Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/323830343a346566303a3a2f33322d3336203d3e20323638323932.roa
File:                     323830343a346566303a3a2f33322d3336203d3e20323638323932.roa (raw, json)
Hash identifier:          dJRPAt6D24afB3WtvhrUDAgr/3Wji0lTm/PPXUl2gd0=
Subject key identifier:   56:76:CE:58:AE:9A:5E:AC:0D:5B:CA:5C:36:4D:51:72:99:23:CF:32
Certificate issuer:       /CN=9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87
Certificate serial:       4282A9C5BA3E3A4DE7FAB7A04BE951F173666447
Authority key identifier: 99:65:B1:E2:93:1C:94:CD:A0:3C:B6:3E:F3:A6:CA:E3:3B:C1:5E:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/323830343a346566303a3a2f33322d3336203d3e20323638323932.roa
Signing time:             Thu 18 Apr 2024 12:26:11 +0000
ROA not before:           Thu 18 Apr 2024 12:21:11 +0000
ROA not after:            Thu 17 Apr 2025 12:26:11 +0000
asID:                     268292
IP address blocks:        2804:4ef0::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.crl
                          rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:82:a9:c5:ba:3e:3a:4d:e7:fa:b7:a0:4b:e9:51:f1:73:66:64:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87
        Validity
            Not Before: Apr 18 12:21:11 2024 GMT
            Not After : Apr 17 12:26:11 2025 GMT
        Subject: CN=5676CE58AE9A5EAC0D5BCA5C364D51729923CF32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:c9:65:f3:a5:5c:cf:4f:58:18:42:87:32:
                    ef:fe:c6:d3:6c:b3:55:06:61:b7:9b:9b:89:93:7a:
                    62:d8:c0:ea:a7:4f:35:a4:73:7e:4c:f8:87:82:b6:
                    50:b9:2d:67:ef:db:60:9b:59:ab:69:eb:6e:12:7c:
                    87:ed:1b:95:35:60:72:96:9b:43:bd:66:ed:e7:fd:
                    15:49:f3:b8:b5:5c:8c:01:5c:ed:15:07:60:7e:c0:
                    a1:97:c1:56:76:8e:ad:44:91:6a:a6:82:c5:80:a7:
                    b8:33:7c:36:f5:7f:d6:22:d9:30:70:0f:9e:86:f6:
                    44:85:d3:f5:4d:85:c8:52:bc:b9:d2:93:bd:03:bd:
                    90:36:9d:96:ce:f8:8b:c3:29:d1:80:47:95:73:5d:
                    95:37:d7:ba:99:35:e3:dd:6e:99:51:a9:71:dd:11:
                    e1:07:f3:ab:29:cf:44:5f:76:48:15:39:d1:7f:64:
                    ae:0b:3f:d8:f5:81:2f:ae:0e:94:6e:bc:ba:72:10:
                    f7:28:b5:70:72:64:7f:c4:cd:b4:0b:59:e9:77:9d:
                    9c:25:17:c7:89:d3:50:f2:b2:bd:8c:1a:36:27:60:
                    0c:6a:51:81:a0:6a:e7:2a:25:43:8e:90:ec:eb:f4:
                    59:5c:24:b2:e9:15:57:d3:2f:aa:1f:46:29:9e:e7:
                    0e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:76:CE:58:AE:9A:5E:AC:0D:5B:CA:5C:36:4D:51:72:99:23:CF:32
            X509v3 Authority Key Identifier:
                keyid:99:65:B1:E2:93:1C:94:CD:A0:3C:B6:3E:F3:A6:CA:E3:3B:C1:5E:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/323830343a346566303a3a2f33322d3336203d3e20323638323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ef0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:93:62:62:0c:46:bb:a3:19:7f:b6:78:e3:5e:c3:b7:97:e4:
         90:96:a7:64:c5:6e:2c:da:91:d0:c1:69:94:5f:50:ba:d6:1f:
         29:7d:d1:18:7e:32:0b:c6:b7:bf:0e:2b:be:9f:22:84:45:72:
         81:ea:42:02:b6:6f:89:43:55:15:f8:6c:5d:17:3b:81:70:d9:
         97:e2:fb:15:42:3d:18:3a:1f:d1:4e:fa:54:56:55:3a:b5:f2:
         d1:cc:9b:51:10:28:98:95:fd:4e:f3:24:e9:b6:f7:30:c4:13:
         a5:d6:e2:c9:16:48:55:93:4e:92:3a:dc:9c:f4:e6:c6:a9:86:
         e7:e5:96:75:3e:16:0f:20:c8:1f:94:cd:7c:12:28:62:e9:70:
         e8:ea:7c:1f:d5:9c:b7:43:60:60:cb:0a:f4:ae:ae:ea:7d:e3:
         ef:6d:b2:9b:83:67:74:1d:6e:af:c5:9d:88:9e:92:9e:10:8e:
         73:a9:6b:a6:ed:25:a4:d7:8f:d8:34:0a:32:37:8c:33:f0:9b:
         09:d7:e0:0f:f3:3b:33:d3:9d:07:5d:70:fe:d7:7b:ec:0c:81:
         97:da:69:76:eb:04:ad:5b:8b:a8:89:4a:ff:1d:7a:12:62:6e:
         b7:db:82:d6:a0:48:c2:2c:f3:b5:8f:3d:0a:63:6e:10:b4:fc:
         2e:ea:76:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:38 2024 by rpki-client on console-ams.rpki-client.org