Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/323830343a323935383a3a2f33322d3336203d3e20323634303130.roa
File:                     323830343a323935383a3a2f33322d3336203d3e20323634303130.roa (raw, json)
Hash identifier:          RmWFfZfPFbC+fOPl2xnfHhgO19rdpvt6+hbhFuMBgG4=
Subject key identifier:   E1:A0:DB:1A:8A:92:73:54:2A:CF:3B:E3:31:9E:95:42:28:86:E3:AD
Certificate issuer:       /CN=37EC66E6D5153E335C4A11B51C7DFB481E91CB87
Certificate serial:       32628FD635EA134B26239368C2947FEEE30B0AC0
Authority key identifier: 37:EC:66:E6:D5:15:3E:33:5C:4A:11:B5:1C:7D:FB:48:1E:91:CB:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/323830343a323935383a3a2f33322d3336203d3e20323634303130.roa
Signing time:             Thu 04 Apr 2024 01:23:28 +0000
ROA not before:           Thu 04 Apr 2024 01:18:28 +0000
ROA not after:            Thu 03 Apr 2025 01:23:28 +0000
asID:                     264010
IP address blocks:        2804:2958::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.crl
                          rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:23:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:62:8f:d6:35:ea:13:4b:26:23:93:68:c2:94:7f:ee:e3:0b:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37EC66E6D5153E335C4A11B51C7DFB481E91CB87
        Validity
            Not Before: Apr  4 01:18:28 2024 GMT
            Not After : Apr  3 01:23:28 2025 GMT
        Subject: CN=E1A0DB1A8A9273542ACF3BE3319E95422886E3AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3e:de:f5:59:f2:fd:18:9f:3e:42:06:93:ed:
                    48:c1:60:4a:cb:82:49:13:d5:1a:41:2a:cd:be:93:
                    2c:d8:f3:57:43:67:dd:86:94:92:b6:c8:81:6b:a5:
                    e4:f0:76:c4:ce:d8:54:ec:75:ce:46:56:73:77:37:
                    96:b3:b0:29:77:c0:0f:3a:16:5c:af:3d:c0:ca:3d:
                    7b:b7:a7:b3:8d:4a:c2:e3:f4:2e:01:18:62:97:bd:
                    5e:fe:62:49:ea:c3:61:a3:04:87:49:80:36:f4:bc:
                    37:a7:7d:6f:bd:7a:59:2d:85:79:78:26:fa:83:a7:
                    8d:92:61:fb:c4:66:30:80:ba:12:88:d8:1c:53:04:
                    a8:5a:55:41:72:48:36:5b:10:24:68:dc:e9:d4:4b:
                    df:4f:5c:dd:fd:fb:ca:12:6d:d7:b1:0d:99:ca:b5:
                    8f:66:0c:86:11:e9:94:16:b5:f7:c0:fe:f3:16:78:
                    67:b7:6d:f0:71:85:7c:7d:a0:28:bc:bc:85:2f:e3:
                    0e:af:e5:7e:25:92:56:d5:33:08:18:6e:e6:c0:b3:
                    2d:a8:4a:c6:4d:3c:63:9e:14:a1:17:4c:49:3e:ea:
                    8e:68:3b:ef:7b:33:ba:e9:03:d0:95:8c:ec:ce:23:
                    ce:0b:26:b4:06:64:89:25:28:3a:d2:09:4b:a8:8a:
                    f5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A0:DB:1A:8A:92:73:54:2A:CF:3B:E3:31:9E:95:42:28:86:E3:AD
            X509v3 Authority Key Identifier:
                keyid:37:EC:66:E6:D5:15:3E:33:5C:4A:11:B5:1C:7D:FB:48:1E:91:CB:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/323830343a323935383a3a2f33322d3336203d3e20323634303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2958::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:1b:03:7d:3b:ce:43:95:4f:49:05:da:d0:23:b7:0f:ee:ea:
         f1:2d:1e:cc:00:89:a6:8f:b5:70:a1:f1:4e:e2:91:01:9d:61:
         28:8b:76:5b:74:0a:85:8e:9a:62:9c:94:f6:96:5b:37:06:5c:
         f6:d8:3f:3b:0e:3c:61:f0:ec:05:58:5e:b6:fe:74:d6:c4:97:
         ee:6d:77:22:26:c1:a0:d8:b2:f7:dc:f2:5c:c3:48:c4:04:0f:
         fa:70:4a:f6:06:e7:a1:2e:01:09:e7:81:44:5b:aa:53:25:70:
         05:c1:c9:1f:3d:6c:01:3e:6b:6e:a8:7f:c6:1c:5f:03:4e:ae:
         83:d0:ab:ee:ff:85:d2:a5:15:21:49:20:38:63:74:f4:af:1e:
         1c:fe:f2:41:56:38:a5:d4:b2:6f:f7:70:de:5d:e9:05:72:6e:
         21:8e:24:3b:eb:e2:34:13:bb:05:89:a2:d6:ed:fd:3a:66:d2:
         20:d8:90:c8:4a:ac:5c:6c:2d:78:41:f9:e3:5e:c8:f0:fc:9a:
         7e:62:bd:3f:6c:1c:bd:de:25:cd:07:55:43:0f:29:8f:46:63:
         bf:53:4c:63:a6:21:16:83:4c:88:4e:9a:30:88:1e:9b:2f:68:
         94:b2:39:fc:39:0a:94:cb:be:07:c6:78:e4:d4:f5:a7:10:98:
         ae:11:b2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:09 2024 by rpki-client on console-fra.rpki-client.org