Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/323830343a336230303a3a2f33322d313238203d3e203532393733.roa
File:                     323830343a336230303a3a2f33322d313238203d3e203532393733.roa (raw, json)
Hash identifier:          hITTFz3G17ADsu5OJVwvXliaVHtQqb++7Rz27gQCkco=
Subject key identifier:   52:82:1A:D8:66:20:AC:F9:E3:D6:A6:16:6B:FB:FB:E3:79:60:A3:F2
Certificate issuer:       /CN=960B59E054F187A995D7F6038A0BA2336525F190
Certificate serial:       10C357CA85652731CFD8076B55AFB75B866CD938
Authority key identifier: 96:0B:59:E0:54:F1:87:A9:95:D7:F6:03:8A:0B:A2:33:65:25:F1:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960B59E054F187A995D7F6038A0BA2336525F190.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/323830343a336230303a3a2f33322d313238203d3e203532393733.roa
Signing time:             Tue 03 Dec 2024 21:39:52 +0000
ROA not before:           Tue 03 Dec 2024 21:34:52 +0000
ROA not after:            Tue 02 Dec 2025 21:39:52 +0000
asID:                     52973
IP address blocks:        2804:3b00::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/960B59E054F187A995D7F6038A0BA2336525F190.crl
                          rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/960B59E054F187A995D7F6038A0BA2336525F190.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960B59E054F187A995D7F6038A0BA2336525F190.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 16:45:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c3:57:ca:85:65:27:31:cf:d8:07:6b:55:af:b7:5b:86:6c:d9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960B59E054F187A995D7F6038A0BA2336525F190
        Validity
            Not Before: Dec  3 21:34:52 2024 GMT
            Not After : Dec  2 21:39:52 2025 GMT
        Subject: CN=52821AD86620ACF9E3D6A6166BFBFBE37960A3F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9e:6f:4a:dc:91:d7:8e:ea:28:31:d1:75:c6:
                    b0:e8:2d:18:ac:ea:9b:1b:88:db:39:b2:c9:9c:08:
                    4f:0e:02:3b:18:2e:be:15:e1:69:62:67:cf:91:82:
                    b6:a3:e5:cf:3a:97:60:e3:14:3b:f1:39:6c:a2:62:
                    ea:8e:73:31:c9:4a:e8:48:06:f3:8b:28:10:5e:36:
                    07:af:bb:1f:1d:9b:b3:82:5e:86:b1:56:5e:ef:d7:
                    35:a5:c3:12:3e:57:00:53:3a:1c:a0:92:01:e0:50:
                    de:84:74:68:95:fa:d1:23:b4:9e:5c:1c:f5:82:78:
                    a7:1d:65:4d:34:fe:66:a8:cb:ab:e0:b0:6e:e9:a2:
                    29:52:8d:62:2c:11:d4:e0:74:59:59:77:a5:9d:b7:
                    10:6d:6d:ea:1f:fe:50:f4:58:bc:89:5f:99:0f:0d:
                    4e:94:d0:3e:55:73:4a:46:ce:a4:b9:2b:8c:ff:f3:
                    e3:1c:7c:53:4c:4b:a5:d1:44:6f:1e:7e:7b:47:e0:
                    06:6e:6d:55:48:ac:a5:77:59:22:1b:40:92:ff:c7:
                    31:07:21:90:f8:3d:27:24:4a:e9:bb:19:f6:50:27:
                    92:0c:fc:84:cd:74:3c:9d:4b:2d:54:0e:8a:a2:1b:
                    4e:6c:ea:75:69:92:c8:de:56:22:cf:ed:63:91:68:
                    1b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:82:1A:D8:66:20:AC:F9:E3:D6:A6:16:6B:FB:FB:E3:79:60:A3:F2
            X509v3 Authority Key Identifier:
                keyid:96:0B:59:E0:54:F1:87:A9:95:D7:F6:03:8A:0B:A2:33:65:25:F1:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/960B59E054F187A995D7F6038A0BA2336525F190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960B59E054F187A995D7F6038A0BA2336525F190.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/323830343a336230303a3a2f33322d313238203d3e203532393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:c6:32:ae:9b:6f:cb:f7:09:7b:61:50:fe:78:26:5e:01:b4:
         ea:7a:64:73:2a:cc:ec:93:03:ca:0c:90:12:c2:2c:6d:9b:d9:
         6b:da:0c:08:53:7c:d4:66:77:b8:53:7a:ca:40:98:db:07:86:
         4b:9e:4f:36:80:fa:3f:83:51:9c:80:eb:03:6a:b6:8d:c9:99:
         e5:ad:60:1f:54:5a:26:e2:d5:c9:c6:85:74:01:21:40:13:a7:
         e1:c2:f8:51:65:83:d2:93:20:04:b5:ba:4d:76:6c:be:97:64:
         a4:d5:4f:22:b4:2b:40:93:14:2f:43:e4:2b:30:b8:9e:49:d2:
         a1:2f:74:be:7f:ef:ea:42:ea:50:d4:d3:26:6f:26:d3:72:59:
         74:e1:7c:c6:6a:c4:b2:3c:5f:6e:19:6e:a6:5b:3f:26:2b:a1:
         9a:6c:3e:e8:5b:20:4a:6d:0a:b2:9b:4f:63:42:14:51:d7:59:
         53:85:13:bb:41:8e:07:1f:35:38:4d:06:5f:35:36:77:21:8f:
         ac:17:b5:92:a8:69:17:89:2d:62:07:97:96:2d:c8:08:bf:43:
         47:b8:5d:54:9b:5c:4e:d9:ee:68:ea:cd:9e:2c:cb:77:49:e9:
         70:14:29:6e:02:4a:6b:2e:22:f2:3a:c7:d0:76:df:5d:85:30:
         97:c9:2e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:30 2025 by rpki-client