Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a313a3a2f36342d3634203d3e203532363133.roa
File:                     323830343a6433633a313a3a2f36342d3634203d3e203532363133.roa (raw, json)
Hash identifier:          EUMQs/MdnMV8VCidtR/YefYG2rTGAMqWyDGzw5nEvow=
Subject key identifier:   3B:27:8F:C3:2A:EF:FC:D9:6B:34:6D:B6:67:C4:A2:69:C7:30:AB:70
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       287DF1279E6B22431C3C637A6B127DF212EF1DF8
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a313a3a2f36342d3634203d3e203532363133.roa
Signing time:             Thu 04 Apr 2024 09:18:14 +0000
ROA not before:           Thu 04 Apr 2024 09:13:14 +0000
ROA not after:            Thu 03 Apr 2025 09:18:14 +0000
asID:                     52613
IP address blocks:        2804:d3c:1::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7d:f1:27:9e:6b:22:43:1c:3c:63:7a:6b:12:7d:f2:12:ef:1d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Apr  4 09:13:14 2024 GMT
            Not After : Apr  3 09:18:14 2025 GMT
        Subject: CN=3B278FC32AEFFCD96B346DB667C4A269C730AB70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:10:b7:50:21:c7:83:04:a5:36:1b:da:f0:b1:
                    76:82:f1:2a:08:cc:51:3c:b3:b7:07:da:96:3c:db:
                    b0:e1:73:f8:e2:e6:c4:68:d9:4d:d5:4f:12:6e:28:
                    52:c2:1d:2c:10:9a:58:38:51:a9:a9:43:d7:bc:dd:
                    b5:59:c0:7f:45:e3:6f:08:98:c1:76:92:7a:3f:c7:
                    ff:d2:47:90:27:2c:7b:50:bc:39:00:b4:94:9b:6f:
                    4f:b2:ab:40:96:44:d0:ad:51:34:b4:a8:d3:9c:20:
                    27:ba:cc:e7:90:08:3f:a7:e9:bc:e8:87:b1:5a:80:
                    48:25:b5:5c:e9:13:06:b5:a6:8b:60:4e:d2:bb:e8:
                    e7:10:f2:46:fb:17:d0:e7:9e:47:c4:de:58:30:fa:
                    51:78:e6:a0:30:80:b1:2b:d6:59:be:ef:31:ec:31:
                    7f:48:b0:52:a5:cb:1f:c4:11:0c:40:ab:38:81:7f:
                    fd:d1:8a:26:bd:b2:b4:5e:72:c2:1a:3b:f9:1c:b6:
                    07:35:e1:e6:71:b6:c8:fa:4b:8c:19:94:62:eb:69:
                    48:c6:b2:43:d7:8e:6b:01:b2:c8:d5:96:02:d5:79:
                    b1:9b:af:05:73:c1:e0:fa:c1:39:20:8f:98:5d:30:
                    f8:52:a8:b1:b9:4d:78:f8:27:c1:99:0d:4a:fd:28:
                    e6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:27:8F:C3:2A:EF:FC:D9:6B:34:6D:B6:67:C4:A2:69:C7:30:AB:70
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a313a3a2f36342d3634203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d3c:1::/64

    Signature Algorithm: sha256WithRSAEncryption
         18:91:89:93:3e:bd:75:73:83:db:c7:bc:21:ba:40:39:88:00:
         94:d0:55:25:9c:3d:2a:8b:cd:24:7d:18:82:a8:c0:2c:89:c0:
         ab:4f:12:06:09:b0:41:54:52:0d:74:bb:ac:83:ce:42:91:d0:
         9d:2a:12:f4:0b:47:22:56:1e:8e:97:d8:c8:f6:e6:a3:e2:ac:
         83:40:43:23:52:61:ef:97:19:b5:ec:4d:24:9f:c7:51:d1:8a:
         38:b2:2a:89:f9:a8:0b:41:c8:db:e5:8b:a0:10:6a:ca:77:e1:
         01:d3:0f:c5:5b:29:b4:7e:1b:e6:f5:ed:ab:93:e3:46:f9:74:
         4b:8f:f3:78:e6:c5:c6:99:e7:91:11:be:61:2f:12:4a:d9:b3:
         73:6e:1d:7d:ab:67:92:99:49:72:db:e4:39:2f:3d:e8:c3:97:
         d7:2c:94:d2:9d:de:f2:49:83:5b:0e:3b:11:12:ac:4b:59:ff:
         4d:fa:55:14:10:88:bb:87:ed:b8:b5:8b:81:e2:01:6c:78:96:
         7f:83:b6:2a:7d:c5:c9:00:22:6d:76:5a:12:79:aa:8d:cc:5d:
         63:3a:ad:2b:9a:99:07:16:3d:80:57:bb:29:9b:20:3c:e4:98:
         2a:a1:d2:a4:43:08:27:b6:9b:39:20:21:74:21:4d:8e:ba:f0:
         bb:26:05:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:53 2024 by rpki-client on console-fra.rpki-client.org