Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/323830343a3366383a3a2f33322d3438203d3e20323632353839.roa
File:                     323830343a3366383a3a2f33322d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          e78I0Ssw2e4XweC3va1jwfCR1C35hHlsACKHUSnaXMI=
Subject key identifier:   44:92:B1:59:30:A4:63:E4:DA:C9:3B:C0:39:90:D5:87:7E:76:FD:83
Certificate issuer:       /CN=BACB501EDCAB377D2343D4379062CDF97EA26F66
Certificate serial:       61B96F5723F0A20CA9C4406302AE3AB1388609FA
Authority key identifier: BA:CB:50:1E:DC:AB:37:7D:23:43:D4:37:90:62:CD:F9:7E:A2:6F:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/323830343a3366383a3a2f33322d3438203d3e20323632353839.roa
Signing time:             Fri 05 Apr 2024 03:32:30 +0000
ROA not before:           Fri 05 Apr 2024 03:27:30 +0000
ROA not after:            Fri 04 Apr 2025 03:32:30 +0000
asID:                     262589
IP address blocks:        2804:3f8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b9:6f:57:23:f0:a2:0c:a9:c4:40:63:02:ae:3a:b1:38:86:09:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BACB501EDCAB377D2343D4379062CDF97EA26F66
        Validity
            Not Before: Apr  5 03:27:30 2024 GMT
            Not After : Apr  4 03:32:30 2025 GMT
        Subject: CN=4492B15930A463E4DAC93BC03990D5877E76FD83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dc:26:87:97:1a:e4:17:fa:6b:73:a8:2b:60:
                    6b:a5:18:26:a2:91:91:97:d3:25:e1:62:f1:e6:86:
                    4e:77:47:ec:90:83:1e:08:b3:a2:ed:5d:83:45:44:
                    59:8f:f7:1d:3a:1c:eb:df:2e:81:10:32:c8:99:30:
                    23:7a:fb:26:91:df:b9:6f:30:97:43:0f:ac:46:06:
                    be:6d:2d:38:97:d1:25:5f:e7:cb:26:8d:e8:94:64:
                    ac:75:1b:4a:9c:ba:3c:6f:4c:e0:b3:30:6a:f9:04:
                    e1:b7:a1:92:f5:80:26:7f:45:1e:50:fa:26:23:75:
                    1d:6e:c4:81:e6:2f:b3:7d:c2:d8:3d:38:b7:83:ef:
                    c7:3f:a5:ab:ec:cc:9d:14:fa:2c:82:e0:02:fe:71:
                    ba:bd:e0:8d:78:9e:37:48:ba:cf:48:83:68:0d:28:
                    4d:81:41:fd:23:58:10:56:32:06:0a:28:97:38:7b:
                    41:2e:74:41:50:83:f6:8c:a2:6b:e5:88:ff:9f:3d:
                    a4:f8:38:d1:f8:f7:9c:7e:eb:26:f5:0a:d3:55:47:
                    e2:0b:4d:80:ac:b4:21:44:ac:bd:be:a8:0f:af:ef:
                    bc:1f:aa:a9:dd:8b:d4:39:ec:36:6c:ac:97:15:69:
                    38:a0:e8:ea:12:8b:5b:b8:c0:2e:44:b2:bb:44:11:
                    c8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:92:B1:59:30:A4:63:E4:DA:C9:3B:C0:39:90:D5:87:7E:76:FD:83
            X509v3 Authority Key Identifier:
                keyid:BA:CB:50:1E:DC:AB:37:7D:23:43:D4:37:90:62:CD:F9:7E:A2:6F:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/323830343a3366383a3a2f33322d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:10:dd:38:ff:64:f0:96:52:13:9a:88:9f:59:ba:e1:3c:d2:
         97:5a:86:4a:3d:f7:fc:f6:16:2e:7d:c6:74:d3:3f:dd:7f:d1:
         24:fa:f6:d7:dd:c2:2f:a7:d8:00:91:65:51:ce:f1:77:0c:ce:
         57:a8:f1:a4:a6:bb:ef:f8:9e:44:56:ca:09:e2:7c:6a:c9:6b:
         3c:4b:5c:20:1a:19:8f:17:42:9b:94:97:d5:4f:5f:22:d2:98:
         de:4c:c1:5a:63:a5:18:12:64:35:8a:ec:08:b6:7d:1b:99:70:
         e9:c6:c1:5e:e7:a4:88:c1:b1:53:41:4d:7e:2d:0a:40:d7:ef:
         52:7c:92:af:47:d5:9b:05:57:4c:0c:8c:89:5f:9b:29:b9:fa:
         72:f2:d8:7c:9c:6f:dc:3d:1f:12:11:ba:1c:e0:5e:87:90:e9:
         49:40:ce:5d:ba:c8:8e:b9:18:e6:ca:38:b3:48:77:6b:b5:6c:
         15:70:34:43:53:ef:2a:a2:78:72:89:1c:6e:16:7b:89:de:4f:
         a7:1e:7f:54:34:ae:91:e2:b2:ab:a3:cf:eb:98:48:b9:a4:d3:
         ad:52:ec:1e:14:3b:53:e0:92:4a:89:a9:f4:da:b1:46:e5:87:
         ad:e6:e5:e2:eb:97:07:19:ee:35:a6:3d:1f:bf:a4:6b:ba:70:
         68:c7:d6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:26 2024 by rpki-client on console-ams.rpki-client.org