Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/323830343a3533343a3a2f33322d313238203d3e203232313737.roa
File:                     323830343a3533343a3a2f33322d313238203d3e203232313737.roa (raw, json)
Hash identifier:          fl8u1FKKItqeBTjsnvAtemGhN87KfqmeTvpiZf9MXh8=
Subject key identifier:   E3:D2:BE:50:0F:4E:A8:12:5F:66:8E:77:66:D3:A8:8F:ED:38:B7:D3
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       4C025F067569B3C95E9D299E0C90D3B3BDE7B467
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/323830343a3533343a3a2f33322d313238203d3e203232313737.roa
Signing time:             Thu 04 Apr 2024 03:30:22 +0000
ROA not before:           Thu 04 Apr 2024 03:25:22 +0000
ROA not after:            Thu 03 Apr 2025 03:30:22 +0000
asID:                     22177
IP address blocks:        2804:534::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:02:5f:06:75:69:b3:c9:5e:9d:29:9e:0c:90:d3:b3:bd:e7:b4:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Apr  4 03:25:22 2024 GMT
            Not After : Apr  3 03:30:22 2025 GMT
        Subject: CN=E3D2BE500F4EA8125F668E7766D3A88FED38B7D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bb:71:37:fa:9c:b2:54:1a:22:b7:1f:30:f1:
                    9c:d3:db:d5:c9:04:f1:14:b7:e0:11:b2:88:e9:76:
                    0c:53:28:94:5e:18:6d:c2:12:ff:9b:06:20:13:da:
                    97:3b:07:62:45:da:d3:b6:83:6c:a2:ae:2e:00:f8:
                    7c:83:c2:e5:db:56:c1:0f:65:44:b8:f9:52:8b:a1:
                    0e:23:fc:42:12:d1:5a:34:a6:ec:ba:8c:7e:85:21:
                    63:a7:1d:2b:50:14:fc:89:4a:fe:08:c2:99:12:7d:
                    e6:0c:59:13:03:1d:59:cc:bf:e9:a6:de:16:3a:d7:
                    59:58:62:64:81:55:4e:4c:28:b4:a9:36:3f:0a:6c:
                    2a:83:2e:26:b2:9b:51:b9:aa:d7:b8:85:80:13:d2:
                    f8:b3:30:bf:05:45:49:6f:f1:50:8b:26:75:1f:14:
                    74:c7:d3:72:be:fe:fb:68:7d:ac:99:9e:08:f1:a5:
                    bc:24:9e:a0:f9:34:4d:13:f9:39:7a:8d:15:ef:93:
                    92:06:66:55:43:6c:5e:ed:c8:c0:90:20:dd:44:91:
                    75:b0:b0:9c:d4:74:51:1f:d0:45:e2:9d:c3:63:30:
                    fc:6f:9a:9c:bd:42:f8:49:ce:ba:a0:99:0c:79:da:
                    d4:f0:d3:f2:b8:cc:16:88:c1:d9:70:d6:6c:ed:ef:
                    b9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D2:BE:50:0F:4E:A8:12:5F:66:8E:77:66:D3:A8:8F:ED:38:B7:D3
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/323830343a3533343a3a2f33322d313238203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:534::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:9c:ad:24:2a:35:8a:90:a4:04:1e:c6:1f:fb:a9:38:d7:eb:
         bc:bd:47:69:f2:8e:63:c9:7f:fa:78:79:fd:cc:18:bb:36:5f:
         20:f6:9d:c5:c2:5e:7b:3d:37:89:1e:bc:68:a9:93:0b:58:f2:
         c8:c0:99:09:6e:0c:56:47:31:c8:b4:fb:24:3c:51:0c:b7:43:
         f9:a8:80:5f:b0:36:a9:fd:5e:73:d0:6e:91:f5:00:1b:c1:90:
         af:0a:fa:a3:5f:79:40:55:2e:ab:a0:6f:8e:99:7a:73:8f:1c:
         71:ca:dc:61:04:60:c9:9f:95:87:ba:48:49:84:f5:f7:35:94:
         7d:79:5b:bf:b5:c2:1c:e6:2f:53:ed:b3:27:b4:e1:94:fb:aa:
         b2:5b:38:b0:98:90:0e:78:51:1a:16:f9:eb:52:84:57:f2:43:
         29:c2:ec:cb:57:60:34:62:8f:10:af:bf:98:80:e1:f4:ec:4b:
         5c:b7:31:fd:a7:f7:13:15:26:de:7b:aa:ff:67:2e:c1:99:c2:
         06:64:e1:cd:d0:a3:47:cc:9e:e1:3c:6e:f7:10:24:56:63:cf:
         92:40:85:6b:26:c4:f0:7d:66:b4:26:b2:c5:08:7a:5e:69:c1:
         44:5f:03:da:96:ba:9a:20:fd:14:8d:99:e3:44:b9:2f:3e:6a:
         b3:96:f9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:41 2024 by rpki-client on console-fra.rpki-client.org