Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/323830343a333939383a3a2f33322d3334203d3e20323636303338.roa
File:                     323830343a333939383a3a2f33322d3334203d3e20323636303338.roa (raw, json)
Hash identifier:          Zvg074VowHPkvGgE5py5OoOPRgoY/fJ+db1C9/9hk+o=
Subject key identifier:   EF:8F:3B:9E:90:8F:89:A2:04:22:18:66:38:BC:23:79:A4:4E:38:1F
Certificate issuer:       /CN=96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE
Certificate serial:       0AE4047B99E22649403872B7996F8AC95B15233C
Authority key identifier: 96:F2:FB:F6:6A:D2:E9:F6:1E:CC:CE:C6:77:41:C6:AD:17:36:AC:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/323830343a333939383a3a2f33322d3334203d3e20323636303338.roa
Signing time:             Thu 04 Apr 2024 18:12:53 +0000
ROA not before:           Thu 04 Apr 2024 18:07:53 +0000
ROA not after:            Thu 03 Apr 2025 18:12:53 +0000
asID:                     266038
IP address blocks:        2804:3998::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.crl
                          rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e4:04:7b:99:e2:26:49:40:38:72:b7:99:6f:8a:c9:5b:15:23:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE
        Validity
            Not Before: Apr  4 18:07:53 2024 GMT
            Not After : Apr  3 18:12:53 2025 GMT
        Subject: CN=EF8F3B9E908F89A20422186638BC2379A44E381F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fb:a6:1d:17:ae:dc:be:b0:47:72:da:6c:bc:
                    1f:dd:44:d1:90:69:4e:55:0d:4d:31:d1:6e:3e:16:
                    f8:58:8e:3f:33:da:f7:16:ac:1e:0b:21:55:ae:f1:
                    bc:8c:56:ce:4b:aa:c0:48:3f:71:44:57:54:d0:ac:
                    d7:2f:46:60:3a:bc:5e:2c:01:da:fe:08:b0:6b:4d:
                    98:8e:b8:4e:a0:d3:04:4a:a4:e8:a9:34:cd:9c:11:
                    f4:ac:78:a4:6e:7b:bf:e8:1c:02:05:35:43:0a:61:
                    5b:8d:ec:a9:7e:81:7d:5e:49:0f:85:ec:dc:3a:18:
                    7e:24:b9:cd:06:60:4e:24:fc:a7:cd:8f:a3:9c:7f:
                    7b:31:a8:4f:55:76:dd:56:38:b4:e1:5f:3a:5f:10:
                    72:1d:bb:0a:7a:3d:71:4b:3d:50:d5:16:ae:6e:d3:
                    5e:72:34:12:d0:c9:63:85:80:c7:44:fc:38:38:d2:
                    55:25:53:76:92:94:75:b9:38:47:ff:ae:f9:b5:81:
                    0e:32:b1:a7:21:e3:eb:d2:63:83:2e:69:53:39:25:
                    95:b0:57:38:aa:ff:c1:08:2d:61:69:eb:eb:ce:7d:
                    81:4a:8e:b9:91:83:7c:97:47:f4:5b:00:ae:09:00:
                    11:b0:7e:3d:58:15:99:9f:9a:53:4b:8c:19:1c:27:
                    d5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8F:3B:9E:90:8F:89:A2:04:22:18:66:38:BC:23:79:A4:4E:38:1F
            X509v3 Authority Key Identifier:
                keyid:96:F2:FB:F6:6A:D2:E9:F6:1E:CC:CE:C6:77:41:C6:AD:17:36:AC:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/323830343a333939383a3a2f33322d3334203d3e20323636303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3998::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:b6:9d:15:73:10:c9:b6:08:d9:2f:3c:21:e5:1d:d4:52:b8:
         95:bf:30:b8:e7:c2:da:16:ce:f2:a0:f6:6e:b8:a0:0a:00:91:
         36:bb:ed:25:58:1f:c0:a5:0e:92:47:c0:a5:e8:63:ad:e8:05:
         fb:bb:87:79:26:22:b7:ec:0f:b4:bc:71:a6:c8:d1:c2:44:79:
         11:bb:f8:7b:98:96:cf:a3:3d:1b:e0:7a:ba:c6:0b:a7:d9:eb:
         93:0e:2a:64:26:97:80:6a:a3:e2:df:19:64:d1:6b:fd:03:db:
         67:77:9d:12:eb:ef:73:fa:31:33:11:97:1f:6d:ba:e6:3a:3f:
         d1:da:7b:c8:15:1d:58:ee:f0:45:a2:88:ba:50:a0:23:60:e7:
         c2:eb:47:57:b9:67:e2:e3:27:f7:bb:1b:4c:62:bd:77:c4:68:
         db:08:a3:17:aa:f9:63:68:c0:66:5b:9f:bb:93:2d:90:b5:91:
         d9:57:4f:16:ed:8d:9f:38:55:29:9a:77:7e:7d:27:a0:6d:c9:
         7d:8d:60:f8:55:31:27:01:2e:11:cf:e4:d4:1b:c1:70:c5:10:
         2b:fd:0a:58:b1:ea:63:80:a7:4a:55:2e:b6:67:4f:32:34:b0:
         27:ae:94:88:86:d3:a6:af:ed:95:6a:f6:aa:24:39:f2:10:fa:
         8f:60:e3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 07:56:08 2024 by rpki-client on console-fra.rpki-client.org