Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/323830343a323163383a3a2f33322d3438203d3e20323634353733.roa
File:                     323830343a323163383a3a2f33322d3438203d3e20323634353733.roa (raw, json)
Hash identifier:          VR63Efa268I0ZrM67ciTftBstiAUx3CTCoo5zgcgg2c=
Subject key identifier:   81:1E:84:C5:43:10:95:DF:B0:F1:B1:8F:F5:59:68:BF:7E:15:8A:3C
Certificate issuer:       /CN=DF915FC701D29BA7ABB1E98C2A4207E51058EE32
Certificate serial:       1592B2E40226AA5EE04024D7EAF4F8B54E2974FE
Authority key identifier: DF:91:5F:C7:01:D2:9B:A7:AB:B1:E9:8C:2A:42:07:E5:10:58:EE:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/323830343a323163383a3a2f33322d3438203d3e20323634353733.roa
Signing time:             Thu 04 Apr 2024 07:59:19 +0000
ROA not before:           Thu 04 Apr 2024 07:54:19 +0000
ROA not after:            Thu 03 Apr 2025 07:59:19 +0000
asID:                     264573
IP address blocks:        2804:21c8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.crl
                          rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:04:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:92:b2:e4:02:26:aa:5e:e0:40:24:d7:ea:f4:f8:b5:4e:29:74:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF915FC701D29BA7ABB1E98C2A4207E51058EE32
        Validity
            Not Before: Apr  4 07:54:19 2024 GMT
            Not After : Apr  3 07:59:19 2025 GMT
        Subject: CN=811E84C5431095DFB0F1B18FF55968BF7E158A3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:78:7e:db:f7:3d:f7:c0:dd:87:d6:7f:50:8d:
                    88:ba:15:e7:5f:f1:3d:49:ae:1c:77:b1:46:19:6e:
                    2c:5c:48:1e:ef:38:f9:d2:57:07:45:bf:95:8f:da:
                    8d:ca:d9:57:6b:33:eb:6d:d0:9c:0e:92:20:aa:6d:
                    e7:3e:0a:7b:cd:02:ed:4b:14:13:09:ed:ce:7f:31:
                    48:f6:96:e1:7e:0d:ad:6b:3b:38:20:bd:2d:26:8e:
                    2f:03:68:8e:94:3d:9d:91:5e:7f:66:2e:41:ee:7b:
                    84:53:30:f5:8d:c6:af:fd:e1:87:a5:b5:d0:d5:3b:
                    19:1f:cc:04:8f:28:94:8e:f5:75:85:40:79:fd:fe:
                    73:e7:bf:5f:93:cb:70:89:08:d7:c7:36:2c:10:18:
                    8e:67:5d:a8:a3:85:f4:bc:23:ed:c1:b7:e9:d9:1d:
                    99:62:74:4c:d3:ab:7d:0b:42:b6:71:99:01:2d:1e:
                    ca:b0:85:5e:b9:92:3c:e8:89:9f:a2:84:63:81:71:
                    86:74:61:c4:f3:4e:18:21:f9:0b:fd:fc:8f:be:a7:
                    29:7e:07:4d:d7:dc:4e:86:75:72:7b:80:88:fa:b7:
                    91:5f:e5:47:55:81:5a:96:86:f6:c3:2f:95:4e:2e:
                    57:f1:da:f9:1f:bd:0b:dc:c7:af:07:8b:a9:16:35:
                    6b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1E:84:C5:43:10:95:DF:B0:F1:B1:8F:F5:59:68:BF:7E:15:8A:3C
            X509v3 Authority Key Identifier:
                keyid:DF:91:5F:C7:01:D2:9B:A7:AB:B1:E9:8C:2A:42:07:E5:10:58:EE:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/323830343a323163383a3a2f33322d3438203d3e20323634353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:56:19:39:cc:63:2c:fc:67:c0:a2:c3:26:d2:05:f8:d6:54:
         be:8d:0b:87:18:cd:6d:f4:34:4a:c5:e0:0e:56:e3:ff:76:ba:
         b0:18:ab:73:1f:c8:fe:44:09:04:28:72:41:ac:6b:09:a4:32:
         62:db:48:6a:95:d6:32:13:8d:b8:a1:7b:98:43:ca:03:e3:f3:
         7f:b2:d0:b8:5b:55:08:65:15:67:1d:35:a5:62:69:3d:0e:8b:
         03:aa:b7:35:53:d5:52:90:b7:79:d6:c2:54:d2:4a:ef:00:c4:
         f1:2b:3c:1c:e1:d3:b4:de:42:d2:03:3e:a6:a7:78:ad:6f:87:
         ad:22:0d:18:a2:b9:a9:45:a1:dd:21:58:79:48:3c:9a:22:ab:
         41:06:7a:a6:6c:1f:39:4f:5f:ef:71:d9:e3:d5:d5:ae:75:39:
         b6:24:2d:62:6c:12:03:2c:ce:f0:ca:d4:95:fc:8a:c6:5d:6b:
         63:47:8a:a4:cc:e3:ba:81:8b:08:0d:74:a2:b3:d6:8f:48:a8:
         26:9b:f8:9a:d9:90:d2:58:50:cc:6e:59:61:ac:c3:83:eb:90:
         89:3d:93:eb:44:2f:c4:b9:8b:63:88:cf:86:43:0d:40:75:4b:
         75:cb:7d:1d:90:a2:e4:d8:27:a0:93:d5:29:5c:2a:6c:62:fa:
         3d:fd:ad:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:21 2024 by rpki-client on console-fra.rpki-client.org