Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/323830343a373264303a3a2f33322d3332203d3e20323730383737.roa
File:                     323830343a373264303a3a2f33322d3332203d3e20323730383737.roa (raw, json)
Hash identifier:          MniqLLA7/FBgnb4OMfTyiamnU1+eQZmXN+Y4GwRx770=
Subject key identifier:   C9:FB:12:9D:30:7C:19:1C:49:BB:6F:0D:4A:CF:5D:57:2A:32:15:F4
Certificate issuer:       /CN=3E268A146165B7580B59E044B59D275B5F824225
Certificate serial:       626DEB4862F82BC9508ED1F0F87C1FBA526308D7
Authority key identifier: 3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/323830343a373264303a3a2f33322d3332203d3e20323730383737.roa
Signing time:             Thu 04 Apr 2024 01:16:14 +0000
ROA not before:           Thu 04 Apr 2024 01:11:14 +0000
ROA not after:            Thu 03 Apr 2025 01:16:14 +0000
asID:                     270877
IP address blocks:        2804:72d0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl
                          rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6d:eb:48:62:f8:2b:c9:50:8e:d1:f0:f8:7c:1f:ba:52:63:08:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E268A146165B7580B59E044B59D275B5F824225
        Validity
            Not Before: Apr  4 01:11:14 2024 GMT
            Not After : Apr  3 01:16:14 2025 GMT
        Subject: CN=C9FB129D307C191C49BB6F0D4ACF5D572A3215F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e2:37:09:e9:49:4d:df:a2:bd:37:cc:06:85:
                    1d:7a:a9:95:15:cc:4e:cc:b5:5b:a1:c1:c6:51:da:
                    79:c1:7f:2c:09:3f:9d:03:4c:3d:a7:92:38:a6:12:
                    2d:2f:96:0d:d4:fb:48:25:e4:2a:17:69:d8:2f:6b:
                    9b:aa:1a:55:0e:35:9b:2d:69:46:ab:e0:28:13:27:
                    a6:53:68:e2:e1:30:fe:eb:64:de:fd:3c:bf:a8:65:
                    8b:e2:cc:81:f2:d1:02:b4:b0:bd:1e:2e:3f:50:3e:
                    da:8b:ad:c3:6c:06:80:7e:12:0e:81:2f:d6:2b:46:
                    e7:01:b8:77:35:71:ec:8a:b6:65:c2:d5:2e:b0:6c:
                    0f:5b:12:ea:2a:d7:fe:4c:0d:09:84:90:b6:a1:1c:
                    c8:23:f5:4f:af:79:22:d1:b1:d9:24:fa:97:a4:2f:
                    0d:22:04:a8:18:6f:6d:c7:51:7a:80:6f:a4:db:42:
                    3c:cb:83:01:31:21:c2:68:6d:31:43:d5:f9:e9:40:
                    39:56:06:10:41:8e:83:cd:e7:22:67:0f:19:6a:85:
                    ed:7b:17:49:2d:d6:dd:cb:38:96:71:17:57:65:c4:
                    c1:38:35:95:24:bc:49:78:5a:58:68:b1:b9:13:15:
                    f9:1d:6b:c8:9f:c6:e2:e4:24:96:f7:67:72:1c:44:
                    ec:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FB:12:9D:30:7C:19:1C:49:BB:6F:0D:4A:CF:5D:57:2A:32:15:F4
            X509v3 Authority Key Identifier:
                keyid:3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/323830343a373264303a3a2f33322d3332203d3e20323730383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:79:99:fa:6b:51:ff:f4:48:10:5b:26:69:eb:25:3c:49:a5:
         b9:fe:7e:67:6b:1e:7f:0a:ad:49:1b:25:4b:29:22:84:31:9c:
         0d:d5:c8:0e:6f:d2:a6:60:14:96:91:d9:cc:3e:02:3d:a1:8b:
         45:5e:15:3c:f9:d7:7c:bc:79:d7:14:3c:89:8d:a9:f6:31:34:
         15:c9:ff:13:fd:a1:bc:3c:1f:ca:5c:ec:80:88:ef:a8:b9:72:
         0d:9e:d0:8f:db:e6:e5:84:d1:07:11:ab:0c:e0:aa:71:45:f9:
         cd:e9:ba:ff:1f:d7:35:35:4a:d9:49:c4:be:9c:ea:09:57:79:
         0f:4f:d9:1f:5d:b7:38:2e:70:43:6b:2a:2c:14:90:9a:92:15:
         7a:c2:09:68:a1:1a:87:68:06:2c:94:3a:4b:4a:64:64:c3:95:
         14:2e:e9:6a:32:65:3d:f4:1f:63:b6:0a:01:c6:f7:e2:3f:74:
         af:17:01:b6:9e:15:2c:db:5c:41:42:23:af:ab:1b:54:20:99:
         41:c8:51:af:53:be:dc:2f:74:92:09:83:a6:ec:cc:c8:99:0c:
         c7:09:3e:cd:b6:b9:9e:51:53:56:40:00:e3:b6:0b:aa:e1:bd:
         f7:32:af:05:66:2b:39:7e:0e:b9:1c:1f:0d:c1:8f:00:3c:fa:
         de:65:8b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:09 2024 by rpki-client on console-fra.rpki-client.org