Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a3130303a3a2f34382d3438203d3e20323633353431.roa
File:                     323830343a313339383a3130303a3a2f34382d3438203d3e20323633353431.roa (raw, json)
Hash identifier:          bma1F5DwAqERaCzuyPOHNxdPN5XYTpduOPefiu4HIhg=
Subject key identifier:   60:BA:9F:8B:8E:77:1C:7A:86:70:B2:80:15:4F:53:0E:6A:C0:8C:25
Certificate issuer:       /CN=AB6EBC1B7182C64982948DD7B8CB166F20C4649E
Certificate serial:       386314DC38C03EE6110427889F7CB85E20D62ED3
Authority key identifier: AB:6E:BC:1B:71:82:C6:49:82:94:8D:D7:B8:CB:16:6F:20:C4:64:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a3130303a3a2f34382d3438203d3e20323633353431.roa
Signing time:             Tue 30 Apr 2024 14:45:59 +0000
ROA not before:           Tue 30 Apr 2024 14:40:59 +0000
ROA not after:            Tue 29 Apr 2025 14:45:59 +0000
asID:                     263541
IP address blocks:        2804:1398:100::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.crl
                          rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:63:14:dc:38:c0:3e:e6:11:04:27:88:9f:7c:b8:5e:20:d6:2e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6EBC1B7182C64982948DD7B8CB166F20C4649E
        Validity
            Not Before: Apr 30 14:40:59 2024 GMT
            Not After : Apr 29 14:45:59 2025 GMT
        Subject: CN=60BA9F8B8E771C7A8670B280154F530E6AC08C25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:64:af:aa:a3:f3:e6:9a:46:d0:d3:ba:d9:a3:
                    b5:ab:e3:6f:f1:2b:9b:a1:bc:58:cb:a1:29:9f:45:
                    05:ba:ef:0b:b5:5a:58:99:7a:e3:7c:e5:c2:5b:c8:
                    1c:0b:ba:c0:b5:94:bd:48:0e:8e:c2:79:8e:b1:65:
                    0b:1c:39:65:b7:c3:3a:5e:1c:11:2b:9a:fd:32:e2:
                    9c:e8:52:3d:5b:99:ba:50:bd:e0:b0:de:54:ea:6d:
                    57:6a:62:ee:52:68:fa:4c:15:f6:17:59:4b:89:2e:
                    93:aa:02:cc:aa:8d:a8:1c:b9:7e:5d:70:b2:fb:79:
                    0c:28:d6:14:e4:bd:9f:4c:65:fd:d6:95:13:af:44:
                    af:3b:ca:53:62:41:9e:7e:bc:58:4a:cc:41:1f:de:
                    fe:ab:94:d1:ff:90:82:cf:69:b8:b7:c0:31:5a:64:
                    a7:e5:73:a5:fd:c9:bd:12:37:c1:ed:e5:cd:2a:cc:
                    b3:bc:a5:ac:02:ee:cf:cc:14:25:f3:42:21:eb:fe:
                    21:d1:64:ac:4b:ca:34:da:cc:21:24:c2:57:52:a7:
                    aa:6c:f0:e7:dc:b4:e4:01:a0:3c:b0:a7:4c:c7:fa:
                    c9:ed:37:37:c1:b7:3e:e6:26:92:67:b1:a9:d4:2e:
                    e5:91:49:7e:26:43:ca:b7:e9:c2:87:f4:75:36:de:
                    da:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BA:9F:8B:8E:77:1C:7A:86:70:B2:80:15:4F:53:0E:6A:C0:8C:25
            X509v3 Authority Key Identifier:
                keyid:AB:6E:BC:1B:71:82:C6:49:82:94:8D:D7:B8:CB:16:6F:20:C4:64:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a3130303a3a2f34382d3438203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1398:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:ef:82:b1:98:ea:06:b6:8b:54:dd:1e:2e:a1:40:4f:53:33:
         78:99:2b:2b:6b:f2:87:8a:77:ad:8c:3b:e6:9e:e2:1f:43:fa:
         5f:1d:b2:25:79:0e:e2:c9:92:77:75:fe:09:b3:eb:10:70:45:
         cc:22:92:e2:af:e4:68:35:32:f2:a3:a7:51:c0:58:c4:64:69:
         19:71:c7:14:ca:1a:74:9a:79:8b:c6:7b:24:ff:91:98:7f:c7:
         38:ee:18:18:2d:b3:11:d9:d6:7e:18:35:8d:e3:cf:1c:60:b0:
         0f:30:25:7a:a4:2b:88:15:52:37:c6:3b:16:b8:84:f3:f4:03:
         b9:f9:0c:fa:53:4e:79:6a:f3:a4:1b:be:85:61:9a:e9:95:ab:
         a0:54:f2:1e:70:22:0e:05:37:e8:a4:c1:ba:eb:97:4d:7f:a2:
         e9:31:af:19:6f:80:0e:cd:43:c4:d4:00:85:6c:3c:85:ba:58:
         a1:f7:13:4e:8d:be:fc:6f:22:7b:84:ef:ee:a8:e7:d1:24:8a:
         6e:3e:27:c7:f2:fb:83:0b:b7:51:b6:5a:e7:2e:0f:64:63:7e:
         26:6c:bf:e4:39:ff:18:c6:28:c7:a2:99:99:cf:0c:0f:9a:99:
         ff:39:07:86:32:48:1f:5c:17:c1:44:d4:07:71:d8:71:27:22:
         74:a4:7d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:08 2024 by rpki-client on console-fra.rpki-client.org