Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/323830343a333664343a343030303a3a2f33342d3334203d3e20323636333735.roa
File:                     323830343a333664343a343030303a3a2f33342d3334203d3e20323636333735.roa (raw, json)
Hash identifier:          UbKMC3llxmL0kAHUsESlg/m7gxh4Y92hu4XhRwMIlXc=
Subject key identifier:   BB:0A:6F:66:7C:C0:88:F6:6E:0D:CB:35:24:D7:CC:5E:A6:A5:80:36
Certificate issuer:       /CN=52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F
Certificate serial:       73DA0DD7191287123CE8E0F0046FDB4E3D1F4E8B
Authority key identifier: 52:DC:1D:0D:4D:A2:70:64:6A:5C:C0:BE:56:4D:D3:E2:ED:69:6E:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/323830343a333664343a343030303a3a2f33342d3334203d3e20323636333735.roa
Signing time:             Thu 04 Apr 2024 17:46:27 +0000
ROA not before:           Thu 04 Apr 2024 17:41:27 +0000
ROA not after:            Thu 03 Apr 2025 17:46:27 +0000
asID:                     266375
IP address blocks:        2804:36d4:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 10:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:da:0d:d7:19:12:87:12:3c:e8:e0:f0:04:6f:db:4e:3d:1f:4e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F
        Validity
            Not Before: Apr  4 17:41:27 2024 GMT
            Not After : Apr  3 17:46:27 2025 GMT
        Subject: CN=BB0A6F667CC088F66E0DCB3524D7CC5EA6A58036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:9e:bf:a0:bb:a4:32:ba:dc:37:da:d7:6c:
                    0c:c3:22:ba:21:ea:2a:bf:6f:b3:ad:77:a3:d0:e1:
                    08:86:ca:dc:a7:8a:09:ba:3e:bf:81:17:e5:aa:e5:
                    db:06:b8:89:b1:96:64:55:73:28:13:69:59:ac:94:
                    66:00:25:25:e9:3a:de:ab:97:3a:a4:e1:09:cf:c3:
                    d3:08:68:e4:a8:80:85:22:e8:57:c5:99:6d:95:f5:
                    e5:fd:78:4e:cb:c8:77:b1:81:6f:07:8a:a2:0e:74:
                    7b:cb:46:bf:50:90:8a:1e:c6:c4:7b:ca:b0:26:de:
                    88:10:54:c3:63:19:ab:22:ea:72:70:28:19:78:39:
                    b1:12:58:ae:89:18:b7:28:cd:4b:32:a3:f5:b9:65:
                    75:d0:13:0a:aa:90:3b:a0:79:08:fa:e6:0b:97:79:
                    ea:95:11:9a:ba:ad:1f:a5:80:f9:d8:22:91:28:95:
                    1a:b7:95:37:f9:c5:70:92:eb:ac:83:e9:0b:f7:8f:
                    75:44:40:51:2d:47:a3:52:df:55:05:2e:4a:13:1a:
                    26:af:be:15:4a:dd:cb:5e:74:27:d2:b5:97:46:ba:
                    cf:74:b6:b0:a6:bf:b3:fa:8e:5c:64:57:16:7f:5d:
                    48:84:50:94:5a:99:3a:b6:07:62:9e:53:b9:68:0d:
                    39:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0A:6F:66:7C:C0:88:F6:6E:0D:CB:35:24:D7:CC:5E:A6:A5:80:36
            X509v3 Authority Key Identifier:
                keyid:52:DC:1D:0D:4D:A2:70:64:6A:5C:C0:BE:56:4D:D3:E2:ED:69:6E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/323830343a333664343a343030303a3a2f33342d3334203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36d4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         df:78:98:aa:dc:8c:7c:42:08:28:89:77:bc:3e:91:e2:ea:52:
         2a:d5:92:8b:63:a6:b4:40:c2:45:f6:c5:0b:c4:26:d0:4d:29:
         70:b1:2e:25:e4:91:6f:87:a7:08:c2:5b:2f:5c:d0:22:8e:54:
         5d:88:bd:21:2c:43:e8:2e:0c:5e:fa:ef:1d:ef:04:cc:05:ce:
         23:87:46:a0:4b:fb:ce:f7:84:5c:5e:cd:8e:aa:85:c6:ed:32:
         d2:0f:c8:c9:ef:46:6a:ea:51:3a:4a:ca:d9:62:d9:5b:7e:8c:
         b6:d6:cf:e0:e5:e4:6f:b0:a8:31:0d:ba:2f:b6:d8:eb:54:9b:
         ad:d0:29:fe:0c:ad:6b:ff:57:ea:46:42:c7:f9:7a:c0:f0:a4:
         00:0b:97:39:02:ab:e5:d9:e7:65:70:52:57:14:7a:8a:9f:e1:
         03:fb:96:d8:54:a9:80:d1:c0:75:93:ad:3e:78:65:b2:4a:4e:
         f4:17:89:48:64:4b:3d:86:36:62:17:39:de:7d:1c:d8:02:2e:
         8f:e8:3e:c6:94:71:e8:e2:52:18:68:b9:40:99:b7:53:a0:09:
         77:95:a7:65:90:f4:89:92:8e:c0:5e:48:f3:93:7f:ec:67:b2:
         6e:41:20:6a:f9:36:a9:05:7b:b2:87:c4:27:c1:fb:d7:57:04:
         a1:22:54:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 13:53:34 2024 by rpki-client on console-fra.rpki-client.org