Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/323830343a363838633a3a2f33322d3332203d3e20323639373030.roa
File:                     323830343a363838633a3a2f33322d3332203d3e20323639373030.roa (raw, json)
Hash identifier:          yqnBtlpQDCAxo9cev6oT/cvfRUWct2mwNhlJ3HW41Jw=
Subject key identifier:   77:4E:4B:81:76:43:86:65:37:66:42:06:6D:4E:82:08:F4:D0:E4:14
Certificate issuer:       /CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
Certificate serial:       7B3EF1A26DCCC161126DE7DFC2029BDBC6D8A248
Authority key identifier: 83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/323830343a363838633a3a2f33322d3332203d3e20323639373030.roa
Signing time:             Wed 03 Apr 2024 18:31:50 +0000
ROA not before:           Wed 03 Apr 2024 18:26:50 +0000
ROA not after:            Wed 02 Apr 2025 18:31:50 +0000
asID:                     269700
IP address blocks:        2804:688c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl
                          rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:3e:f1:a2:6d:cc:c1:61:12:6d:e7:df:c2:02:9b:db:c6:d8:a2:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
        Validity
            Not Before: Apr  3 18:26:50 2024 GMT
            Not After : Apr  2 18:31:50 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:13:ff:39:de:ca:52:c4:0b:bb:09:c0:e5:df:
                    32:9b:de:10:1e:11:e3:57:4e:60:2a:b7:67:c4:3f:
                    16:1c:1b:28:9d:d6:08:a9:4c:42:7c:bd:01:09:75:
                    70:10:92:c9:20:14:cb:0b:91:11:7b:a2:d3:96:31:
                    68:f8:2e:68:12:f1:f1:9d:85:56:70:0f:a2:87:58:
                    91:ed:9c:63:d4:5b:a8:be:93:5d:f1:b9:81:54:12:
                    e2:16:37:3e:11:63:cb:1a:3a:35:8d:1e:8d:fa:91:
                    83:de:ac:b1:ec:a2:1e:56:8a:d6:d6:2a:4c:00:62:
                    47:8b:73:16:e2:92:3e:32:9e:52:27:d2:78:1b:bc:
                    91:a3:4b:69:5e:83:4f:93:ab:05:be:b6:d8:cb:8e:
                    59:20:77:cb:10:bd:b7:48:37:d5:c6:03:7b:bd:d4:
                    ef:4c:40:a1:b3:e8:4d:46:51:de:55:79:be:36:3e:
                    68:05:79:6b:33:7d:29:c7:b9:aa:e3:ba:4f:1f:f1:
                    34:76:d5:35:54:ca:ec:25:f6:87:c9:a1:17:36:6d:
                    ef:ae:7d:55:f6:0c:b6:dd:16:03:a9:b5:55:6b:a0:
                    c1:fc:4c:af:ea:09:26:e2:fd:a6:d3:1f:f8:17:89:
                    87:60:6a:04:7a:99:d5:89:9e:2f:19:22:eb:1d:e6:
                    42:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4E:4B:81:76:43:86:65:37:66:42:06:6D:4E:82:08:F4:D0:E4:14
            X509v3 Authority Key Identifier:
                keyid:83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/323830343a363838633a3a2f33322d3332203d3e20323639373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:688c::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:45:b4:24:00:fe:67:cc:25:f8:35:4b:ba:21:32:dd:61:d2:
         fd:ec:f7:1a:91:15:fe:d4:25:b5:aa:a0:9a:03:b0:a1:54:4d:
         40:2c:09:a4:40:3f:06:ad:4d:71:39:07:e4:ef:ea:d1:c9:0d:
         b1:84:c8:ab:52:8d:55:cc:3e:b9:d6:5e:0a:08:c0:1c:81:c4:
         06:e6:71:4e:28:0d:b6:a9:ad:95:75:9b:7f:ca:6f:00:b7:87:
         d3:45:62:c6:e7:4c:a2:9f:5e:96:18:b3:0f:6c:55:df:bf:93:
         3a:96:0a:96:eb:2c:a8:a7:7f:11:16:de:c1:23:8a:17:4c:4b:
         b0:d8:d9:14:d2:ad:96:8b:fb:ea:01:0e:83:3b:6f:b4:37:96:
         bc:41:f9:44:ee:4d:d9:ba:a1:f1:33:36:9b:dd:35:d3:c9:39:
         c2:28:2f:7c:40:68:82:e3:cd:02:c1:27:d8:8a:d4:38:e4:18:
         8d:e0:fe:b8:43:99:1c:b1:4f:41:e7:c4:5e:6b:d6:bf:02:2d:
         b0:e7:17:63:6c:cd:57:f6:8f:f7:b1:d7:71:0b:35:6f:3e:66:
         78:ad:62:26:24:bc:b1:93:62:45:c6:18:8f:10:f1:5a:df:7a:
         6c:be:83:47:4d:25:99:1e:3b:d2:2a:95:02:12:27:04:37:5a:
         43:36:f4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:41 2024 by rpki-client on console-fra.rpki-client.org