Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/1/323830343a323930343a3a2f33322d3438203d3e20323632353838.roa
File:                     323830343a323930343a3a2f33322d3438203d3e20323632353838.roa (raw, json)
Hash identifier:          dDOFtneKlb5DRDTtdQaf0SbYkpidhrTzLY1BWFEqm6E=
Subject key identifier:   B8:A3:91:47:47:00:50:25:3C:4A:C0:FF:37:4C:3A:29:01:BF:63:06
Certificate issuer:       /CN=70257C060065495B0C625EE3C4FC503EAEB25ED4
Certificate serial:       71F3AC2C056ED97178BF52162C6D33C019056A0D
Authority key identifier: 70:25:7C:06:00:65:49:5B:0C:62:5E:E3:C4:FC:50:3E:AE:B2:5E:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70257C060065495B0C625EE3C4FC503EAEB25ED4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/1/323830343a323930343a3a2f33322d3438203d3e20323632353838.roa
Signing time:             Thu 04 Apr 2024 14:09:28 +0000
ROA not before:           Thu 04 Apr 2024 14:04:28 +0000
ROA not after:            Thu 03 Apr 2025 14:09:28 +0000
asID:                     262588
IP address blocks:        2804:2904::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/1/70257C060065495B0C625EE3C4FC503EAEB25ED4.crl
                          rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/1/70257C060065495B0C625EE3C4FC503EAEB25ED4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70257C060065495B0C625EE3C4FC503EAEB25ED4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:18:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f3:ac:2c:05:6e:d9:71:78:bf:52:16:2c:6d:33:c0:19:05:6a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70257C060065495B0C625EE3C4FC503EAEB25ED4
        Validity
            Not Before: Apr  4 14:04:28 2024 GMT
            Not After : Apr  3 14:09:28 2025 GMT
        Subject: CN=B8A39147470050253C4AC0FF374C3A2901BF6306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a4:6d:3f:93:1a:3a:21:b0:c1:cb:60:57:3a:
                    78:6b:ea:05:5f:34:e0:ca:08:78:8c:a3:d7:cf:cf:
                    12:20:96:7d:76:e2:64:07:4e:bd:16:5f:d1:32:32:
                    e5:bb:30:e7:42:a9:3f:59:05:99:e8:62:a9:ed:de:
                    7b:53:30:8d:f9:6a:0a:fd:02:f3:01:ff:a7:e6:e3:
                    9d:6c:09:4b:8d:52:80:75:c6:e5:22:e6:6b:58:e1:
                    8f:4a:43:f6:ed:bb:25:42:c0:3a:20:25:d6:12:6f:
                    31:f6:84:08:7e:69:e5:1b:7e:ab:e3:12:41:61:0a:
                    eb:ee:c0:0e:22:db:e0:f1:61:19:64:48:2e:2c:93:
                    56:4c:c6:82:cb:94:37:89:44:f4:87:14:bc:6a:67:
                    ab:99:de:dc:5c:54:56:68:6c:f4:58:ce:6e:ac:8e:
                    d3:0c:09:b4:f5:b6:d3:4e:b9:dd:a3:bd:4b:44:47:
                    9d:e3:a8:87:b9:65:79:12:33:6e:45:02:03:8f:31:
                    6f:08:4d:4f:6a:db:25:7b:23:26:03:d8:5a:f3:7f:
                    55:98:a2:51:fa:00:56:70:5a:e4:62:18:1f:72:0d:
                    ad:9c:df:45:68:e3:e2:20:67:f3:f5:b2:54:6d:b6:
                    5c:b7:ed:2c:91:04:e0:09:76:75:29:1d:6e:a9:52:
                    ce:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A3:91:47:47:00:50:25:3C:4A:C0:FF:37:4C:3A:29:01:BF:63:06
            X509v3 Authority Key Identifier:
                keyid:70:25:7C:06:00:65:49:5B:0C:62:5E:E3:C4:FC:50:3E:AE:B2:5E:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/1/70257C060065495B0C625EE3C4FC503EAEB25ED4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70257C060065495B0C625EE3C4FC503EAEB25ED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/1/323830343a323930343a3a2f33322d3438203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2904::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:91:ab:ea:4c:78:c2:8f:a9:ae:f7:4d:95:d6:92:37:0c:02:
         d8:8d:55:0e:ca:1b:bc:c2:f2:a9:61:ad:78:8c:ed:c4:ef:ec:
         bc:67:d7:75:a4:3b:8a:11:59:b4:b9:1a:5e:bd:40:80:63:64:
         e3:55:58:66:4d:09:b9:50:10:cd:bb:ff:6a:32:d3:f6:79:d2:
         40:48:db:ea:6f:8c:49:03:c7:79:f5:05:85:a8:88:c5:7c:30:
         9a:d0:45:96:3d:73:76:ca:5b:39:c7:aa:84:3a:d0:f7:5c:2f:
         9f:4f:45:93:92:f1:6f:72:1d:5d:16:ed:9d:38:25:74:7f:a6:
         0f:22:56:26:b5:58:01:b4:0c:33:15:11:b7:5f:f3:ff:5a:54:
         e6:59:21:b0:16:6c:3b:88:6a:b8:c3:8c:58:e4:1a:c9:cf:66:
         21:69:71:2d:bc:60:95:cf:c2:b0:f7:3b:10:cc:a5:c7:1a:13:
         2b:71:8c:f4:9b:2d:e7:64:54:90:95:a1:d5:d4:07:49:df:6f:
         3f:a5:c0:00:63:6b:f8:0b:33:19:29:b0:1d:49:9d:cb:98:3f:
         7e:1a:9e:3d:75:9a:88:5d:06:96:ba:e1:37:72:0e:6d:84:58:
         16:71:4f:73:4c:01:16:33:24:c6:be:1f:8b:45:3b:ad:0f:78:
         70:d6:9c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:06 2024 by rpki-client on console-fra.rpki-client.org