Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/323830343a336435633a3a2f33322d3336203d3e20323636353236.roa
File:                     323830343a336435633a3a2f33322d3336203d3e20323636353236.roa (raw, json)
Hash identifier:          OfzyWDXhuzG5uUADTwn4BprZyf07423h7tSBlNp+59k=
Subject key identifier:   E0:75:9D:8C:C2:EA:8A:A9:E3:A5:06:D4:C7:AD:2E:9C:FB:84:59:85
Certificate issuer:       /CN=32068CEB1B931618FB29A0ECD52F9D22FB0304DA
Certificate serial:       6BA3A3F783E643AABF4DD43E7F20A4D243036788
Authority key identifier: 32:06:8C:EB:1B:93:16:18:FB:29:A0:EC:D5:2F:9D:22:FB:03:04:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/323830343a336435633a3a2f33322d3336203d3e20323636353236.roa
Signing time:             Thu 04 Apr 2024 09:25:12 +0000
ROA not before:           Thu 04 Apr 2024 09:20:12 +0000
ROA not after:            Thu 03 Apr 2025 09:25:12 +0000
asID:                     266526
IP address blocks:        2804:3d5c::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.crl
                          rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a3:a3:f7:83:e6:43:aa:bf:4d:d4:3e:7f:20:a4:d2:43:03:67:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32068CEB1B931618FB29A0ECD52F9D22FB0304DA
        Validity
            Not Before: Apr  4 09:20:12 2024 GMT
            Not After : Apr  3 09:25:12 2025 GMT
        Subject: CN=E0759D8CC2EA8AA9E3A506D4C7AD2E9CFB845985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:da:8f:44:3f:8c:b4:f4:1b:de:68:78:3b:4d:
                    fb:0b:28:f1:e7:55:d9:79:69:03:86:4a:4e:73:0d:
                    20:83:e2:e4:57:49:9f:31:2a:28:55:11:52:5b:e7:
                    f4:04:5c:13:f1:cc:a0:8d:6f:ce:40:07:8e:86:f9:
                    67:3e:1f:2c:3b:b8:9f:0f:20:92:cb:05:3c:bf:da:
                    e9:36:92:df:a1:50:b7:25:34:f1:3e:01:67:59:ea:
                    37:93:c0:ab:e8:db:d9:22:88:43:ef:d2:89:bb:78:
                    92:5b:8d:f7:94:75:55:a4:3d:5e:60:54:09:31:34:
                    ec:60:33:ba:77:e7:bf:57:c1:e4:7a:d5:b6:34:11:
                    a4:9c:3c:e6:25:8f:a2:6c:58:81:42:b3:a4:7f:19:
                    44:ea:c9:47:0f:e1:ca:09:3d:f7:51:93:ef:69:b9:
                    d1:4a:64:76:a2:2a:22:db:87:39:0e:f7:a2:49:cf:
                    ad:33:08:f3:d7:9a:9f:53:fc:ad:5a:2a:4f:9a:21:
                    74:0e:2c:5c:8b:16:99:16:05:e1:5a:0f:2b:c3:2a:
                    e2:fe:cc:cd:c7:1a:ad:57:48:06:a1:c2:d1:2b:b0:
                    8c:c9:fc:48:41:04:15:2c:f3:b3:78:88:b6:cc:96:
                    d0:06:8e:c2:38:8f:68:d8:2c:6d:83:38:2b:13:ce:
                    03:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:75:9D:8C:C2:EA:8A:A9:E3:A5:06:D4:C7:AD:2E:9C:FB:84:59:85
            X509v3 Authority Key Identifier:
                keyid:32:06:8C:EB:1B:93:16:18:FB:29:A0:EC:D5:2F:9D:22:FB:03:04:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/323830343a336435633a3a2f33322d3336203d3e20323636353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:e0:bc:b4:0d:88:1f:a0:78:f2:a4:86:13:1f:f4:00:4d:1f:
         69:d9:8e:86:46:38:80:f7:3d:f9:75:16:bd:ff:5d:82:91:9e:
         fc:1e:43:5a:2f:8e:17:7c:e7:7e:7e:54:72:16:f5:02:1a:80:
         6f:e0:f7:30:61:aa:ba:7c:57:24:98:94:fe:67:5f:7c:d2:fe:
         c0:33:7b:1f:92:ae:3a:41:2d:92:43:2f:17:8c:ec:b1:94:df:
         6a:8a:93:6f:2f:6d:b1:48:ac:4f:44:bb:89:16:49:ec:5f:d0:
         1e:d6:a8:b8:15:31:90:30:1b:41:f3:35:23:15:00:18:10:36:
         42:7d:d1:53:60:ca:e7:6c:06:d4:89:01:0a:8f:3d:e8:90:fd:
         66:8f:56:a5:0e:ef:30:3d:b9:8d:3a:19:45:c4:f1:c0:85:c8:
         85:3d:fc:25:02:ca:09:59:f9:b5:59:b2:53:8e:cc:dc:81:c9:
         03:63:aa:28:cd:a3:f8:1b:f9:49:24:63:a8:e4:15:e3:90:d5:
         2f:ff:a7:92:59:fb:77:a1:33:d0:93:51:ac:56:e6:77:6e:66:
         65:32:39:af:3a:ef:94:f3:f6:46:3d:e9:d3:10:83:1a:c2:2a:
         3c:98:05:5f:78:d6:bd:73:2e:38:7e:0b:32:66:40:e9:e7:bc:
         ed:66:fb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:26 2024 by rpki-client on console-ams.rpki-client.org