Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/2/323830343a333837633a3a2f33322d313238203d3e20323636343831.roa
File:                     323830343a333837633a3a2f33322d313238203d3e20323636343831.roa (raw, json)
Hash identifier:          cEzn0x1PneiPYYtoqm7ch6+KFL2bYfzauUN+6i0mlxk=
Subject key identifier:   28:7F:DD:C9:20:8E:73:15:BE:1E:BC:9C:CF:2D:35:E5:23:54:34:79
Certificate issuer:       /CN=70F259FD82674905836BEB84C0D16834B21998C0
Certificate serial:       513C378EBB5B89930F951BFCAA311DD3C8ED45D0
Authority key identifier: 70:F2:59:FD:82:67:49:05:83:6B:EB:84:C0:D1:68:34:B2:19:98:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70F259FD82674905836BEB84C0D16834B21998C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/2/323830343a333837633a3a2f33322d313238203d3e20323636343831.roa
Signing time:             Thu 04 Apr 2024 09:00:16 +0000
ROA not before:           Thu 04 Apr 2024 08:55:16 +0000
ROA not after:            Thu 03 Apr 2025 09:00:16 +0000
asID:                     266481
IP address blocks:        2804:387c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/2/70F259FD82674905836BEB84C0D16834B21998C0.crl
                          rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/2/70F259FD82674905836BEB84C0D16834B21998C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70F259FD82674905836BEB84C0D16834B21998C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3c:37:8e:bb:5b:89:93:0f:95:1b:fc:aa:31:1d:d3:c8:ed:45:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70F259FD82674905836BEB84C0D16834B21998C0
        Validity
            Not Before: Apr  4 08:55:16 2024 GMT
            Not After : Apr  3 09:00:16 2025 GMT
        Subject: CN=287FDDC9208E7315BE1EBC9CCF2D35E523543479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:37:ed:99:44:47:b7:e8:23:b9:08:f0:5f:21:
                    66:c0:86:0e:38:34:4c:83:9c:53:4d:2b:22:c8:41:
                    e1:f8:12:eb:f9:6e:3e:f2:15:4a:c0:03:d4:9a:46:
                    85:24:5f:68:4b:79:47:52:6d:71:6b:4e:c1:94:83:
                    82:31:a2:26:f7:96:ec:6a:73:96:5f:c3:be:69:a8:
                    0f:d8:3b:d9:d5:62:c8:0c:4c:19:fc:fa:cb:ab:b4:
                    c5:f1:10:b2:20:8a:da:e7:86:30:d4:13:86:a5:a0:
                    ad:da:13:8d:42:b6:5b:f7:a9:dd:3f:de:01:e0:41:
                    62:a6:a3:4e:96:f7:7a:d1:8b:d6:62:4d:b1:11:e6:
                    4a:f2:0b:4b:76:b6:c4:db:3b:d0:3f:bb:07:bc:99:
                    c6:67:28:6b:94:1c:a4:cf:c5:9b:06:0a:e9:ad:46:
                    ba:d0:32:b5:37:1e:67:00:52:56:4e:fc:2c:19:1f:
                    0b:b0:ae:a8:04:22:7f:f3:a6:9c:3c:95:e2:1b:08:
                    c8:a4:8a:89:5d:b4:d9:1b:5d:52:e7:ca:49:fc:eb:
                    ad:22:65:1e:f7:e9:b9:23:21:52:21:dd:70:0e:ea:
                    87:b6:d2:41:5f:d3:12:45:80:f8:eb:cd:2f:9a:5b:
                    cb:ce:8e:7c:35:69:49:ed:b5:35:86:e6:bf:ad:fa:
                    6a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7F:DD:C9:20:8E:73:15:BE:1E:BC:9C:CF:2D:35:E5:23:54:34:79
            X509v3 Authority Key Identifier:
                keyid:70:F2:59:FD:82:67:49:05:83:6B:EB:84:C0:D1:68:34:B2:19:98:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/2/70F259FD82674905836BEB84C0D16834B21998C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70F259FD82674905836BEB84C0D16834B21998C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/2/323830343a333837633a3a2f33322d313238203d3e20323636343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:387c::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:67:20:2f:83:03:67:d3:d9:4b:05:80:92:4b:cc:92:c5:53:
         4d:60:6c:f7:89:d4:8f:d6:32:93:e7:e9:58:b6:80:eb:2d:8b:
         54:15:c1:ed:48:76:21:91:de:9e:c5:3d:79:2f:4a:bb:14:e5:
         50:31:cf:46:13:50:6d:6e:e2:31:ee:5a:3b:76:58:bb:49:53:
         7d:c5:cb:f3:12:4c:f5:42:dd:1b:77:f0:0c:c0:da:73:e8:32:
         17:ce:91:cb:7e:82:0e:91:e7:9f:e5:99:ea:43:f6:4e:80:06:
         14:8b:1e:c5:7b:06:b3:78:48:04:b4:1e:3a:d4:ac:26:eb:38:
         1d:e8:d7:25:98:a8:c6:af:de:4c:5b:76:61:f3:b2:e7:7a:ca:
         12:ff:72:f5:ee:98:af:00:d2:9e:3d:cc:d6:6b:ce:d9:8f:dc:
         a0:15:67:6c:34:24:c0:c7:90:bc:13:7d:9c:de:1e:19:26:27:
         0e:c7:65:42:ce:f7:ba:10:c0:4d:ba:3a:b9:1c:9c:f1:3b:83:
         be:3b:35:1e:c8:81:0e:57:1b:e6:2b:04:7f:37:e6:e4:59:17:
         df:b3:5b:fa:a1:bb:32:99:14:85:be:b7:f8:3b:78:9b:fe:ed:
         83:2f:fa:ca:2a:41:74:dd:a5:85:f0:ca:f6:bc:8d:cf:83:10:
         47:fe:d6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:52 2024 by rpki-client on console-fra.rpki-client.org