Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/323830343a316132633a3a2f33322d3332203d3e203631383432.roa
File:                     323830343a316132633a3a2f33322d3332203d3e203631383432.roa (raw, json)
Hash identifier:          Mt6SR9C6jApoKoEsp8nYZ5F7VbEuKDxogToxzDL9RPs=
Subject key identifier:   C8:45:AD:0C:27:37:FE:67:97:65:1F:EC:F9:1E:2A:AC:09:32:AF:F1
Certificate issuer:       /CN=18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE
Certificate serial:       36ED407457B1722B5DD38CFED7B21C4776E404D1
Authority key identifier: 18:FB:DB:75:17:89:A3:D1:CC:FA:7F:42:BC:38:F0:A8:CA:BA:F2:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/323830343a316132633a3a2f33322d3332203d3e203631383432.roa
Signing time:             Wed 03 Apr 2024 18:32:23 +0000
ROA not before:           Wed 03 Apr 2024 18:27:23 +0000
ROA not after:            Wed 02 Apr 2025 18:32:23 +0000
asID:                     61842
IP address blocks:        2804:1a2c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl
                          rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ed:40:74:57:b1:72:2b:5d:d3:8c:fe:d7:b2:1c:47:76:e4:04:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE
        Validity
            Not Before: Apr  3 18:27:23 2024 GMT
            Not After : Apr  2 18:32:23 2025 GMT
        Subject: CN=C845AD0C2737FE6797651FECF91E2AAC0932AFF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:58:ca:22:92:3b:3c:79:a0:d1:a3:86:86:7c:
                    bb:fd:f8:70:6c:54:72:5d:ed:2f:b9:6e:5a:90:1d:
                    9b:73:a9:99:3a:5d:94:9d:93:ef:4e:9b:f4:c8:43:
                    10:16:c0:4e:06:c4:88:33:71:77:3d:4c:0a:0b:44:
                    32:16:84:1f:eb:58:cf:60:93:bc:94:14:3b:12:fe:
                    f2:99:ec:a7:a6:e5:4e:c5:c1:14:d5:c9:18:be:b1:
                    45:1b:04:6e:6d:29:5d:df:b4:22:cc:64:0b:f7:d4:
                    02:86:34:a0:d5:f0:e7:be:f7:c5:35:25:be:14:5e:
                    aa:f9:1c:4f:2f:0c:db:94:9a:46:68:a7:89:ed:de:
                    ed:5d:a9:69:70:69:bf:85:95:fb:f3:dd:b5:9c:c6:
                    0e:7e:23:f1:bb:3b:72:dd:64:84:19:ba:59:96:65:
                    5a:1a:50:4f:c3:a0:78:da:f1:e9:7a:01:e7:6d:4c:
                    73:b6:ea:f2:cb:24:6c:81:f7:93:ef:8e:53:96:09:
                    93:78:83:a4:34:c5:02:88:d6:99:63:7a:36:74:a8:
                    72:70:fb:22:bc:db:bb:61:07:75:15:68:50:9d:06:
                    2f:51:8d:3c:eb:06:7f:6e:c4:d4:55:31:21:3c:c7:
                    88:a2:af:0a:4d:4d:4f:39:8d:72:cd:54:1b:1c:1c:
                    16:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:45:AD:0C:27:37:FE:67:97:65:1F:EC:F9:1E:2A:AC:09:32:AF:F1
            X509v3 Authority Key Identifier:
                keyid:18:FB:DB:75:17:89:A3:D1:CC:FA:7F:42:BC:38:F0:A8:CA:BA:F2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/323830343a316132633a3a2f33322d3332203d3e203631383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:bb:ad:d6:fd:6b:e9:d0:00:2a:87:93:cf:07:11:83:0a:2b:
         bf:52:fb:3e:17:16:6f:14:51:9d:e8:a2:22:a0:6e:0d:e9:b8:
         22:39:7b:73:25:3f:ae:36:02:94:8c:25:4e:22:1a:7f:c1:eb:
         37:de:61:65:0c:73:e5:53:6c:42:74:8f:3e:30:bf:82:c3:62:
         7b:0a:ed:3a:60:51:dd:54:2b:2a:0b:dd:86:1f:f6:20:65:0c:
         12:0b:18:ac:69:70:2b:63:bc:f5:6d:0c:f3:70:dc:39:87:cf:
         6c:b4:63:63:ed:c4:c5:5c:ed:6c:f3:3a:06:cd:fe:15:e8:9a:
         c5:c4:8a:7f:18:a8:29:95:5b:d8:09:4d:ef:9a:a2:39:97:bb:
         4d:99:28:e6:54:3d:41:6d:56:68:cc:4e:9f:74:32:b8:8f:f2:
         5a:14:2d:4b:1e:ad:58:d4:ba:b5:c5:2b:a3:ba:4b:93:f7:e3:
         8d:4e:4d:e2:c2:1b:a6:5d:79:95:b1:9a:63:73:35:e2:5b:fe:
         b9:47:1c:0c:41:cd:88:79:76:94:8b:73:1f:7a:9f:29:f3:99:
         cd:3c:68:92:38:fb:3e:20:4c:49:7a:8f:e2:db:36:a5:fc:77:
         2e:42:e2:a9:24:fa:d4:a8:00:2a:d9:52:4d:3c:f9:e0:07:a9:
         87:34:0a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 09:54:28 2024 by rpki-client on console-fra.rpki-client.org