Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/1/323830343a376462633a3a2f33322d313238203d3e20323731353739.roa
File:                     323830343a376462633a3a2f33322d313238203d3e20323731353739.roa (raw, json)
Hash identifier:          J81CbN++RfeWCajyNx2ZwNm7MLJ6cBuTjjyxjuiOv5g=
Subject key identifier:   0D:0B:0A:6B:1D:FD:27:44:F2:A4:A9:2D:C2:CF:AC:58:A0:54:EC:59
Certificate issuer:       /CN=8A6A545B21CA8F70C37A8FB24E9A901800755696
Certificate serial:       78C2D766AA58CE58BDFB232B987D0F99E66474D2
Authority key identifier: 8A:6A:54:5B:21:CA:8F:70:C3:7A:8F:B2:4E:9A:90:18:00:75:56:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6A545B21CA8F70C37A8FB24E9A901800755696.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/1/323830343a376462633a3a2f33322d313238203d3e20323731353739.roa
Signing time:             Thu 04 Apr 2024 15:20:29 +0000
ROA not before:           Thu 04 Apr 2024 15:15:29 +0000
ROA not after:            Thu 03 Apr 2025 15:20:29 +0000
asID:                     271579
IP address blocks:        2804:7dbc::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/1/8A6A545B21CA8F70C37A8FB24E9A901800755696.crl
                          rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/1/8A6A545B21CA8F70C37A8FB24E9A901800755696.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6A545B21CA8F70C37A8FB24E9A901800755696.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c2:d7:66:aa:58:ce:58:bd:fb:23:2b:98:7d:0f:99:e6:64:74:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A6A545B21CA8F70C37A8FB24E9A901800755696
        Validity
            Not Before: Apr  4 15:15:29 2024 GMT
            Not After : Apr  3 15:20:29 2025 GMT
        Subject: CN=0D0B0A6B1DFD2744F2A4A92DC2CFAC58A054EC59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:51:04:b3:07:3d:43:ba:09:27:e0:98:91:32:
                    6a:c0:d4:84:b7:ad:24:c4:b9:93:a9:02:a0:e1:a2:
                    4a:6f:ba:c9:64:f9:d3:f6:f1:0d:2d:76:18:95:fa:
                    6f:ae:fb:be:b0:c0:b0:e8:4c:e8:f8:a2:51:9b:b1:
                    9f:d4:b7:38:0a:cc:02:57:52:16:ef:7d:19:bf:7a:
                    ac:01:ec:f2:8f:85:8c:19:cb:6d:0e:38:f5:05:38:
                    28:6c:dc:96:86:9f:e6:62:37:50:a8:63:20:0e:53:
                    49:84:75:e3:c1:55:93:a6:9b:d6:c7:d7:7b:6e:ed:
                    fb:c0:92:5c:86:af:fe:1b:43:9c:96:88:06:ed:b8:
                    90:b0:b1:00:34:fb:da:3e:d6:76:16:0c:73:7c:82:
                    18:a8:4e:7f:c3:c0:4c:e9:a8:df:16:21:0f:af:4a:
                    e8:f7:fb:a2:5e:5c:25:02:47:b2:a2:f4:1c:48:a7:
                    55:33:66:1c:b8:64:39:65:c6:05:08:bc:43:03:fd:
                    b6:5a:73:99:44:e8:51:85:d8:86:bd:33:2f:56:c7:
                    c4:d2:67:9e:cc:df:94:ce:6e:89:dc:00:dc:ff:5d:
                    c0:92:9b:c7:fb:79:a9:6f:1d:da:16:fb:99:bb:a0:
                    f3:fa:30:96:65:84:90:25:00:81:8d:5b:dc:4e:b6:
                    27:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0B:0A:6B:1D:FD:27:44:F2:A4:A9:2D:C2:CF:AC:58:A0:54:EC:59
            X509v3 Authority Key Identifier:
                keyid:8A:6A:54:5B:21:CA:8F:70:C3:7A:8F:B2:4E:9A:90:18:00:75:56:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/1/8A6A545B21CA8F70C37A8FB24E9A901800755696.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6A545B21CA8F70C37A8FB24E9A901800755696.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/1/323830343a376462633a3a2f33322d313238203d3e20323731353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7dbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:64:59:d0:62:28:01:dd:f2:4f:ce:f6:c6:3a:79:55:c6:26:
         bb:8b:fc:08:7a:88:10:7a:7e:1e:56:22:2d:0b:4b:00:91:77:
         bc:a2:3f:7c:32:42:17:5f:52:68:27:3c:44:e4:ba:a0:bf:a1:
         e2:ff:a2:c0:9f:21:05:bc:73:c5:7a:dd:43:b9:c6:17:3c:b1:
         21:40:6b:fd:9e:08:ab:fb:7c:5c:21:8f:7e:70:49:1c:8b:c0:
         31:52:53:0b:d1:79:5c:9e:c6:cc:85:4f:28:29:e1:8d:56:0c:
         a8:91:d7:d6:d5:7e:8b:8e:c6:46:6f:6e:0a:31:8d:24:7c:f7:
         8b:8f:08:8a:6c:30:8f:1d:2e:35:d8:a8:7a:4c:2e:cf:77:b7:
         95:78:3d:cb:fe:90:40:3a:62:ea:5f:53:01:b1:79:d6:ab:21:
         f7:dc:32:96:91:0f:8b:c1:53:25:bd:0c:e5:31:92:01:82:92:
         38:15:58:78:26:c2:1d:bd:b3:92:7b:d4:ef:57:53:b1:4b:0d:
         59:d4:c4:0e:49:7f:74:90:58:66:17:c5:9c:5e:76:b7:c9:07:
         cf:bd:66:6d:b9:5a:ff:31:69:e0:c6:e4:23:68:85:f2:c2:08:
         8c:5f:fd:7c:e8:0c:82:42:80:28:51:40:71:5a:16:0a:8f:fc:
         71:ab:4a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 07:56:08 2024 by rpki-client on console-fra.rpki-client.org