Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/1/323830343a3964633a3a2f33322d3332203d3e20323632393938.roa
File:                     323830343a3964633a3a2f33322d3332203d3e20323632393938.roa (raw, json)
Hash identifier:          BY2PnRdhPEWfBg3HkM2vCNHHuX4eFAxqwMdUy5D8ZD4=
Subject key identifier:   1B:C7:4D:B5:36:F6:CB:C2:23:98:E7:1C:30:27:0F:8C:40:DA:0D:AA
Certificate issuer:       /CN=FC1C6DAB0E396716D86B15F9BF079B81BFAF1578
Certificate serial:       3C63B1CFA325712FA31729DEC4460629AE035E13
Authority key identifier: FC:1C:6D:AB:0E:39:67:16:D8:6B:15:F9:BF:07:9B:81:BF:AF:15:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC1C6DAB0E396716D86B15F9BF079B81BFAF1578.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/1/323830343a3964633a3a2f33322d3332203d3e20323632393938.roa
Signing time:             Thu 04 Apr 2024 18:42:27 +0000
ROA not before:           Thu 04 Apr 2024 18:37:27 +0000
ROA not after:            Thu 03 Apr 2025 18:42:27 +0000
asID:                     262998
IP address blocks:        2804:9dc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/1/FC1C6DAB0E396716D86B15F9BF079B81BFAF1578.crl
                          rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/1/FC1C6DAB0E396716D86B15F9BF079B81BFAF1578.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC1C6DAB0E396716D86B15F9BF079B81BFAF1578.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:63:b1:cf:a3:25:71:2f:a3:17:29:de:c4:46:06:29:ae:03:5e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC1C6DAB0E396716D86B15F9BF079B81BFAF1578
        Validity
            Not Before: Apr  4 18:37:27 2024 GMT
            Not After : Apr  3 18:42:27 2025 GMT
        Subject: CN=1BC74DB536F6CBC22398E71C30270F8C40DA0DAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:54:5f:6e:41:99:8d:1e:1b:66:f8:f9:94:a9:
                    a5:f2:55:cb:30:5f:a6:fe:dc:0c:6c:84:3e:6e:d1:
                    c9:ba:02:af:08:75:86:ce:d8:1d:6f:e1:97:8c:7f:
                    71:ea:e9:e1:1b:5b:9d:bd:5f:f4:40:21:a1:88:23:
                    af:13:22:f6:7d:cb:cb:4b:e0:68:0e:83:7b:04:7f:
                    45:8e:1c:c5:9a:d9:37:f5:1b:71:5a:61:a5:ec:18:
                    0f:57:08:90:86:08:bc:22:bc:a8:21:30:08:10:4c:
                    72:aa:c6:02:56:d3:ae:90:50:ea:17:01:66:63:c8:
                    08:f3:88:da:a7:b5:e8:24:08:e0:1f:7b:ca:76:83:
                    3a:d3:f5:14:b4:4d:3e:99:f9:16:70:ba:70:80:34:
                    24:47:17:33:f3:b6:8f:44:eb:bb:a0:ab:aa:62:ca:
                    31:55:ab:19:63:50:9a:f0:4d:60:29:63:be:2d:f6:
                    ff:92:0c:84:d6:cf:fb:2a:21:d2:db:09:3e:da:a0:
                    e6:fc:d6:71:47:78:e0:3a:5c:d4:c5:6c:ae:8e:43:
                    49:3e:29:ce:97:1d:5a:c0:b0:50:f9:64:33:17:a1:
                    0e:17:b3:5a:37:b3:80:60:70:df:01:fe:5b:4a:f7:
                    8a:58:a4:c3:b4:32:20:33:0e:b5:d7:77:91:8e:af:
                    0c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C7:4D:B5:36:F6:CB:C2:23:98:E7:1C:30:27:0F:8C:40:DA:0D:AA
            X509v3 Authority Key Identifier:
                keyid:FC:1C:6D:AB:0E:39:67:16:D8:6B:15:F9:BF:07:9B:81:BF:AF:15:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/1/FC1C6DAB0E396716D86B15F9BF079B81BFAF1578.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC1C6DAB0E396716D86B15F9BF079B81BFAF1578.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/1/323830343a3964633a3a2f33322d3332203d3e20323632393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:a0:93:a9:95:06:47:da:a9:6c:53:48:b4:f3:a9:df:ba:65:
         62:67:c3:74:2f:7e:ff:26:9a:70:ae:a6:95:44:9e:f1:02:1c:
         99:d6:b9:52:5a:bb:9b:44:f4:a1:af:ee:a2:ff:4e:bb:69:73:
         97:e3:c4:11:da:8a:bc:3f:63:5b:e3:10:73:6d:7e:80:11:cc:
         85:00:e5:1f:4d:e5:7c:75:87:99:e2:79:08:d0:e8:01:59:13:
         2b:3e:14:ff:73:91:35:ce:53:99:bf:76:db:c3:de:f6:ce:02:
         ba:f9:a8:a2:f5:9f:47:0e:a0:93:46:fa:81:67:25:ce:54:1b:
         e1:a7:ea:3e:8b:6c:e0:47:32:2c:90:1d:ea:d0:56:0a:e9:ca:
         78:c3:f8:fb:f3:c8:63:41:a1:08:30:87:ae:ab:c5:af:6e:ee:
         dc:a6:35:8a:5b:07:da:66:cc:ec:bf:1b:48:d0:57:b7:00:fe:
         44:fc:2b:85:fa:db:19:b2:98:61:0b:df:14:93:35:23:a6:7d:
         2a:d2:a9:ae:d9:8e:f2:f0:53:ad:80:14:3a:70:af:01:b2:21:
         d9:08:b1:c1:d2:41:3f:9f:80:5e:e5:a5:7d:7b:84:b1:91:eb:
         6c:8d:17:1d:6e:05:11:06:e3:8d:a9:d0:7e:a5:5a:f2:5c:bb:
         db:82:a9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:08 2024 by rpki-client on console-ams.rpki-client.org