Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/323830343a376433633a313030303a3a2f33362d3336203d3e20323731353438.roa
File:                     323830343a376433633a313030303a3a2f33362d3336203d3e20323731353438.roa (raw, json)
Hash identifier:          g/2DviSkkbMsmpXjxb//w+Ar1pVDz6LQWN5aRtvwzRw=
Subject key identifier:   5C:27:74:C7:FD:C7:80:E6:F6:0E:8D:27:E4:25:22:56:2F:B8:B7:6D
Certificate issuer:       /CN=090868DBC98ADC1F6A723C3495F8BFBDF361207C
Certificate serial:       62C17AA7DB9CB6C74DDFFF804401350EA48862E4
Authority key identifier: 09:08:68:DB:C9:8A:DC:1F:6A:72:3C:34:95:F8:BF:BD:F3:61:20:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/323830343a376433633a313030303a3a2f33362d3336203d3e20323731353438.roa
Signing time:             Wed 03 Apr 2024 22:44:39 +0000
ROA not before:           Wed 03 Apr 2024 22:39:39 +0000
ROA not after:            Wed 02 Apr 2025 22:44:39 +0000
asID:                     271548
IP address blocks:        2804:7d3c:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.crl
                          rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c1:7a:a7:db:9c:b6:c7:4d:df:ff:80:44:01:35:0e:a4:88:62:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090868DBC98ADC1F6A723C3495F8BFBDF361207C
        Validity
            Not Before: Apr  3 22:39:39 2024 GMT
            Not After : Apr  2 22:44:39 2025 GMT
        Subject: CN=5C2774C7FDC780E6F60E8D27E42522562FB8B76D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ec:91:91:d5:34:80:0e:4a:ba:5f:64:3b:b5:
                    6b:f7:47:60:ec:cf:26:4c:09:1c:b5:aa:82:66:9c:
                    b0:e2:6d:f0:87:9b:b7:b4:8c:20:8c:8f:19:b7:17:
                    97:10:f3:f6:d6:e8:8b:d2:31:9d:f4:cf:dd:0e:94:
                    ce:5d:9a:39:2d:44:e9:36:72:60:01:20:59:b2:37:
                    0e:e2:5e:09:3b:e3:28:5f:b0:64:04:0d:f6:d3:1e:
                    71:3f:ae:9b:33:2d:7c:b5:bb:1c:c9:a0:12:79:25:
                    80:42:f6:cb:98:b7:47:65:66:cf:11:a0:4f:b0:43:
                    c5:f9:e5:a6:b3:92:05:ee:db:a3:d3:14:00:4a:50:
                    fd:89:7c:5d:38:21:ae:74:74:c3:07:dc:22:ae:69:
                    13:6b:5b:7f:b1:ee:4d:c5:a9:95:48:93:a0:84:21:
                    83:ed:89:5f:28:6e:83:db:70:8b:ef:40:6f:4d:53:
                    75:f7:26:79:41:ba:6e:ad:27:a7:7d:28:1e:e9:e2:
                    31:93:ed:88:07:97:db:b2:99:f7:21:6c:22:2c:6f:
                    8b:71:23:7d:00:ee:bd:55:97:e5:ef:cc:af:11:a3:
                    6b:60:2b:63:4f:08:1c:a8:d8:09:31:25:87:a6:3b:
                    1d:cf:5d:de:39:97:c8:36:3e:d2:3e:a3:af:48:62:
                    37:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:27:74:C7:FD:C7:80:E6:F6:0E:8D:27:E4:25:22:56:2F:B8:B7:6D
            X509v3 Authority Key Identifier:
                keyid:09:08:68:DB:C9:8A:DC:1F:6A:72:3C:34:95:F8:BF:BD:F3:61:20:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/323830343a376433633a313030303a3a2f33362d3336203d3e20323731353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d3c:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         24:90:66:4a:d5:d3:23:db:a6:48:b7:44:5a:4e:a9:c5:d8:98:
         23:75:8e:b1:31:35:b6:ae:b1:04:9e:be:90:f8:ac:0a:22:3c:
         96:6c:44:a9:5c:5c:98:29:61:8d:57:bd:2f:be:33:20:00:92:
         09:ce:af:ad:05:23:68:e6:ae:75:de:37:93:6e:b2:36:3f:28:
         ba:f3:6b:68:fd:98:55:92:28:1e:4a:e7:b2:72:43:ad:71:c7:
         b8:38:bf:a7:35:e7:c0:fb:ca:04:90:95:44:90:15:92:dd:d9:
         60:72:86:3d:b8:c1:96:7b:8e:e7:3d:60:9e:38:a0:95:d6:af:
         13:0a:1d:a8:91:42:bd:03:08:0a:6a:ae:60:88:90:80:8f:b5:
         e6:fa:86:0c:b0:8b:6f:c7:46:fa:92:d4:f0:e2:1b:3d:59:28:
         28:0e:1e:86:2f:7b:d6:40:fd:de:c5:30:b8:89:c9:ef:d5:9d:
         8a:7a:b0:cc:37:0f:42:e2:b8:2e:9f:9d:8c:f3:02:fb:d4:f8:
         6e:45:ee:0a:d7:9d:dd:cb:6b:5d:74:8f:f3:9f:16:d0:30:07:
         12:9e:13:bb:9c:8c:01:f7:1a:83:25:03:2b:b1:da:05:70:b7:
         26:4c:33:d0:73:8a:6c:ae:93:59:8c:28:a2:0f:a3:c6:41:96:
         ab:8b:f6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:55 2024 by rpki-client on console-fra.rpki-client.org