Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/1/323830343a383664633a3a2f33322d3332203d3e20323732363731.roa
File:                     323830343a383664633a3a2f33322d3332203d3e20323732363731.roa (raw, json)
Hash identifier:          qeHPvDGXw5hWChJBHrz9TkdAAe9bla/8oZUCJDQ5jyo=
Subject key identifier:   FC:73:4E:01:9D:A9:C5:87:61:6A:51:00:30:9F:AE:DF:11:8B:97:36
Certificate issuer:       /CN=89CC368C6617311D256B7895B2037F34C4664792
Certificate serial:       202C1F7896BC25FE46D4096947DAB84B3CD00AB7
Authority key identifier: 89:CC:36:8C:66:17:31:1D:25:6B:78:95:B2:03:7F:34:C4:66:47:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89CC368C6617311D256B7895B2037F34C4664792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/1/323830343a383664633a3a2f33322d3332203d3e20323732363731.roa
Signing time:             Thu 04 Apr 2024 01:51:57 +0000
ROA not before:           Thu 04 Apr 2024 01:46:57 +0000
ROA not after:            Thu 03 Apr 2025 01:51:57 +0000
asID:                     272671
IP address blocks:        2804:86dc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/1/89CC368C6617311D256B7895B2037F34C4664792.crl
                          rsync://rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/1/89CC368C6617311D256B7895B2037F34C4664792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89CC368C6617311D256B7895B2037F34C4664792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2c:1f:78:96:bc:25:fe:46:d4:09:69:47:da:b8:4b:3c:d0:0a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CC368C6617311D256B7895B2037F34C4664792
        Validity
            Not Before: Apr  4 01:46:57 2024 GMT
            Not After : Apr  3 01:51:57 2025 GMT
        Subject: CN=FC734E019DA9C587616A5100309FAEDF118B9736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7f:43:80:41:43:28:c1:5c:9a:82:bd:c4:27:
                    7b:a5:67:36:c5:a9:d4:b4:44:85:56:f4:4c:f0:19:
                    e3:7c:7d:2d:c9:1f:dd:db:a5:65:02:8e:89:f5:c3:
                    03:54:69:28:46:71:57:a5:c1:64:da:4c:1c:33:5b:
                    f0:24:d5:b6:44:b6:70:43:64:c4:a4:7d:0f:12:27:
                    13:c0:8d:db:bf:b2:e3:8c:ca:30:d5:6a:b4:aa:cd:
                    76:bd:3e:63:65:3d:57:0c:88:1b:9c:b2:2c:46:e1:
                    dc:76:7f:ed:dc:62:cc:95:71:ed:87:b7:d7:bc:d0:
                    c7:19:18:7b:97:da:7f:04:df:b8:d9:88:de:fa:f1:
                    be:e0:2e:ea:77:0a:44:55:11:f7:e3:81:a4:d6:da:
                    3c:aa:6c:46:37:0e:53:c8:45:4d:4a:b9:5b:1c:0d:
                    19:56:89:d8:61:80:21:72:a5:8f:f7:06:f7:5d:fe:
                    a3:82:0c:f4:d0:47:03:ea:c0:8b:00:2f:28:cd:3d:
                    fc:f3:28:93:20:9a:ed:b5:e6:6d:ad:fb:73:6c:f1:
                    c3:bf:42:17:6c:87:23:2f:52:ce:98:fe:18:fb:78:
                    ab:be:2b:b6:41:0c:dc:1b:ad:63:40:97:6d:9a:de:
                    08:90:1c:bf:47:ea:c3:2d:85:39:b9:d6:f8:3c:cc:
                    da:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:73:4E:01:9D:A9:C5:87:61:6A:51:00:30:9F:AE:DF:11:8B:97:36
            X509v3 Authority Key Identifier:
                keyid:89:CC:36:8C:66:17:31:1D:25:6B:78:95:B2:03:7F:34:C4:66:47:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/1/89CC368C6617311D256B7895B2037F34C4664792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89CC368C6617311D256B7895B2037F34C4664792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/1/323830343a383664633a3a2f33322d3332203d3e20323732363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:a7:f8:19:33:11:55:99:0d:3f:a8:4a:8b:67:1a:07:24:cf:
         80:18:f6:7c:c1:2c:cb:77:6c:fb:fd:6c:2a:49:03:44:33:0c:
         8c:ad:9e:e0:57:fc:75:b0:a4:29:a9:5b:13:4c:dc:63:7b:b2:
         c0:0d:cc:24:00:4a:e1:08:39:80:94:ea:33:e3:5c:10:c4:35:
         58:3b:29:49:7f:66:06:3a:bf:1c:05:50:1e:fa:10:50:a9:87:
         ac:a8:cf:ee:ba:74:fd:64:97:50:1c:3d:7f:e8:ce:a6:ac:66:
         43:93:fb:ff:8f:11:92:37:87:48:1a:bc:21:5f:cb:39:02:73:
         13:82:93:b8:c0:c7:0a:0d:c7:d2:31:70:f1:1a:55:b3:6c:23:
         f9:bd:90:32:02:95:86:02:79:5c:18:2a:a0:24:97:22:81:6f:
         77:11:12:2e:69:ae:e9:d8:3e:ad:aa:34:96:65:3e:06:fa:68:
         59:a1:30:e6:a4:0e:a5:38:e1:21:fd:45:4d:3b:77:ac:bb:1b:
         ee:25:81:b1:7f:96:ea:64:b0:7f:80:68:82:93:91:ab:d8:77:
         9f:28:69:23:d2:98:6e:27:72:5f:6e:42:39:64:73:08:90:c4:
         07:b9:2a:82:66:3d:c4:7c:f6:fe:68:f4:ff:29:b5:8b:32:c7:
         53:5e:d4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:19 2024 by rpki-client on console-ams.rpki-client.org