Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/323830313a38303a323265303a3a2f34382d3438203d3e20323637303836.roa
File:                     323830313a38303a323265303a3a2f34382d3438203d3e20323637303836.roa (raw, json)
Hash identifier:          aYPaaKlDnO9aSLTdyKqJ+dc/CoQq3OKw9rkHVMOS1JY=
Subject key identifier:   79:05:7B:D7:8C:DC:C0:71:86:E0:64:57:81:E0:F9:93:76:E7:C4:58
Certificate issuer:       /CN=96BA82DF5206559FC2C8963DB292E32E9CD37E27
Certificate serial:       58A868FF32B44D88A4B13BAF86E14648A839ECDD
Authority key identifier: 96:BA:82:DF:52:06:55:9F:C2:C8:96:3D:B2:92:E3:2E:9C:D3:7E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96BA82DF5206559FC2C8963DB292E32E9CD37E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/323830313a38303a323265303a3a2f34382d3438203d3e20323637303836.roa
Signing time:             Thu 06 Jun 2024 13:07:47 +0000
ROA not before:           Thu 06 Jun 2024 13:02:47 +0000
ROA not after:            Thu 05 Jun 2025 13:07:47 +0000
asID:                     267086
IP address blocks:        2801:80:22e0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/96BA82DF5206559FC2C8963DB292E32E9CD37E27.crl
                          rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/96BA82DF5206559FC2C8963DB292E32E9CD37E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96BA82DF5206559FC2C8963DB292E32E9CD37E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Jun 2024 06:13:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a8:68:ff:32:b4:4d:88:a4:b1:3b:af:86:e1:46:48:a8:39:ec:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96BA82DF5206559FC2C8963DB292E32E9CD37E27
        Validity
            Not Before: Jun  6 13:02:47 2024 GMT
            Not After : Jun  5 13:07:47 2025 GMT
        Subject: CN=79057BD78CDCC07186E0645781E0F99376E7C458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4e:be:bc:45:1d:cf:49:e4:0e:d3:c4:ff:ac:
                    1e:80:e5:77:c9:24:c3:a2:09:69:85:1f:ee:53:f1:
                    d8:13:76:16:31:f6:52:ca:0a:b6:a8:67:e0:eb:03:
                    5b:a3:d1:8e:26:7f:3d:1d:81:6c:5c:30:01:03:ff:
                    5b:13:f5:6a:02:bc:c9:ee:c2:59:77:55:8d:15:08:
                    8b:0a:92:0c:00:7f:a1:64:f6:37:44:1e:8a:78:ac:
                    1e:38:62:0d:17:56:fe:11:73:77:aa:c2:fe:a7:43:
                    74:29:98:95:c3:97:58:d6:e7:cb:a6:cf:bf:19:c0:
                    03:2f:01:d0:11:38:8e:59:a1:bc:29:d2:3e:45:c1:
                    ff:6f:4b:af:f1:c1:cb:13:b9:77:cf:7a:43:70:7e:
                    a4:bd:31:27:15:6d:6c:38:b8:8a:38:b2:0f:f0:b0:
                    3f:00:e6:24:57:e1:52:4c:b5:3a:0c:5d:53:64:cd:
                    8b:32:c1:6e:f4:26:7c:13:59:90:45:04:57:58:5c:
                    d9:17:e5:d1:cf:db:f2:28:78:50:2e:65:9a:37:1c:
                    31:a8:04:fa:e1:5d:1b:85:e6:d5:8b:33:67:54:3b:
                    f6:78:18:a9:46:57:fc:e0:77:80:ae:f4:9c:76:b7:
                    12:2d:ec:4b:5d:e6:57:a4:4a:ef:76:e5:a3:5e:3c:
                    3b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:05:7B:D7:8C:DC:C0:71:86:E0:64:57:81:E0:F9:93:76:E7:C4:58
            X509v3 Authority Key Identifier:
                keyid:96:BA:82:DF:52:06:55:9F:C2:C8:96:3D:B2:92:E3:2E:9C:D3:7E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/96BA82DF5206559FC2C8963DB292E32E9CD37E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96BA82DF5206559FC2C8963DB292E32E9CD37E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/323830313a38303a323265303a3a2f34382d3438203d3e20323637303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:22e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:3d:61:22:23:f8:0d:fc:82:28:28:b7:20:c4:94:f3:3a:9d:
         4a:f3:e8:4c:ef:d8:22:55:7b:c1:4d:fa:c0:9b:1a:b0:16:b7:
         08:d9:97:50:f5:dc:38:03:61:dc:6d:8c:c3:29:f4:d5:ee:ec:
         72:22:cb:36:07:e7:49:d5:73:10:f8:0f:28:bf:aa:c2:44:47:
         80:64:69:0d:3d:d0:fe:9b:4d:78:5a:85:b3:86:9a:64:79:58:
         e7:2e:40:8a:e5:0c:a4:c2:09:fa:68:cf:35:56:a5:fe:dc:47:
         64:71:93:e2:b7:b7:9a:4b:2d:b5:f1:69:76:0e:ad:25:b8:6d:
         a4:5d:6c:83:7e:42:55:ed:00:d1:6e:5e:33:3c:d6:83:6f:5e:
         8d:fd:be:7f:1a:f8:56:c6:50:47:f6:60:f0:12:62:f7:20:36:
         7e:56:32:7f:11:a5:d6:92:03:ec:b9:ce:2a:ac:0b:04:05:fa:
         0c:db:b5:83:ee:fe:d4:35:5a:76:b4:58:0e:60:d7:ab:a1:8d:
         6e:91:79:94:9d:8b:78:e5:1a:30:2f:7d:d9:0b:08:5b:5c:7c:
         16:1b:42:df:fc:c5:23:51:3d:37:d6:c4:99:15:a7:42:ac:a2:
         73:6b:87:41:f8:50:04:6d:f1:c8:55:8d:22:c6:85:a8:e0:b9:
         6f:41:94:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:41:29 2024 by rpki-client on console-ams.rpki-client.org