Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/323830343a316331633a3a2f33322d313238203d3e203631363338.roa
File:                     323830343a316331633a3a2f33322d313238203d3e203631363338.roa (raw, json)
Hash identifier:          NSfDhNVy12WQmSMY1GREgtG473ugEFGZACTbvjJiHLs=
Subject key identifier:   79:2D:FB:44:D7:95:AC:C6:F8:3F:C6:60:2F:04:7D:7D:C1:AB:8A:B3
Certificate issuer:       /CN=28BD0171C54D34121D1DBDC77B512CBC25BED64F
Certificate serial:       1B244ECD38313A9883E1144F363C2479D29E0AC2
Authority key identifier: 28:BD:01:71:C5:4D:34:12:1D:1D:BD:C7:7B:51:2C:BC:25:BE:D6:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/323830343a316331633a3a2f33322d313238203d3e203631363338.roa
Signing time:             Wed 03 Apr 2024 20:28:53 +0000
ROA not before:           Wed 03 Apr 2024 20:23:53 +0000
ROA not after:            Wed 02 Apr 2025 20:28:53 +0000
asID:                     61638
IP address blocks:        2804:1c1c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.crl
                          rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:24:4e:cd:38:31:3a:98:83:e1:14:4f:36:3c:24:79:d2:9e:0a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD0171C54D34121D1DBDC77B512CBC25BED64F
        Validity
            Not Before: Apr  3 20:23:53 2024 GMT
            Not After : Apr  2 20:28:53 2025 GMT
        Subject: CN=792DFB44D795ACC6F83FC6602F047D7DC1AB8AB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:29:4e:35:10:5a:a9:92:33:ae:bb:9c:35:a5:
                    ac:05:6e:f2:c7:ab:59:0d:38:2c:3a:57:12:d7:e3:
                    77:83:4a:cc:59:4e:0d:f6:15:73:1f:9d:ee:be:5b:
                    f4:9f:63:f5:ba:de:44:58:9f:39:36:19:d2:a5:aa:
                    04:22:d0:a4:a2:a0:62:2c:fb:f7:38:a4:69:df:b4:
                    bd:82:00:e2:b7:1d:bc:89:58:87:de:b6:db:9c:4e:
                    46:21:e4:79:72:83:90:17:5d:14:3c:56:46:92:54:
                    dc:9b:d8:23:c1:19:78:f3:cb:0c:d6:e1:d4:0a:4f:
                    4e:29:52:51:3f:a5:33:d0:04:fb:b1:2a:6f:ae:4d:
                    17:1a:7f:76:d5:9c:85:02:36:01:a5:fd:ec:d9:3e:
                    17:eb:75:20:de:6d:ae:a5:7c:fb:79:a1:54:9f:75:
                    a7:bc:a7:b6:82:78:0f:bf:a1:7c:8c:cc:8e:88:e8:
                    b0:6e:a1:8a:c0:56:b8:b8:0c:c5:14:00:e7:39:3d:
                    d9:a8:89:fe:b3:74:17:e1:7d:76:01:20:3b:af:bf:
                    4b:25:7e:f6:5a:7b:5d:6c:81:13:c3:11:92:e8:78:
                    e9:f5:ea:e3:8e:d1:c1:5e:67:f6:a6:22:9c:58:f5:
                    2b:66:b4:a6:41:05:38:0e:c2:35:2b:11:bd:91:fd:
                    6e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2D:FB:44:D7:95:AC:C6:F8:3F:C6:60:2F:04:7D:7D:C1:AB:8A:B3
            X509v3 Authority Key Identifier:
                keyid:28:BD:01:71:C5:4D:34:12:1D:1D:BD:C7:7B:51:2C:BC:25:BE:D6:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/323830343a316331633a3a2f33322d313238203d3e203631363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:12:e7:b0:7e:ef:ea:11:54:c4:1a:0b:c7:0b:ea:ae:30:b6:
         70:d0:f0:2b:d2:fb:f8:68:6b:a9:17:50:25:72:c8:0b:c3:50:
         54:bc:99:21:78:c2:3e:c7:71:b2:05:d6:63:9c:95:12:83:8b:
         5d:82:85:6c:1e:05:6c:62:0f:f9:d6:44:91:b7:8a:68:3d:39:
         41:0f:ed:ca:b7:0f:6e:10:ed:ee:2e:51:02:a6:67:14:64:26:
         73:46:d5:9f:25:38:1a:de:a1:70:1f:a0:65:db:bc:81:87:22:
         0f:ba:a7:9d:81:c4:e6:92:38:1e:84:d2:ef:ec:a1:8f:86:da:
         87:bb:35:ce:ea:f5:34:38:e6:4f:b5:e0:fb:a9:2f:1d:f2:65:
         4d:ec:0a:7b:3d:76:12:27:fb:cf:da:ab:38:78:80:d0:94:a1:
         fd:be:86:ed:b1:7b:9a:da:81:b9:5b:8b:62:1f:c4:2c:54:96:
         4e:66:6f:d7:68:07:2e:ce:72:c5:a0:24:8b:f7:ee:50:5f:00:
         cd:e1:c5:1f:1f:31:29:c4:00:b1:a3:3a:24:7d:fd:4e:b8:f6:
         af:6a:5b:21:42:07:d2:28:ac:73:91:e3:89:2a:0c:d8:1a:13:
         c5:2c:7e:4c:8b:b3:97:05:fe:82:f3:20:3d:f0:52:f8:4f:ed:
         f4:b3:96:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:30 2024 by rpki-client on console-fra.rpki-client.org