Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/323830343a3136343a313030303a3a2f33362d3336203d3e20323632363633.roa
File:                     323830343a3136343a313030303a3a2f33362d3336203d3e20323632363633.roa (raw, json)
Hash identifier:          DlJMc4wqI/iEyoH3ekhxKKu4nRM5DQHiu49ODwq8GBY=
Subject key identifier:   C9:94:5C:31:45:29:87:24:8A:64:3B:38:9C:21:63:4F:63:00:E6:0E
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       7F0C7D29A5481BA16CA7708F45057A982B7078A7
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/323830343a3136343a313030303a3a2f33362d3336203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:19:08 +0000
ROA not before:           Thu 04 Apr 2024 02:14:08 +0000
ROA not after:            Thu 03 Apr 2025 02:19:08 +0000
asID:                     262663
IP address blocks:        2804:164:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:0c:7d:29:a5:48:1b:a1:6c:a7:70:8f:45:05:7a:98:2b:70:78:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:14:08 2024 GMT
            Not After : Apr  3 02:19:08 2025 GMT
        Subject: CN=C9945C31452987248A643B389C21634F6300E60E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d1:74:55:34:5f:71:0a:34:59:59:3b:61:d7:
                    45:89:78:fe:58:de:90:e7:ae:97:4b:f5:97:d4:3c:
                    50:8f:b8:91:84:05:30:ad:d3:66:18:12:43:d0:ed:
                    a6:4b:40:23:68:89:29:83:a6:9a:81:7d:de:53:d3:
                    ce:5b:30:92:99:7f:bf:0f:7e:f8:1c:39:56:5e:d9:
                    38:d4:65:9e:dc:e1:9d:06:b7:21:fc:46:5b:4f:16:
                    cb:73:64:4d:70:48:bd:a8:f8:81:da:df:dd:30:02:
                    e9:2c:58:db:54:8c:9c:91:58:5a:85:9d:4b:ad:30:
                    1e:64:59:22:da:9e:c5:11:0d:41:0b:da:44:7e:0d:
                    05:4a:9a:da:1a:83:ae:d2:d2:ec:44:f1:b1:eb:49:
                    80:da:7d:a6:00:af:06:7e:d9:40:c6:d0:61:8f:bd:
                    f7:3e:44:68:77:ef:28:43:25:48:f2:c2:60:e1:a0:
                    ac:6d:a0:cd:ab:1f:e6:24:87:ef:4f:91:ce:b0:86:
                    11:89:ae:56:08:cb:5f:95:65:61:60:0a:c6:f8:c1:
                    fe:7c:f9:77:c2:13:8a:fa:5a:e9:5b:12:6e:0f:9d:
                    54:09:4e:90:f8:9f:6f:3a:82:5f:23:2c:00:4d:96:
                    4a:39:68:d9:1e:6a:d4:8a:f6:fa:16:71:1d:3d:2f:
                    96:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:94:5C:31:45:29:87:24:8A:64:3B:38:9C:21:63:4F:63:00:E6:0E
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/323830343a3136343a313030303a3a2f33362d3336203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:164:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         50:21:ed:86:7f:17:f6:48:5f:19:97:d5:24:b4:e0:e2:a8:e5:
         3e:2f:71:dc:21:57:74:3f:3a:2e:39:08:ad:88:6c:e4:e2:14:
         ed:b9:5a:04:39:35:fd:25:0f:36:53:05:cf:98:b3:9f:9a:71:
         88:91:cf:85:cb:77:56:65:ec:95:fc:c2:2f:6b:ae:9e:d4:b8:
         c3:0d:3f:7c:5a:b6:fa:5d:3e:83:bf:ed:7f:0a:92:61:66:da:
         2e:19:b9:3c:56:79:69:ea:92:53:8a:51:0d:28:09:5b:20:a1:
         64:14:46:9c:60:5f:0e:b8:65:59:c6:cb:c0:ee:13:32:0c:dd:
         0b:87:f2:fe:a8:f8:34:4c:93:6a:6c:3f:c7:86:d1:2d:1b:6b:
         07:0f:af:b8:c4:79:93:b0:a8:2d:5a:88:c1:35:3e:a5:64:ef:
         8c:af:f3:1e:72:a5:b4:e6:92:ad:e3:f4:0e:af:80:90:70:38:
         29:38:11:a2:69:53:8a:0e:b9:74:4f:d8:50:93:9e:1f:5c:10:
         7b:30:fd:53:b8:ab:9e:76:0f:e9:ea:7b:eb:d4:66:e5:48:0f:
         0e:d0:75:03:92:20:f6:ca:68:10:44:bd:37:bd:aa:fb:cd:70:
         d6:ce:d9:0d:48:74:4f:ae:c8:aa:e0:c5:d7:1f:02:de:f6:d6:
         6c:a7:0e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:29 2024 by rpki-client on console-fra.rpki-client.org