Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4YBo9GbvY1CHnayFvbVB7CUhuMY2TZxsPF97EoG3qxB/1/323830343a383766633a3a2f33322d3438203d3e20323732373434.roa
File:                     323830343a383766633a3a2f33322d3438203d3e20323732373434.roa (raw, json)
Hash identifier:          4gIyy58hgzcMtxwq1d9RZ5ErlIKe4gAIf3ZyDLGDg8I=
Subject key identifier:   E9:8F:23:92:6D:25:FB:A7:38:24:33:B3:29:D0:B1:AC:93:47:C7:B2
Certificate issuer:       /CN=2659870C7E18C597F69C7A7E3344EDA07B9A9E19
Certificate serial:       16E32690B151DEF00CEBA4F46C7F04DE4D570EAE
Authority key identifier: 26:59:87:0C:7E:18:C5:97:F6:9C:7A:7E:33:44:ED:A0:7B:9A:9E:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2659870C7E18C597F69C7A7E3344EDA07B9A9E19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4YBo9GbvY1CHnayFvbVB7CUhuMY2TZxsPF97EoG3qxB/1/323830343a383766633a3a2f33322d3438203d3e20323732373434.roa
Signing time:             Thu 04 Apr 2024 09:07:32 +0000
ROA not before:           Thu 04 Apr 2024 09:02:32 +0000
ROA not after:            Thu 03 Apr 2025 09:07:32 +0000
asID:                     272744
IP address blocks:        2804:87fc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4YBo9GbvY1CHnayFvbVB7CUhuMY2TZxsPF97EoG3qxB/1/2659870C7E18C597F69C7A7E3344EDA07B9A9E19.crl
                          rsync://rpki-repo.registro.br/repo/C4YBo9GbvY1CHnayFvbVB7CUhuMY2TZxsPF97EoG3qxB/1/2659870C7E18C597F69C7A7E3344EDA07B9A9E19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2659870C7E18C597F69C7A7E3344EDA07B9A9E19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e3:26:90:b1:51:de:f0:0c:eb:a4:f4:6c:7f:04:de:4d:57:0e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2659870C7E18C597F69C7A7E3344EDA07B9A9E19
        Validity
            Not Before: Apr  4 09:02:32 2024 GMT
            Not After : Apr  3 09:07:32 2025 GMT
        Subject: CN=E98F23926D25FBA7382433B329D0B1AC9347C7B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dd:af:14:26:f0:19:bf:53:d4:d8:56:55:81:
                    f8:89:41:24:bc:90:d6:57:aa:0d:a4:7a:ed:30:eb:
                    d0:35:64:bd:75:b3:36:eb:48:ee:d8:5f:fc:41:24:
                    01:ee:1e:31:1c:17:0c:50:81:db:f9:6a:72:44:d4:
                    b2:71:f2:88:76:f0:6c:d3:fe:84:28:75:56:c6:6e:
                    6a:e3:f5:17:4b:00:f3:b3:c2:bd:1e:e2:ff:ae:9c:
                    ab:a7:30:f0:4e:97:49:75:20:3c:0a:2b:dd:4b:27:
                    5b:43:8c:44:73:b5:90:be:7f:69:63:a9:f8:33:b3:
                    44:9c:ec:e0:34:70:ab:7c:96:c8:59:7d:0c:38:bd:
                    82:da:33:c0:f1:74:99:29:a9:5b:ee:fd:10:ff:d3:
                    26:ac:1e:d1:01:09:1c:35:88:c7:ea:c1:e2:31:76:
                    b2:f4:60:1d:eb:1e:7f:48:f9:48:38:35:75:6e:df:
                    86:92:01:84:ba:93:19:d2:84:91:02:96:b1:8c:41:
                    b6:9b:3a:b7:40:06:b4:e9:52:04:12:76:bb:77:ee:
                    30:68:20:c4:79:d9:69:b0:f5:0e:62:42:14:44:67:
                    df:8e:b1:e7:bf:b1:23:04:f7:8c:76:7f:9c:c4:ca:
                    01:2a:49:90:55:2d:c7:48:ec:86:c7:ef:5c:7a:c6:
                    92:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8F:23:92:6D:25:FB:A7:38:24:33:B3:29:D0:B1:AC:93:47:C7:B2
            X509v3 Authority Key Identifier:
                keyid:26:59:87:0C:7E:18:C5:97:F6:9C:7A:7E:33:44:ED:A0:7B:9A:9E:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4YBo9GbvY1CHnayFvbVB7CUhuMY2TZxsPF97EoG3qxB/1/2659870C7E18C597F69C7A7E3344EDA07B9A9E19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2659870C7E18C597F69C7A7E3344EDA07B9A9E19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4YBo9GbvY1CHnayFvbVB7CUhuMY2TZxsPF97EoG3qxB/1/323830343a383766633a3a2f33322d3438203d3e20323732373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:d6:db:6b:9d:24:93:7e:da:45:b5:84:9a:45:d3:57:1b:c3:
         6b:09:17:50:a2:e1:98:e1:e1:8b:9c:df:9c:40:f8:66:71:98:
         65:8c:bd:9b:ef:90:b7:ef:99:3d:be:94:dc:38:d5:eb:86:03:
         cd:5e:69:e6:c9:94:78:87:85:6b:a6:f1:3e:1d:f5:98:f1:dd:
         e4:97:47:51:c9:dc:87:0d:fd:5d:02:cb:b0:9f:bb:9b:39:82:
         28:10:d8:59:3c:ec:d6:b9:46:43:fe:d8:87:dd:36:42:4d:80:
         0b:46:0b:89:f7:40:13:5c:ed:22:ab:f9:62:3e:eb:78:43:71:
         d4:af:58:32:ab:2d:d4:89:2a:1b:1c:96:85:b1:e0:bb:ed:d0:
         1d:80:ec:3e:1b:ec:35:6b:65:01:a1:21:51:41:01:b6:e7:8a:
         12:45:43:e3:30:33:be:96:98:e0:7c:0a:d4:2d:e6:12:d3:27:
         55:9e:9b:e2:81:7f:fe:91:b2:d6:e4:12:90:cd:16:cc:8b:3b:
         dc:1e:b0:c9:e0:c2:a8:03:9c:05:d3:09:ed:8a:a5:59:6a:22:
         40:c6:fa:4e:c5:47:aa:76:33:7a:89:dc:f5:30:8b:91:da:58:
         34:71:0c:8e:2e:9d:e6:5c:f4:a3:7d:fd:68:1e:a3:ba:95:be:
         6c:11:cd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:43 2024 by rpki-client on console-ams.rpki-client.org