238203d3e20323636313536.roa (raw, json)
Hash identifier:          jl1K4JHep2IBLXyf2RLFUVq0XBf1MeQ38/SAurk883s=
Subject key identifier:   1D:B1:D7:78:56:7B:49:40:81:D9:DC:1C:3B:9A:AE:F1:F9:23:F7:F6
Certificate issuer:       /CN=9BAF32552D40CE2A2F1A065983E6605B60B3A17B
Certificate serial:       077BF15FA9B01B716347274D00D47D1C13BD9E14
Authority key identifier: 9B:AF:32:55:2D:40:CE:2A:2F:1A:06:59:83:E6:60:5B:60:B3:A1:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAF32552D40CE2A2F1A065983E6605B60B3A17B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/1/323830343a336238633a3a2f33322d313238203d3e20323636313536.roa
Signing time:             Thu 04 Apr 2024 13:36:20 +0000
ROA not before:           Thu 04 Apr 2024 13:31:20 +0000
ROA not after:            Thu 03 Apr 2025 13:36:20 +0000
asID:                     266156
IP address blocks:        2804:3b8c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/1/9BAF32552D40CE2A2F1A065983E6605B60B3A17B.crl
                          rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/1/9BAF32552D40CE2A2F1A065983E6605B60B3A17B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAF32552D40CE2A2F1A065983E6605B60B3A17B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7b:f1:5f:a9:b0:1b:71:63:47:27:4d:00:d4:7d:1c:13:bd:9e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BAF32552D40CE2A2F1A065983E6605B60B3A17B
        Validity
            Not Before: Apr  4 13:31:20 2024 GMT
            Not After : Apr  3 13:36:20 2025 GMT
        Subject: CN=1DB1D778567B494081D9DC1C3B9AAEF1F923F7F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b7:9f:34:31:c3:fc:ee:e0:67:26:14:3b:07:
                    15:35:7c:94:de:88:8f:af:ea:2e:8c:a6:bd:8f:ce:
                    96:fc:8f:1b:05:98:13:8f:c2:85:b2:48:6c:81:51:
                    2e:43:eb:92:b1:bb:c6:2d:10:ae:76:c1:04:f3:58:
                    ec:67:a6:89:51:7a:73:b3:d0:f3:1b:f7:35:20:df:
                    74:eb:5a:a3:8f:d8:06:85:88:57:f3:b5:71:1c:3f:
                    ea:bc:8f:17:71:d7:19:6c:76:04:3c:04:34:53:f1:
                    8d:7a:e9:f8:f9:26:44:bc:ee:35:c0:00:c5:1f:65:
                    46:c8:32:11:f6:81:60:f1:76:5e:f1:47:e0:9d:61:
                    74:c0:a0:74:10:05:55:c5:a3:70:d6:a8:10:59:bb:
                    de:d3:16:90:60:2f:38:d3:88:b8:15:7b:a1:29:58:
                    0f:ec:50:5e:04:e1:0d:97:53:57:f9:19:a4:ab:37:
                    70:03:f3:8d:79:92:60:05:c0:fb:0d:e4:12:2c:ae:
                    35:f8:33:43:77:8a:69:5c:d3:c7:71:8b:bc:02:af:
                    89:7a:b1:d1:85:30:c0:55:a4:41:af:6f:58:df:30:
                    d5:c7:dc:7b:58:81:39:ee:ca:ce:f5:ba:c3:06:13:
                    72:bd:80:4b:ca:ff:cd:99:f4:18:74:1e:3a:99:f8:
                    79:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B1:D7:78:56:7B:49:40:81:D9:DC:1C:3B:9A:AE:F1:F9:23:F7:F6
            X509v3 Authority Key Identifier:
                keyid:9B:AF:32:55:2D:40:CE:2A:2F:1A:06:59:83:E6:60:5B:60:B3:A1:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/1/9BAF32552D40CE2A2F1A065983E6605B60B3A17B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAF32552D40CE2A2F1A065983E6605B60B3A17B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/1/323830343a336238633a3a2f33322d313238203d3e20323636313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:f7:25:ca:6c:af:a3:fb:65:a4:1c:16:93:01:4b:0c:28:b3:
         25:82:9f:e3:db:1d:c2:96:ad:64:8b:03:65:ba:f1:7e:dc:99:
         0e:df:3c:97:5b:77:0e:40:0e:b7:ae:63:8e:4b:1e:07:d0:fd:
         05:42:80:58:84:44:09:71:01:ac:50:73:da:66:29:53:8f:2b:
         2c:3d:ab:3e:95:09:49:57:ed:63:f2:d8:32:75:97:ae:3e:dd:
         12:2b:dc:f1:17:38:40:01:49:88:3a:70:c0:68:87:b3:6c:21:
         39:d1:c4:8b:95:61:6d:eb:f2:eb:7e:c7:56:da:4b:98:10:f0:
         56:68:de:54:28:fe:5e:80:b4:2d:bf:d4:f2:d9:b4:95:8b:7d:
         af:b7:e1:48:cd:7d:b6:0c:32:ac:52:5f:f7:dc:4a:ce:48:eb:
         72:30:79:d4:e0:99:f4:2a:ec:74:0f:b9:c5:62:d9:a8:db:d9:
         19:9a:65:74:b9:71:75:9c:67:cf:84:6a:53:75:a1:fd:ec:39:
         68:70:bb:62:91:d9:e9:37:4a:5a:d7:67:d2:87:87:06:b6:f5:
         d6:97:f8:ff:d3:06:af:57:14:db:75:ae:58:cd:d3:1a:6f:39:
         a0:a2:8b:22:aa:80:3f:c3:ae:41:f2:ed:cb:01:70:18:73:52:
         66:92:ce:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:56 2024 by rpki-client on console-fra.rpki-client.org