Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/323830343a323932383a3a2f33322d313238203d3e203532393531.roa
File:                     323830343a323932383a3a2f33322d313238203d3e203532393531.roa (raw, json)
Hash identifier:          /nDfUSIGt3w2qb8cIyd9zG13Ny+L6QSrLCgYOgOkVf8=
Subject key identifier:   96:F3:26:31:49:FD:52:F4:9B:58:5E:80:0B:C6:E6:40:0B:27:73:AF
Certificate issuer:       /CN=00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC
Certificate serial:       2B262D7BC9D6D08470954EC65C45225B068F19CD
Authority key identifier: 00:BB:B3:56:86:5E:E3:E5:E7:33:9D:4D:63:3A:DE:63:B5:EA:6A:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/323830343a323932383a3a2f33322d313238203d3e203532393531.roa
Signing time:             Thu 04 Apr 2024 06:00:14 +0000
ROA not before:           Thu 04 Apr 2024 05:55:14 +0000
ROA not after:            Thu 03 Apr 2025 06:00:14 +0000
asID:                     52951
IP address blocks:        2804:2928::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.crl
                          rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:26:2d:7b:c9:d6:d0:84:70:95:4e:c6:5c:45:22:5b:06:8f:19:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC
        Validity
            Not Before: Apr  4 05:55:14 2024 GMT
            Not After : Apr  3 06:00:14 2025 GMT
        Subject: CN=96F3263149FD52F49B585E800BC6E6400B2773AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f0:95:ce:15:11:e4:eb:33:74:d0:a8:14:fe:
                    e1:82:d3:83:ad:e5:14:da:25:c5:d3:82:ef:6c:ce:
                    5f:c9:f7:7e:17:42:18:61:d8:f0:62:d2:49:9f:80:
                    b1:ad:e6:bf:07:a0:f6:20:67:cd:ec:d6:0e:44:95:
                    a5:d8:0d:fc:be:f6:f5:8e:02:d1:7b:2e:46:f2:b0:
                    de:88:f7:b3:5d:0e:d5:33:96:ad:ee:25:13:da:94:
                    2a:46:db:67:12:70:68:98:18:e3:32:a7:9c:3d:b3:
                    34:3c:ed:bc:3f:33:c8:22:e1:f2:4d:b6:61:e4:07:
                    f4:16:38:16:ec:c8:3b:df:e0:7c:00:f2:db:17:4d:
                    06:d4:00:bd:29:3e:54:69:5a:6f:4b:aa:eb:62:e8:
                    d0:7b:88:cb:78:3a:bf:3d:8c:01:07:b9:6a:d7:34:
                    e8:90:4a:0e:d7:ba:d2:e1:eb:65:39:12:03:94:cc:
                    38:c7:19:88:cf:0c:bd:34:9c:12:ae:7c:67:0f:21:
                    50:70:f7:18:ca:91:9f:a2:32:c3:bd:e5:de:97:8c:
                    99:33:5d:28:f4:61:a6:65:ab:c8:b0:a5:f5:29:06:
                    38:27:63:8e:b2:98:95:d1:53:9e:68:36:a1:00:90:
                    29:86:5e:b3:91:8c:ec:cf:5d:4e:58:80:a1:8a:05:
                    7d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F3:26:31:49:FD:52:F4:9B:58:5E:80:0B:C6:E6:40:0B:27:73:AF
            X509v3 Authority Key Identifier:
                keyid:00:BB:B3:56:86:5E:E3:E5:E7:33:9D:4D:63:3A:DE:63:B5:EA:6A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/323830343a323932383a3a2f33322d313238203d3e203532393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2928::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:92:2d:01:6b:24:84:bd:86:fc:54:30:35:9a:8e:b5:8f:0d:
         fa:1a:a3:b9:8a:cd:db:11:48:18:e6:7e:66:93:dd:34:e5:7d:
         b2:25:32:c8:8c:9a:43:b0:d9:7d:25:6a:27:d0:9f:5a:ca:27:
         b8:be:b1:dc:40:0d:4d:16:b8:c7:29:98:39:ca:5f:32:f0:aa:
         6d:6e:48:94:c4:3d:d2:50:bd:d9:05:a2:6f:2c:f6:a7:8c:1f:
         1e:e4:07:69:2e:ed:f9:79:76:00:b9:83:a0:aa:40:9b:c8:a7:
         53:5a:35:40:c4:23:30:7a:33:29:3c:41:9b:b4:f0:fa:4a:e6:
         6b:c6:ea:ff:ba:96:35:81:d3:3d:75:a8:6e:94:d8:94:67:fb:
         93:16:63:62:d5:45:78:c9:1b:a4:87:d0:69:56:41:cd:2a:c4:
         90:67:fb:8e:61:ae:f8:a9:2e:41:60:cf:83:ba:65:fe:dd:fb:
         d6:54:58:f7:d8:8a:92:c8:c3:c2:bc:63:5f:84:b1:07:e4:3e:
         6f:9c:ac:d8:c4:f0:e0:ca:f4:8f:8e:36:57:c9:75:02:e3:0e:
         fb:72:4e:9c:c3:90:32:2e:0e:70:57:b5:da:fb:38:a2:94:3c:
         26:09:8a:01:93:14:66:e2:69:ab:28:2a:52:83:f6:2d:d4:fb:
         b4:84:23:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:11 2024 by rpki-client on console-fra.rpki-client.org