Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/323830343a353039383a3a2f33322d313238203d3e20323638333938.roa
File:                     323830343a353039383a3a2f33322d313238203d3e20323638333938.roa (raw, json)
Hash identifier:          3BWtv2H8347wa5+IUnKmZFDnHYngWU7dP4MDcmtGR6k=
Subject key identifier:   91:A9:5C:17:38:D9:D5:84:1D:A6:79:B8:CE:A6:5F:92:2E:84:AE:49
Certificate issuer:       /CN=36721984BBC32E9CAB34A7B21C92F1CD361B813B
Certificate serial:       6226F2ACE76A0C6DDB3A9FEEB4F7CCAD7E47812D
Authority key identifier: 36:72:19:84:BB:C3:2E:9C:AB:34:A7:B2:1C:92:F1:CD:36:1B:81:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36721984BBC32E9CAB34A7B21C92F1CD361B813B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/323830343a353039383a3a2f33322d313238203d3e20323638333938.roa
Signing time:             Wed 10 Apr 2024 16:33:06 +0000
ROA not before:           Wed 10 Apr 2024 16:28:06 +0000
ROA not after:            Wed 09 Apr 2025 16:33:06 +0000
asID:                     268398
IP address blocks:        2804:5098::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/36721984BBC32E9CAB34A7B21C92F1CD361B813B.crl
                          rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/36721984BBC32E9CAB34A7B21C92F1CD361B813B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36721984BBC32E9CAB34A7B21C92F1CD361B813B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:26:f2:ac:e7:6a:0c:6d:db:3a:9f:ee:b4:f7:cc:ad:7e:47:81:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36721984BBC32E9CAB34A7B21C92F1CD361B813B
        Validity
            Not Before: Apr 10 16:28:06 2024 GMT
            Not After : Apr  9 16:33:06 2025 GMT
        Subject: CN=91A95C1738D9D5841DA679B8CEA65F922E84AE49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c2:18:fb:28:34:19:48:b5:6d:4c:5b:83:82:
                    b2:14:de:72:df:e0:a1:45:78:e0:16:77:ff:09:a3:
                    1f:c3:02:1f:f9:a4:19:34:4c:f3:a9:f2:d1:e2:d7:
                    03:01:70:95:a5:22:7a:5e:72:c4:ea:e9:bf:70:4e:
                    a9:30:5a:ee:65:87:f9:cb:27:50:5a:ff:79:77:03:
                    60:bc:90:39:9d:4d:dd:fc:b4:25:3b:5e:e4:cf:ee:
                    ab:3d:3f:b2:f3:30:07:13:f0:4e:87:ad:17:34:e3:
                    09:f7:d7:d0:58:30:fa:93:50:9b:a8:59:d2:0e:f8:
                    6a:b4:ac:0b:f0:05:64:c3:a2:a1:85:0c:d3:28:15:
                    e8:fc:32:74:9f:5b:2c:71:78:90:80:5f:d1:85:76:
                    85:f5:e0:45:b6:fc:86:12:45:3c:00:39:7b:c1:7b:
                    db:b5:f4:a6:66:96:b4:3b:72:ae:36:05:28:e6:e4:
                    1c:c8:89:68:24:f1:ae:94:62:fa:e3:dd:ab:b9:5a:
                    c1:cd:16:fe:26:b5:2d:2c:a2:ba:21:bb:89:ed:9f:
                    5b:96:c6:56:b7:88:ca:f3:c4:c3:3c:88:a5:f6:f3:
                    9e:7b:2e:e9:38:04:4d:23:9d:d3:7b:70:9a:12:7a:
                    fc:7d:87:98:53:e7:8d:c9:7e:f2:ab:18:3a:67:0e:
                    30:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A9:5C:17:38:D9:D5:84:1D:A6:79:B8:CE:A6:5F:92:2E:84:AE:49
            X509v3 Authority Key Identifier:
                keyid:36:72:19:84:BB:C3:2E:9C:AB:34:A7:B2:1C:92:F1:CD:36:1B:81:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/36721984BBC32E9CAB34A7B21C92F1CD361B813B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36721984BBC32E9CAB34A7B21C92F1CD361B813B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/323830343a353039383a3a2f33322d313238203d3e20323638333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5098::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:51:5f:df:8f:b2:be:59:c3:61:9e:85:68:01:26:23:c7:f5:
         0a:7b:65:09:ab:be:0d:6a:99:fb:26:a9:eb:67:19:a4:16:70:
         52:96:03:90:4b:77:0b:16:67:91:06:f7:10:31:3a:ef:18:7a:
         6b:0e:73:9d:52:39:9f:97:73:f8:69:c7:d6:c8:6f:0c:14:bd:
         55:83:7b:32:19:69:db:05:3f:7d:e8:49:9a:96:b1:dc:55:b0:
         e2:3a:5d:6f:2b:ac:52:fa:88:fd:4f:49:9e:c0:db:b2:1d:63:
         c0:e5:c2:86:de:18:c8:f8:c5:75:10:33:2a:df:9c:d2:f5:c5:
         4b:5c:15:67:5e:e7:ba:c0:58:2a:7b:f1:8a:25:4e:3f:53:22:
         13:53:a5:16:c5:f9:db:50:63:46:26:1c:2e:50:e8:a1:c0:d4:
         3e:58:b0:63:ca:71:74:45:e3:9b:5f:3e:21:df:03:37:1c:eb:
         01:cd:19:22:17:dd:11:db:94:fd:fc:e6:4b:33:04:da:19:2d:
         5d:3d:c1:41:d0:da:36:11:63:15:07:d6:e3:81:97:4d:87:94:
         ef:10:a1:d9:83:72:0f:ca:4e:68:5e:11:cc:89:02:94:73:d9:
         86:32:44:a2:8c:66:4a:0a:5c:c2:eb:ae:6f:b1:bf:08:b6:d3:
         ac:41:cc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:58 2024 by rpki-client on console-fra.rpki-client.org