Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/323830343a343636303a3a2f33322d3438203d3e20323636393836.roa
File:                     323830343a343636303a3a2f33322d3438203d3e20323636393836.roa (raw, json)
Hash identifier:          rJy2eT875q5qKraANy4I8prJ9kP9PD4KG1bEkY+XvwA=
Subject key identifier:   B6:58:F4:62:86:8D:BC:10:46:52:3F:74:B2:23:BE:83:3F:72:4B:AD
Certificate issuer:       /CN=78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D
Certificate serial:       5FE03C9C471988FCB88DD84D5802B940A403DD16
Authority key identifier: 78:C3:1F:85:CF:8B:6A:84:18:FA:D2:5A:55:F5:94:2F:3B:AC:DE:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/323830343a343636303a3a2f33322d3438203d3e20323636393836.roa
Signing time:             Thu 04 Apr 2024 09:13:06 +0000
ROA not before:           Thu 04 Apr 2024 09:08:06 +0000
ROA not after:            Thu 03 Apr 2025 09:13:06 +0000
asID:                     266986
IP address blocks:        2804:4660::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.crl
                          rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e0:3c:9c:47:19:88:fc:b8:8d:d8:4d:58:02:b9:40:a4:03:dd:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D
        Validity
            Not Before: Apr  4 09:08:06 2024 GMT
            Not After : Apr  3 09:13:06 2025 GMT
        Subject: CN=B658F462868DBC1046523F74B223BE833F724BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:78:33:3d:36:b5:d8:b8:da:7d:70:a3:e7:
                    44:b2:65:9d:72:e2:b0:f3:18:02:6b:44:62:a4:af:
                    1d:e4:dd:c8:59:5a:42:f5:49:27:fa:6c:15:3b:29:
                    f7:ea:a7:bb:1c:07:3d:86:75:79:1a:0a:b1:3d:a5:
                    f5:a5:9c:4d:c8:a1:89:11:24:9b:d5:3b:df:18:aa:
                    bf:35:33:d9:89:b8:f6:0e:29:dd:5f:f8:00:65:c5:
                    a1:30:bd:37:3b:5b:a1:b1:29:22:b4:49:4d:6f:7d:
                    b5:6f:c8:15:7c:ac:10:03:d2:1e:44:9f:73:76:22:
                    3f:27:b5:9b:7d:72:89:4a:4b:ee:86:22:ad:e8:4a:
                    a4:87:67:e6:db:a9:ad:b3:52:18:e8:73:2d:cb:be:
                    0d:9b:5e:2a:79:d7:55:c1:c4:25:51:2c:e5:d1:ad:
                    bf:5c:aa:60:92:5b:f1:b3:c8:e6:18:bc:f4:8a:63:
                    2c:3b:69:a7:a0:c0:07:3f:ea:05:68:9c:28:1c:2d:
                    be:6f:76:f5:e0:e5:8e:dd:84:8c:90:ef:11:79:99:
                    74:4f:53:e5:6d:f1:54:36:c4:36:35:fe:03:4f:88:
                    4e:7c:cf:cf:fd:5d:31:6f:17:e9:b8:42:d6:46:4f:
                    ea:0d:31:63:44:08:b2:9d:89:e2:52:ce:28:a7:0b:
                    47:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:58:F4:62:86:8D:BC:10:46:52:3F:74:B2:23:BE:83:3F:72:4B:AD
            X509v3 Authority Key Identifier:
                keyid:78:C3:1F:85:CF:8B:6A:84:18:FA:D2:5A:55:F5:94:2F:3B:AC:DE:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/323830343a343636303a3a2f33322d3438203d3e20323636393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4660::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:32:bf:13:c8:77:79:bd:e3:fa:f9:e9:e6:1b:3c:39:41:1e:
         3e:17:22:40:9f:71:31:3b:51:95:89:5b:47:d5:b9:df:d6:bc:
         12:dd:a6:7e:77:9b:1f:70:80:57:aa:a0:92:7b:af:e3:2b:d5:
         e9:e7:14:69:bd:14:bd:7b:b0:08:8a:6b:04:b6:83:92:41:c8:
         fa:a3:c3:3c:3d:a4:08:fa:9a:62:d9:5d:22:62:4c:f5:09:da:
         c2:9e:ee:69:20:a1:33:e9:67:08:1d:e6:f2:77:29:21:cd:54:
         36:b5:39:c4:d6:55:17:bc:c6:a8:06:d0:db:51:a8:4b:c8:9e:
         16:f0:ba:2d:45:cf:47:4b:45:bf:8f:7b:7d:b6:7b:41:89:40:
         88:65:db:9e:97:ec:18:05:73:d2:59:42:8e:19:81:7f:39:57:
         24:0d:02:00:97:6c:01:33:f6:56:92:03:31:62:4d:e4:78:28:
         90:07:2b:56:3b:01:d5:45:67:49:04:72:bc:a2:5e:9b:65:40:
         b3:a2:0b:32:45:1c:16:94:14:4a:8a:85:29:45:a1:b3:77:04:
         e6:4e:88:c3:ff:80:ec:70:ea:2b:8c:16:c2:2c:ff:a9:f2:c8:
         1d:41:c5:ed:5c:67:a2:69:0e:24:26:4b:49:0a:48:18:75:20:
         54:20:45:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:07 2024 by rpki-client on console-ams.rpki-client.org