Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/0/323830343a383937343a3a2f33322d313238203d3e20323733363035.roa
File:                     323830343a383937343a3a2f33322d313238203d3e20323733363035.roa (raw, json)
Hash identifier:          PjYKZfsn3biuXWBmVRGEQY7CNNAJVg2lWbBjVYF/yeg=
Subject key identifier:   38:A3:AC:3C:A1:EA:D6:BE:95:7E:8F:50:AA:8C:7A:69:2C:1D:BA:55
Certificate issuer:       /CN=A4F8A597A921919AB3CA0F05A18435D6D71E940F
Certificate serial:       380D56918E2983DCA0C6156898ADC16A32F645DE
Authority key identifier: A4:F8:A5:97:A9:21:91:9A:B3:CA:0F:05:A1:84:35:D6:D7:1E:94:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4F8A597A921919AB3CA0F05A18435D6D71E940F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/0/323830343a383937343a3a2f33322d313238203d3e20323733363035.roa
Signing time:             Mon 15 Jul 2024 12:10:12 +0000
ROA not before:           Mon 15 Jul 2024 12:05:12 +0000
ROA not after:            Mon 14 Jul 2025 12:10:12 +0000
asID:                     273605
IP address blocks:        2804:8974::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/0/A4F8A597A921919AB3CA0F05A18435D6D71E940F.crl
                          rsync://rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/0/A4F8A597A921919AB3CA0F05A18435D6D71E940F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4F8A597A921919AB3CA0F05A18435D6D71E940F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Nov 2024 18:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0d:56:91:8e:29:83:dc:a0:c6:15:68:98:ad:c1:6a:32:f6:45:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4F8A597A921919AB3CA0F05A18435D6D71E940F
        Validity
            Not Before: Jul 15 12:05:12 2024 GMT
            Not After : Jul 14 12:10:12 2025 GMT
        Subject: CN=38A3AC3CA1EAD6BE957E8F50AA8C7A692C1DBA55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7f:aa:4f:d2:52:d1:f5:2b:b7:23:53:cb:73:
                    6f:f4:46:44:b3:7e:d5:8b:db:a1:80:34:47:92:d8:
                    c0:f2:db:19:3e:81:08:82:e3:a4:4a:92:2c:c9:12:
                    f3:e7:95:0c:36:9e:23:a6:ab:d1:18:e0:28:01:24:
                    33:b6:48:33:0d:fe:56:83:87:d4:13:76:04:33:cf:
                    ed:25:4f:a2:45:9e:92:03:52:03:75:1a:b4:1f:11:
                    d3:a9:a6:40:3d:14:d1:e9:cc:bd:00:44:15:c0:aa:
                    72:ab:58:dc:98:f4:09:30:54:af:a5:b9:7c:04:1a:
                    dd:a0:4b:45:a5:1c:3a:95:db:11:a3:0d:a8:58:3b:
                    f5:7a:96:14:46:8b:30:c6:b7:2c:1c:3c:55:89:03:
                    cc:c3:b7:25:ae:ca:49:87:b0:ec:6c:96:4c:85:bd:
                    6f:44:d1:5a:e9:9d:81:3f:c0:9c:a2:e0:33:c2:2c:
                    e9:37:d9:e1:b5:e9:f9:ed:60:5c:a6:2f:e1:0f:bc:
                    bb:08:f2:60:6d:57:eb:09:a8:d4:18:10:12:45:fd:
                    20:0c:d4:0c:86:d6:9d:2c:6b:15:06:96:e4:7f:4d:
                    7a:e2:6b:05:20:a5:1b:0b:9f:ff:b9:33:f3:88:1f:
                    38:fa:58:23:c4:3f:ec:72:c4:9b:a9:1d:7d:fe:c9:
                    99:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A3:AC:3C:A1:EA:D6:BE:95:7E:8F:50:AA:8C:7A:69:2C:1D:BA:55
            X509v3 Authority Key Identifier:
                keyid:A4:F8:A5:97:A9:21:91:9A:B3:CA:0F:05:A1:84:35:D6:D7:1E:94:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/0/A4F8A597A921919AB3CA0F05A18435D6D71E940F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4F8A597A921919AB3CA0F05A18435D6D71E940F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/0/323830343a383937343a3a2f33322d313238203d3e20323733363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8974::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:e1:f0:65:69:63:81:2f:56:5f:56:e8:4d:c4:69:d9:e5:12:
         e6:7a:8e:a9:98:16:fb:e2:2b:f3:94:e1:4a:38:9b:96:09:c0:
         9c:5f:04:56:34:45:37:a0:c3:ba:d4:ce:1a:d9:b8:b8:0e:68:
         5a:de:85:d9:ee:e1:4f:2d:48:91:1f:df:b9:b8:af:ad:79:46:
         e8:c7:9f:cc:b7:bd:8d:8a:41:ac:72:ff:86:29:01:32:c1:8c:
         2a:ce:59:94:e3:37:9a:e9:78:10:60:55:4e:55:76:bd:c4:83:
         48:e4:5f:06:00:bf:0f:57:7f:10:0f:be:13:3f:ec:e6:48:58:
         39:47:eb:90:3f:81:36:2b:63:07:21:61:3d:55:2a:52:7c:64:
         5c:3d:92:28:f7:a9:13:a0:22:1b:aa:40:7c:8e:de:bc:4a:fa:
         28:13:d3:d3:75:c1:28:b5:7b:26:f3:bc:ed:cc:62:21:79:94:
         17:ad:7e:fe:0a:d2:22:16:80:0b:2a:64:f6:da:44:2a:82:1d:
         5c:87:e7:e7:e5:31:88:a7:87:ba:bc:40:0c:0c:2b:bb:08:20:
         7f:af:07:f5:99:8d:34:d9:6a:89:11:2b:dd:a6:be:61:db:d0:
         b2:57:2e:4f:37:8e:68:e9:a2:81:5d:39:14:44:56:9e:82:db:
         41:f0:73:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:10:22 2024 by rpki-client on console-fra.rpki-client.org