Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/323830343a313431633a3a2f33322d313238203d3e203533313330.roa
File:                     323830343a313431633a3a2f33322d313238203d3e203533313330.roa (raw, json)
Hash identifier:          ktjzMQbU1TWUEcYqpFFC7wtgpD/Gm3NXMEEwQ8V6LR0=
Subject key identifier:   FA:5A:48:80:A8:EE:15:84:1B:6D:B0:C5:8E:55:BA:1F:F8:6C:76:58
Certificate issuer:       /CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED
Certificate serial:       200973D101D3F530C68AC6187C5B7A2A0B0B9DC0
Authority key identifier: 02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/323830343a313431633a3a2f33322d313238203d3e203533313330.roa
Signing time:             Thu 04 Apr 2024 05:12:30 +0000
ROA not before:           Thu 04 Apr 2024 05:07:30 +0000
ROA not after:            Thu 03 Apr 2025 05:12:30 +0000
asID:                     53130
IP address blocks:        2804:141c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl
                          rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:09:73:d1:01:d3:f5:30:c6:8a:c6:18:7c:5b:7a:2a:0b:0b:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED
        Validity
            Not Before: Apr  4 05:07:30 2024 GMT
            Not After : Apr  3 05:12:30 2025 GMT
        Subject: CN=FA5A4880A8EE15841B6DB0C58E55BA1FF86C7658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1a:fe:29:7f:c6:3a:30:ac:b3:72:4b:01:af:
                    ff:85:11:5b:76:31:ce:da:84:3a:9f:48:74:16:78:
                    20:29:d9:dc:5a:42:7f:6b:b2:82:45:2d:d3:80:ce:
                    c7:31:bb:86:9e:7a:42:8e:26:d4:b5:98:ce:0d:56:
                    d0:09:16:4c:5b:4d:16:1d:9a:bc:38:49:22:04:57:
                    05:45:e3:7e:bf:13:f2:0c:18:66:15:56:b6:fe:3c:
                    f5:c3:1e:ff:88:c7:43:e7:2c:6d:c2:41:8e:37:7b:
                    a0:75:3a:91:90:9e:ee:a2:d6:b3:32:14:f3:f1:7c:
                    fe:d0:0c:ef:65:3d:51:13:86:d2:b6:8a:be:7f:63:
                    3e:42:77:22:25:a8:3b:d1:6d:9c:6f:52:ba:d5:e4:
                    8c:86:28:bd:ac:d9:5e:21:2c:87:3d:37:cf:8d:15:
                    82:4b:38:58:c3:ba:7f:b0:21:f6:8d:be:ac:72:c6:
                    71:62:b7:63:d7:90:6e:b9:5f:ec:97:f7:94:c9:bf:
                    05:59:27:18:72:d3:cc:07:7c:21:a0:20:e6:10:e7:
                    fe:97:b6:d7:cc:9f:08:50:d6:ff:db:a0:2f:7e:31:
                    37:e2:dd:0b:8f:66:a0:77:4b:b5:34:38:eb:f6:1b:
                    82:fb:60:b2:c8:09:5a:15:cc:f9:9b:b2:d7:fb:ce:
                    5f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5A:48:80:A8:EE:15:84:1B:6D:B0:C5:8E:55:BA:1F:F8:6C:76:58
            X509v3 Authority Key Identifier:
                keyid:02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/323830343a313431633a3a2f33322d313238203d3e203533313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:141c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:09:cd:df:94:6d:43:ce:66:38:9a:af:81:e2:83:19:df:f1:
         ac:29:ac:3d:ff:51:19:92:68:96:31:f7:83:cd:40:21:bd:4d:
         e3:38:ee:1a:78:9d:76:c3:7c:d5:b6:1b:cf:09:52:35:41:fb:
         45:85:38:eb:74:be:b4:c7:f1:d8:5f:82:bb:e8:e1:18:87:e8:
         4d:84:31:e9:45:a3:18:e7:b4:4c:99:97:4c:68:d2:16:f4:6c:
         02:8a:ab:1e:b7:fa:80:7d:3b:19:6a:24:3f:1a:3b:8c:8b:3c:
         46:c4:64:5a:45:8c:99:fc:87:e0:f2:e1:64:9f:36:c3:49:3b:
         88:d3:4b:99:ff:20:62:aa:7f:aa:0f:d8:26:64:82:11:73:52:
         52:a6:ce:6e:8c:09:f0:17:75:a2:d0:8d:92:b7:ff:77:29:0e:
         ad:df:e5:83:75:db:5f:e4:ab:55:5c:75:93:f7:d7:6d:da:0c:
         46:4e:ca:87:e1:36:fa:42:08:f1:7d:f6:4a:50:12:5a:2b:c3:
         00:27:9a:c6:1d:21:35:c9:bc:0e:e2:3a:13:d1:a3:b3:df:89:
         62:d3:1d:d3:c2:36:c2:14:a5:12:d7:a7:70:9a:39:48:cf:10:
         1a:e3:48:98:fc:06:14:2b:a4:18:b5:f5:91:bb:c6:69:89:9f:
         43:a6:c2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:43 2024 by rpki-client on console-fra.rpki-client.org