Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/1/323830343a313438633a3a2f33322d3438203d3e20323633333336.roa
File:                     323830343a313438633a3a2f33322d3438203d3e20323633333336.roa (raw, json)
Hash identifier:          ZY1wv0LZ7nXcTZZWciQkSp6ElkwqqVNQVhuSzkMj5yw=
Subject key identifier:   72:E5:20:5E:38:AF:73:7A:A9:52:00:7D:0F:50:4F:38:60:E5:A5:DD
Certificate issuer:       /CN=35F51181E5E9E18B41B49E6409FA12C4899C586F
Certificate serial:       60D0B040CB1ABCDFB368144FABAEC7C2EBB3DD36
Authority key identifier: 35:F5:11:81:E5:E9:E1:8B:41:B4:9E:64:09:FA:12:C4:89:9C:58:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35F51181E5E9E18B41B49E6409FA12C4899C586F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/1/323830343a313438633a3a2f33322d3438203d3e20323633333336.roa
Signing time:             Thu 04 Apr 2024 07:11:18 +0000
ROA not before:           Thu 04 Apr 2024 07:06:18 +0000
ROA not after:            Thu 03 Apr 2025 07:11:18 +0000
asID:                     263336
IP address blocks:        2804:148c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/1/35F51181E5E9E18B41B49E6409FA12C4899C586F.crl
                          rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/1/35F51181E5E9E18B41B49E6409FA12C4899C586F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35F51181E5E9E18B41B49E6409FA12C4899C586F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d0:b0:40:cb:1a:bc:df:b3:68:14:4f:ab:ae:c7:c2:eb:b3:dd:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35F51181E5E9E18B41B49E6409FA12C4899C586F
        Validity
            Not Before: Apr  4 07:06:18 2024 GMT
            Not After : Apr  3 07:11:18 2025 GMT
        Subject: CN=72E5205E38AF737AA952007D0F504F3860E5A5DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:26:bf:ce:4c:56:10:f1:ac:7e:bd:1a:39:4b:
                    ec:af:e9:d0:01:bc:77:48:e9:8d:40:da:15:4d:fb:
                    7d:b9:90:e0:7d:96:f3:f6:d5:04:dd:e7:47:f8:8e:
                    96:e0:d5:a7:aa:70:8b:fc:3d:da:96:b7:7d:2c:5b:
                    e1:9c:80:3b:d6:cd:a4:41:40:2a:46:10:9a:fc:cc:
                    a9:42:9b:ef:fa:e7:f2:27:d4:94:21:ae:38:85:18:
                    2c:a9:53:24:fe:f9:f8:08:54:85:36:31:5d:25:bd:
                    72:05:df:92:c8:09:a4:a9:5e:ca:b5:28:1d:33:26:
                    8b:4b:b9:b1:45:57:9d:5b:11:7a:71:26:e3:a2:2c:
                    bc:32:3f:fc:eb:f8:0f:e4:30:55:58:e9:3a:6b:1e:
                    45:a3:ae:3a:7d:8c:cc:c5:ac:5f:b1:1a:74:82:1c:
                    6b:3c:3a:11:42:e0:2c:22:57:69:18:37:f0:d0:eb:
                    6c:b3:70:b9:a9:dc:6b:4c:d3:6e:59:3a:97:f2:b3:
                    9b:44:e1:cb:6b:73:df:45:6a:7c:5c:46:62:c2:72:
                    86:79:b6:54:84:4e:4f:34:40:91:1e:2d:00:1f:35:
                    34:34:65:ca:39:5b:c1:19:bc:82:81:58:81:d5:4f:
                    73:2a:1d:91:17:84:d3:a1:e9:58:fd:dd:c8:61:2a:
                    80:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E5:20:5E:38:AF:73:7A:A9:52:00:7D:0F:50:4F:38:60:E5:A5:DD
            X509v3 Authority Key Identifier:
                keyid:35:F5:11:81:E5:E9:E1:8B:41:B4:9E:64:09:FA:12:C4:89:9C:58:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/1/35F51181E5E9E18B41B49E6409FA12C4899C586F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35F51181E5E9E18B41B49E6409FA12C4899C586F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/1/323830343a313438633a3a2f33322d3438203d3e20323633333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:148c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:d3:01:c9:73:c7:0d:0d:25:1e:06:60:9c:1b:f2:1e:9b:9c:
         95:6e:3d:57:85:bb:41:09:f4:54:69:2e:df:cc:44:d3:e3:30:
         f0:80:81:b2:45:63:02:0a:12:de:05:a0:9b:0f:fd:d2:af:e3:
         41:58:68:2e:16:d2:e0:bc:66:ff:41:cc:4a:68:b1:03:31:6b:
         fb:00:d3:29:9e:7b:c0:a0:a0:81:b9:53:b3:3d:1a:7b:1f:53:
         3f:a4:83:cd:86:9e:87:73:5c:61:e5:6e:b4:a1:75:68:d4:55:
         a7:4e:c2:59:47:4c:c9:ce:61:40:b1:4b:10:07:ad:7d:c4:81:
         d9:2a:27:89:36:c9:93:74:31:a1:20:35:f5:90:69:5f:87:9f:
         4a:78:a3:8f:3c:49:77:d7:81:1a:58:49:c9:be:a5:9c:f9:c6:
         82:9c:7f:04:66:4c:82:25:6f:3f:01:e8:e3:09:d4:eb:9a:7c:
         b5:03:45:75:be:f6:1b:c3:81:24:25:1c:04:04:ed:a0:b7:61:
         d1:7e:e3:21:08:29:4f:eb:5a:c2:b1:42:a7:7a:1f:9c:31:59:
         ab:b7:a1:8d:6d:93:d1:ea:2d:5d:e6:08:0b:69:05:b8:8c:1a:
         85:8f:4a:dd:56:70:22:86:12:54:7f:ba:f0:48:8e:84:10:2b:
         b2:97:3b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:26:58 2024 by rpki-client on console-ams.rpki-client.org