Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/323830343a363238383a3a2f33322d313238203d3e20323639333032.roa
File:                     323830343a363238383a3a2f33322d313238203d3e20323639333032.roa (raw, json)
Hash identifier:          staMzKSLPJU1vjtbupglmaZK2rd0XN4Uldc9WGkd98I=
Subject key identifier:   8B:B9:58:BB:80:3A:91:EA:67:85:BF:43:2A:5F:09:CF:5D:F5:77:EF
Certificate issuer:       /CN=0F8527D7B78AAF3D805B156085B133DC25F008C2
Certificate serial:       621564D04C129C03734FF6CE062AD152951E18BF
Authority key identifier: 0F:85:27:D7:B7:8A:AF:3D:80:5B:15:60:85:B1:33:DC:25:F0:08:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/323830343a363238383a3a2f33322d313238203d3e20323639333032.roa
Signing time:             Thu 04 Apr 2024 12:55:51 +0000
ROA not before:           Thu 04 Apr 2024 12:50:51 +0000
ROA not after:            Thu 03 Apr 2025 12:55:51 +0000
asID:                     269302
IP address blocks:        2804:6288::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.crl
                          rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:15:64:d0:4c:12:9c:03:73:4f:f6:ce:06:2a:d1:52:95:1e:18:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F8527D7B78AAF3D805B156085B133DC25F008C2
        Validity
            Not Before: Apr  4 12:50:51 2024 GMT
            Not After : Apr  3 12:55:51 2025 GMT
        Subject: CN=8BB958BB803A91EA6785BF432A5F09CF5DF577EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:60:68:25:21:47:23:f6:7f:6e:fa:85:62:36:
                    19:1b:7d:e9:e8:45:81:83:21:c1:ea:10:59:7d:82:
                    3a:b1:95:d6:0b:55:55:8d:da:aa:99:f6:bc:15:90:
                    90:0c:2d:dd:93:80:bf:31:83:31:78:ab:fa:a0:85:
                    7e:cb:9a:c3:0a:8c:e3:5e:e7:70:1b:cd:a7:bc:eb:
                    b2:73:e4:89:fb:2d:a8:ac:c5:8a:15:d6:cd:4e:70:
                    b3:8a:77:3c:71:62:5f:17:30:1d:da:f0:b2:81:3c:
                    56:38:05:94:5c:84:18:79:ac:f8:11:a6:dc:a2:df:
                    2e:b4:0f:f3:5e:86:42:0e:d4:56:d8:39:50:4f:1f:
                    5d:0d:f8:ad:75:a8:99:89:39:12:7f:b5:8d:40:43:
                    95:23:de:7d:4b:59:2f:56:1a:d8:25:7e:f0:a0:79:
                    9a:e9:4a:d5:0f:80:ce:e9:e2:76:2d:72:09:5c:6c:
                    dd:1e:79:34:56:1d:ba:03:55:90:bb:75:71:de:90:
                    d0:5f:18:f9:0c:09:e3:86:57:5e:ab:88:76:48:16:
                    cd:b0:62:47:d2:93:ee:b1:0a:c9:8d:c3:f1:bc:cd:
                    a9:bd:d2:e1:ce:c8:01:b2:b3:40:65:41:1e:b0:d2:
                    2f:e1:af:81:5b:44:8d:01:30:7b:46:4b:8c:8f:22:
                    3e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B9:58:BB:80:3A:91:EA:67:85:BF:43:2A:5F:09:CF:5D:F5:77:EF
            X509v3 Authority Key Identifier:
                keyid:0F:85:27:D7:B7:8A:AF:3D:80:5B:15:60:85:B1:33:DC:25:F0:08:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/323830343a363238383a3a2f33322d313238203d3e20323639333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6288::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:50:ba:c3:f4:e3:61:6b:42:ee:0a:6b:98:5c:a6:2b:67:0b:
         2e:6d:94:10:42:64:af:57:8d:12:f7:92:ec:6b:bb:73:ca:86:
         0f:a9:15:31:ee:af:80:36:03:fa:3c:c1:8f:96:a5:b1:b4:0c:
         5f:d0:b4:e2:74:2b:a4:5a:95:88:68:61:bd:46:cc:e3:e1:7d:
         f4:70:02:d4:66:44:cc:17:b8:f4:bd:6a:40:22:4e:50:96:ee:
         7d:61:27:5a:2d:41:1a:18:0a:2e:0b:ca:3b:45:ee:b4:b7:8e:
         08:89:6f:5c:87:95:94:b7:76:81:9e:44:2d:dd:00:99:c6:94:
         72:8e:6a:5a:12:c2:ff:d3:b1:82:f0:76:ba:0f:02:00:ca:0b:
         56:f6:6e:4d:5b:82:05:88:8c:c3:37:bf:69:e1:6b:96:bd:a3:
         0b:04:04:eb:47:f6:ab:5e:56:79:5b:50:ed:98:32:c0:1d:0e:
         b6:44:9a:c2:ab:79:2e:fb:6f:94:13:aa:eb:2c:7b:48:46:f2:
         9b:27:c9:2a:5a:76:91:31:9a:47:28:e2:99:fa:83:9f:b6:2e:
         d2:23:c3:b3:76:13:50:0e:59:1d:82:f7:8e:65:a2:3d:76:93:
         47:8f:f1:46:59:34:b8:56:c0:e6:e2:57:ab:a8:ef:e0:2a:05:
         9a:7b:ee:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:02 2024 by rpki-client on console-fra.rpki-client.org