Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/1/323830343a386565383a3a2f33322d313238203d3e20323733343535.roa
File:                     323830343a386565383a3a2f33322d313238203d3e20323733343535.roa (raw, json)
Hash identifier:          4IR5NOgljMICTEuUQYrPN5eYDFLG+Lmg12xvPoyfHQc=
Subject key identifier:   65:8B:F0:E4:C4:FE:BC:39:C1:E4:72:91:2B:7A:64:E6:67:95:A6:35
Certificate issuer:       /CN=CA13AD3243174A46B6FCF9E3D5E495650BB23938
Certificate serial:       7215BF6758528F57DBBAC6ED9CF30A8BA8D7BCF0
Authority key identifier: CA:13:AD:32:43:17:4A:46:B6:FC:F9:E3:D5:E4:95:65:0B:B2:39:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA13AD3243174A46B6FCF9E3D5E495650BB23938.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/1/323830343a386565383a3a2f33322d313238203d3e20323733343535.roa
Signing time:             Wed 03 Apr 2024 20:56:24 +0000
ROA not before:           Wed 03 Apr 2024 20:51:24 +0000
ROA not after:            Wed 02 Apr 2025 20:56:24 +0000
asID:                     273455
IP address blocks:        2804:8ee8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/1/CA13AD3243174A46B6FCF9E3D5E495650BB23938.crl
                          rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/1/CA13AD3243174A46B6FCF9E3D5E495650BB23938.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA13AD3243174A46B6FCF9E3D5E495650BB23938.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:10:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:15:bf:67:58:52:8f:57:db:ba:c6:ed:9c:f3:0a:8b:a8:d7:bc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA13AD3243174A46B6FCF9E3D5E495650BB23938
        Validity
            Not Before: Apr  3 20:51:24 2024 GMT
            Not After : Apr  2 20:56:24 2025 GMT
        Subject: CN=658BF0E4C4FEBC39C1E472912B7A64E66795A635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:60:d7:a8:46:2b:75:38:b2:40:0f:f9:d7:cb:
                    e6:bf:c8:a1:e2:c2:43:ea:de:f4:ca:96:b0:0e:d0:
                    7f:03:17:6e:cb:40:26:be:e3:8e:aa:b4:36:66:a0:
                    a9:7d:8f:44:31:72:dc:a3:fc:4e:01:10:6b:7e:2e:
                    be:db:a7:91:99:64:ac:47:8e:5b:80:0d:36:20:76:
                    26:22:3f:ad:8d:6e:1d:8d:e0:c0:ce:fe:ba:ee:8c:
                    4f:07:7b:62:40:55:83:c7:26:00:1b:d2:2a:a6:b7:
                    17:db:8f:cc:3d:76:b8:49:04:ef:91:24:76:f5:74:
                    ed:27:0d:38:f6:2b:19:1e:ff:ec:62:f1:31:c6:8d:
                    be:1f:d9:d3:00:d6:7b:f4:2f:87:e2:4e:4e:53:ed:
                    13:c3:46:3b:df:b6:20:0d:50:e3:67:6c:fc:b3:f1:
                    b3:1e:58:15:bd:66:70:11:f5:16:45:90:92:58:15:
                    8d:d6:5a:6f:eb:9d:ec:62:54:c8:39:6f:a8:bf:ea:
                    91:5f:81:75:15:52:54:94:03:25:73:33:0d:93:5d:
                    c6:46:da:a3:59:47:a5:28:5b:a8:c7:4c:a2:ba:16:
                    d7:90:fb:69:56:86:6b:9a:46:70:4a:84:1d:24:ef:
                    ac:9a:3d:6f:af:1e:84:2d:2c:c0:f6:94:54:bb:9e:
                    52:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8B:F0:E4:C4:FE:BC:39:C1:E4:72:91:2B:7A:64:E6:67:95:A6:35
            X509v3 Authority Key Identifier:
                keyid:CA:13:AD:32:43:17:4A:46:B6:FC:F9:E3:D5:E4:95:65:0B:B2:39:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/1/CA13AD3243174A46B6FCF9E3D5E495650BB23938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA13AD3243174A46B6FCF9E3D5E495650BB23938.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/1/323830343a386565383a3a2f33322d313238203d3e20323733343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ee8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:49:64:08:50:c7:63:ba:6d:44:8f:03:7c:5f:70:7c:4d:31:
         6e:d4:c3:5e:b9:d7:76:44:2d:31:0c:53:1e:ee:67:f5:5a:3d:
         4d:c6:e2:d7:7c:1f:f1:d8:3a:d1:4d:da:f1:b9:0a:47:3e:28:
         a9:9a:21:35:ce:c0:6a:e3:ec:b9:5f:a0:34:9a:c9:63:16:e4:
         49:2c:54:0f:41:07:94:73:f5:bd:86:83:5a:24:a2:92:20:85:
         2f:ce:36:b6:16:b1:40:dc:36:0c:dc:89:88:06:7d:f3:78:ab:
         68:54:34:be:b4:9b:4f:b4:4e:ac:9c:22:6a:73:99:57:1e:db:
         3b:b9:f9:20:27:5a:1c:3c:04:f8:b8:e5:11:b4:ab:7d:24:4c:
         be:13:ce:fc:9f:75:cc:37:94:38:f9:ca:90:15:a4:8c:2c:64:
         2e:6b:b8:4c:c9:53:da:4b:42:70:c5:f3:a8:8c:21:ac:12:15:
         18:0b:b1:f5:5d:89:4c:d1:e0:54:56:ad:8b:47:3f:23:00:ca:
         5f:6a:af:c6:53:53:24:6a:2a:b9:53:cf:dc:68:f5:2c:49:5a:
         56:5e:fc:3d:a6:74:f9:2c:84:f1:39:b3:4b:9d:b9:4f:69:89:
         44:97:ad:59:28:0b:c1:a6:aa:e3:5e:3e:aa:8c:19:e3:fa:21:
         f4:79:e8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:42 2024 by rpki-client on console-ams.rpki-client.org