Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/323830343a383461633a3a2f33322d3438203d3e203238323233.roa
File:                     323830343a383461633a3a2f33322d3438203d3e203238323233.roa (raw, json)
Hash identifier:          gXQCKcp+S8tYJ9FZIsTsZ0fhsFEJtZz0bp8N5BcC190=
Subject key identifier:   E3:B6:A7:55:6C:51:92:5A:8A:6C:C3:50:1F:E9:A0:D2:2C:50:FF:83
Certificate issuer:       /CN=87AA666BAB2D75477DAB63CDC5AE76C00F89DA19
Certificate serial:       0E84911549CA5E66739A50F7E3BBB7A0C8366015
Authority key identifier: 87:AA:66:6B:AB:2D:75:47:7D:AB:63:CD:C5:AE:76:C0:0F:89:DA:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/323830343a383461633a3a2f33322d3438203d3e203238323233.roa
Signing time:             Thu 04 Apr 2024 00:27:45 +0000
ROA not before:           Thu 04 Apr 2024 00:22:45 +0000
ROA not after:            Thu 03 Apr 2025 00:27:45 +0000
asID:                     28223
IP address blocks:        2804:84ac::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.crl
                          rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:84:91:15:49:ca:5e:66:73:9a:50:f7:e3:bb:b7:a0:c8:36:60:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AA666BAB2D75477DAB63CDC5AE76C00F89DA19
        Validity
            Not Before: Apr  4 00:22:45 2024 GMT
            Not After : Apr  3 00:27:45 2025 GMT
        Subject: CN=E3B6A7556C51925A8A6CC3501FE9A0D22C50FF83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:44:bc:11:86:6c:99:30:4e:6b:35:7e:ea:56:
                    b0:ce:7f:33:21:63:40:67:fc:0b:32:b0:27:2d:d9:
                    73:c3:46:c5:9d:dd:82:a2:74:ed:6a:a9:3c:49:5a:
                    9d:3f:3a:e9:a9:5a:5f:57:c1:ef:d2:75:d2:43:d8:
                    de:c7:89:c0:40:f2:4b:6f:c5:b8:61:57:48:57:c0:
                    89:73:48:1f:59:51:8a:d9:e0:33:b4:39:c6:58:24:
                    53:27:53:68:51:f3:5b:39:e1:8c:b2:91:28:1f:c4:
                    61:ac:74:eb:6e:72:d6:05:e5:cc:cf:1e:3a:00:3a:
                    5d:20:30:46:38:59:5a:75:f7:ab:e3:f3:f1:74:ab:
                    ca:4e:da:52:8e:85:6a:bf:c5:83:5f:02:c6:5f:2c:
                    b1:f8:90:53:23:1e:9e:85:e6:14:24:0f:a8:39:00:
                    f7:d5:f8:62:77:f0:e2:b6:da:7a:2f:fa:e7:51:08:
                    61:a5:a6:70:fe:1f:68:55:3d:e8:bb:5e:23:29:ab:
                    22:a0:cd:75:11:43:a9:8a:c0:83:8f:e6:c0:13:78:
                    c3:76:63:f3:29:00:eb:36:64:a6:40:86:f5:21:52:
                    7a:d0:12:fa:9e:d5:d1:4e:25:cf:33:c0:4a:fb:f1:
                    36:b1:1c:85:27:39:fb:a6:29:64:4a:8d:d9:23:1e:
                    a0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B6:A7:55:6C:51:92:5A:8A:6C:C3:50:1F:E9:A0:D2:2C:50:FF:83
            X509v3 Authority Key Identifier:
                keyid:87:AA:66:6B:AB:2D:75:47:7D:AB:63:CD:C5:AE:76:C0:0F:89:DA:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/323830343a383461633a3a2f33322d3438203d3e203238323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:8d:4f:47:c0:95:65:48:2e:88:ec:99:74:b5:87:ec:a1:4d:
         93:a4:70:75:de:65:6c:df:2b:a8:be:a4:2f:d3:c7:d8:f8:08:
         5f:3a:60:b1:ab:16:ad:d0:66:d2:13:2c:a4:1c:01:fc:f3:77:
         75:a4:f9:a2:87:bc:eb:aa:f1:c9:cc:97:07:88:73:71:00:04:
         b1:0d:dd:f9:c9:c3:d3:bb:6c:ec:60:99:eb:0c:9a:33:aa:b0:
         6c:19:95:54:aa:07:75:97:89:0d:c9:b5:90:c2:01:fe:8c:c6:
         ef:cb:94:5b:01:aa:32:ba:24:fc:81:21:6a:92:3a:2d:8d:7d:
         8a:e1:f4:a8:f9:92:16:36:8b:df:d2:89:26:09:9f:d6:21:63:
         18:da:c1:70:51:14:11:f5:31:71:fb:b1:2a:b4:a3:82:13:67:
         18:72:07:30:c8:10:56:1d:ef:51:de:41:fc:bc:4d:dd:88:b3:
         b4:03:0b:73:e8:b0:f5:46:45:be:24:19:59:e2:93:a6:0b:d8:
         af:1c:d3:b8:73:bd:a1:0f:06:8c:6b:be:bf:b6:29:03:b5:c1:
         14:16:d3:c6:08:fe:9b:19:e0:f9:da:a0:46:df:ef:cf:7d:ee:
         2d:fc:bd:02:ad:bd:97:72:db:f2:80:02:76:9a:12:d4:c9:3c:
         ba:db:41:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:28 2024 by rpki-client on console-fra.rpki-client.org