Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/323830343a3763383a3a2f33322d3438203d3e20323632333233.roa
File:                     323830343a3763383a3a2f33322d3438203d3e20323632333233.roa (raw, json)
Hash identifier:          fpo95rV5WZeUZgFtDR3mBb+ALF9H5Eg/ZxnTtiz2OEc=
Subject key identifier:   79:6F:AC:2D:59:63:19:63:5F:A0:5D:9E:66:E3:32:32:0D:0F:E3:9A
Certificate issuer:       /CN=BF6A5837C3F4344BD78A072E1B9834FDE6824283
Certificate serial:       1E813CC9105EB781E4663B3B14ED9139CA23F47D
Authority key identifier: BF:6A:58:37:C3:F4:34:4B:D7:8A:07:2E:1B:98:34:FD:E6:82:42:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/323830343a3763383a3a2f33322d3438203d3e20323632333233.roa
Signing time:             Thu 04 Apr 2024 08:22:47 +0000
ROA not before:           Thu 04 Apr 2024 08:17:47 +0000
ROA not after:            Thu 03 Apr 2025 08:22:47 +0000
asID:                     262323
IP address blocks:        2804:7c8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.crl
                          rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:59:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:81:3c:c9:10:5e:b7:81:e4:66:3b:3b:14:ed:91:39:ca:23:f4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF6A5837C3F4344BD78A072E1B9834FDE6824283
        Validity
            Not Before: Apr  4 08:17:47 2024 GMT
            Not After : Apr  3 08:22:47 2025 GMT
        Subject: CN=796FAC2D596319635FA05D9E66E332320D0FE39A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fb:6d:aa:c3:9d:32:0f:0a:17:5a:1b:56:10:
                    ea:3f:6e:56:f2:2b:91:47:29:0c:06:50:71:69:c5:
                    46:e7:5a:b6:eb:ab:dd:17:c0:19:4e:14:9c:e0:4b:
                    22:db:a3:db:74:e3:dc:7e:45:1b:ce:24:6b:77:bd:
                    5f:5a:00:09:d9:61:02:2d:44:a2:a0:f3:13:71:a5:
                    ba:17:05:66:d0:f8:c4:57:df:9f:55:9c:05:bd:30:
                    d7:25:5c:64:83:1f:84:2b:33:19:a3:5c:6b:39:db:
                    6b:06:73:45:94:b6:b9:1a:30:46:c0:88:54:ef:30:
                    a9:4a:a4:4f:5a:b8:a5:16:5c:dc:b2:84:18:e3:83:
                    d3:d7:ff:ba:25:83:eb:65:15:be:29:00:98:72:59:
                    c5:7b:31:f2:87:b3:f3:b1:a6:53:97:15:d4:86:56:
                    1b:a0:0f:65:30:b2:62:6b:9c:e6:73:dc:e1:c8:56:
                    9e:be:65:78:5f:96:df:bb:55:71:58:78:73:60:96:
                    06:73:d4:d7:dc:42:2a:8b:ad:2a:5e:ed:c8:98:9c:
                    98:5b:df:85:9c:f3:1e:90:ad:12:ec:6c:24:60:81:
                    f5:ad:b9:54:4a:53:43:29:6d:3d:e3:bd:05:fd:62:
                    05:b4:f5:22:99:ea:5c:34:c6:b4:24:a4:f7:0a:ed:
                    80:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6F:AC:2D:59:63:19:63:5F:A0:5D:9E:66:E3:32:32:0D:0F:E3:9A
            X509v3 Authority Key Identifier:
                keyid:BF:6A:58:37:C3:F4:34:4B:D7:8A:07:2E:1B:98:34:FD:E6:82:42:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/323830343a3763383a3a2f33322d3438203d3e20323632333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         e1:7f:cf:72:49:61:60:1a:b8:e5:26:d8:12:0d:33:66:22:c8:
         f3:a9:e2:3f:11:31:58:b5:cb:63:4b:3b:99:61:ef:9f:21:43:
         41:88:09:fd:fd:cf:54:d0:34:4b:a8:aa:b7:03:95:67:52:9b:
         ed:d2:7f:6e:15:4d:04:4f:55:23:ed:37:2f:2d:9c:e5:17:77:
         e3:31:64:27:f7:fc:f7:8d:6f:d9:3a:de:67:25:18:aa:4e:39:
         a1:b8:68:17:ed:4b:8e:6f:89:07:05:ad:cb:bb:3f:3c:6e:81:
         80:f5:d6:7f:c4:f3:f0:2c:c7:81:77:63:d5:bd:6e:3c:95:ec:
         00:85:94:68:31:d2:fd:af:00:9b:5a:48:4c:40:f4:20:bb:34:
         c2:14:7a:8e:22:72:7e:8b:37:ec:63:9e:01:cc:ca:7d:78:f2:
         28:54:85:3f:1e:5c:a5:cf:9b:b6:8f:22:39:0d:f0:5a:95:0e:
         c9:2d:21:61:03:82:74:c8:42:04:aa:a5:d6:39:6f:29:70:f2:
         3b:12:b0:d3:40:13:89:7f:53:4c:e4:b0:30:a4:92:ea:0a:05:
         4c:c0:55:a1:21:a4:71:6a:5b:d5:f1:db:02:49:36:d5:8e:eb:
         6f:be:67:db:eb:39:93:50:ee:b0:cd:42:d1:13:db:61:d2:25:
         fb:b9:86:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:24 2024 by rpki-client on console-ams.rpki-client.org