Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a313a3a2f34382d3438203d3e20323633353431.roa
File:                     323830343a313339383a313a3a2f34382d3438203d3e20323633353431.roa (raw, json)
Hash identifier:          NKYKMfjd9AYeRUpdzuYyvsOUCvENHP4l80caiZYU6MY=
Subject key identifier:   AD:68:F8:0D:0F:0C:C5:3F:82:9D:7C:66:0A:65:98:71:9D:9E:F8:5F
Certificate issuer:       /CN=AB6EBC1B7182C64982948DD7B8CB166F20C4649E
Certificate serial:       598FC4BD6E035829457A6ED0CBAC63EF699030B6
Authority key identifier: AB:6E:BC:1B:71:82:C6:49:82:94:8D:D7:B8:CB:16:6F:20:C4:64:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a313a3a2f34382d3438203d3e20323633353431.roa
Signing time:             Tue 30 Apr 2024 14:46:00 +0000
ROA not before:           Tue 30 Apr 2024 14:41:00 +0000
ROA not after:            Tue 29 Apr 2025 14:46:00 +0000
asID:                     263541
IP address blocks:        2804:1398:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.crl
                          rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:8f:c4:bd:6e:03:58:29:45:7a:6e:d0:cb:ac:63:ef:69:90:30:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6EBC1B7182C64982948DD7B8CB166F20C4649E
        Validity
            Not Before: Apr 30 14:41:00 2024 GMT
            Not After : Apr 29 14:46:00 2025 GMT
        Subject: CN=AD68F80D0F0CC53F829D7C660A6598719D9EF85F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:20:1b:a5:43:9a:f0:3d:7b:56:1c:6c:e5:e7:
                    60:12:c3:69:34:a0:98:3b:24:f4:a4:c4:64:43:7d:
                    7c:6e:79:71:f7:d3:04:80:22:c7:ce:aa:31:47:46:
                    b2:bf:13:7c:f5:c6:1d:8f:70:28:69:77:d9:c1:6c:
                    01:a0:20:5e:51:9d:48:e4:ea:05:d9:0c:04:23:14:
                    03:a4:c7:1d:0f:82:aa:13:33:16:1c:37:fc:6d:8e:
                    04:b0:24:9e:1a:49:37:5a:8a:a1:c4:6e:79:52:0d:
                    e7:f5:96:e0:e7:f9:a8:c3:86:4d:53:4d:3f:59:a1:
                    7c:d0:5e:e4:27:b0:ca:e6:04:1c:fb:1c:f2:5e:35:
                    59:28:21:c8:92:29:92:0d:f6:ef:97:a3:cc:93:b6:
                    bd:63:28:95:28:4d:0e:83:76:c9:0a:50:2f:bc:af:
                    61:07:5d:14:d6:4d:f7:16:c9:ed:a4:df:16:ef:bc:
                    9e:84:2a:79:00:9c:37:3c:6f:c0:79:69:9e:19:53:
                    c7:83:29:27:d7:ce:3d:6c:77:b5:b2:dc:3e:be:c3:
                    82:00:aa:b0:a4:1d:d3:8e:2e:b4:56:90:84:cf:a6:
                    01:8b:8d:5e:22:05:07:2c:a5:94:00:1a:54:28:34:
                    9c:cd:21:13:0b:a1:10:8b:65:f6:23:ec:68:da:b1:
                    65:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:68:F8:0D:0F:0C:C5:3F:82:9D:7C:66:0A:65:98:71:9D:9E:F8:5F
            X509v3 Authority Key Identifier:
                keyid:AB:6E:BC:1B:71:82:C6:49:82:94:8D:D7:B8:CB:16:6F:20:C4:64:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a313a3a2f34382d3438203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1398:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:a6:3e:cc:46:a2:4f:c0:e0:53:6a:54:1d:3e:3a:35:c8:43:
         8d:d1:bd:ef:d9:55:b9:6f:39:65:e8:df:60:23:82:7f:bb:07:
         91:e9:1a:dd:26:f2:f2:91:b4:62:6d:d2:d3:82:40:56:ce:2c:
         c4:39:ce:0b:a8:ac:7e:9e:f9:f4:3d:5e:d8:ce:b7:f8:c4:49:
         ba:ff:90:c3:6d:0a:df:0e:73:9a:6a:31:09:ff:3f:53:f0:d8:
         6f:17:e3:a3:40:52:20:5d:70:67:6a:da:29:e1:86:0a:3e:de:
         cb:94:df:f4:29:69:9c:49:40:9e:e4:a7:33:1e:b7:69:6c:6b:
         95:90:cd:59:b6:c5:b0:d6:f6:44:58:1c:db:21:a6:c0:cc:ec:
         7c:ab:60:b6:cd:ae:fe:25:73:7f:5d:8a:9e:5d:89:a4:2e:02:
         01:32:dd:30:89:35:eb:95:0b:15:b1:fa:fe:17:50:61:2f:9d:
         83:e0:25:09:e6:06:f4:a4:f5:cf:1e:b4:84:f1:6e:97:f3:d4:
         2b:f7:0e:0d:28:92:71:9a:c0:07:6b:e8:85:e9:ed:96:60:7c:
         59:cf:29:fc:ae:50:c4:bd:ef:57:8f:84:16:b1:24:3b:bd:0b:
         86:34:f2:a3:bd:35:3f:38:f1:ec:43:82:9d:5e:ef:1d:2c:76:
         56:1c:9b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:18 2024 by rpki-client on console-ams.rpki-client.org