Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/323830343a383262343a3a2f33322d313238203d3e20323732353335.roa
File:                     323830343a383262343a3a2f33322d313238203d3e20323732353335.roa (raw, json)
Hash identifier:          Z1yESvf7E+Or/7zaqe9MGyd4pATU0fGXGWDrLoFcg0g=
Subject key identifier:   38:DC:91:E7:DF:81:DB:3D:4A:AB:AB:E6:03:BD:E8:6A:C4:5F:64:B2
Certificate issuer:       /CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218
Certificate serial:       54895F3AA919BB7D9502EA58704435DD1CCBE3E8
Authority key identifier: 35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/323830343a383262343a3a2f33322d313238203d3e20323732353335.roa
Signing time:             Thu 04 Apr 2024 02:17:28 +0000
ROA not before:           Thu 04 Apr 2024 02:12:28 +0000
ROA not after:            Thu 03 Apr 2025 02:17:28 +0000
asID:                     272535
IP address blocks:        2804:82b4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl
                          rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:89:5f:3a:a9:19:bb:7d:95:02:ea:58:70:44:35:dd:1c:cb:e3:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218
        Validity
            Not Before: Apr  4 02:12:28 2024 GMT
            Not After : Apr  3 02:17:28 2025 GMT
        Subject: CN=38DC91E7DF81DB3D4AABABE603BDE86AC45F64B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f4:9e:2a:a5:33:ea:ae:6e:a5:91:bc:22:c6:
                    28:98:21:2f:3c:fb:66:7d:c8:0c:eb:64:58:4c:7f:
                    3e:c6:1d:25:fb:96:a4:b5:a2:59:f4:5d:f6:35:67:
                    1a:e6:88:e4:ee:93:ce:92:68:00:1e:3f:75:3e:9e:
                    58:32:7d:b4:80:bc:bf:8d:80:16:d7:49:fd:6c:ff:
                    3f:d9:e2:9c:83:b3:83:e8:09:2d:43:5c:21:80:ac:
                    4f:47:b3:01:d4:b3:be:ec:dd:c9:95:81:41:35:7c:
                    0a:5e:71:0e:ad:c1:6a:14:23:b1:04:46:96:7e:6b:
                    69:32:dc:30:ed:fe:3f:fa:a8:b4:23:8d:96:f4:cf:
                    6d:b7:3d:b2:38:c3:8c:07:22:3a:11:8d:6e:fc:22:
                    2d:59:b7:45:73:b8:a1:e9:e2:d5:ec:9d:38:67:76:
                    3c:dc:3f:5c:45:bd:2e:05:6d:61:6f:9d:e5:37:56:
                    79:c9:63:2a:13:57:72:ec:50:c9:1b:1f:94:cd:ab:
                    05:55:86:54:5d:17:b7:34:50:cd:42:a5:dd:ce:ec:
                    bd:c6:d4:c5:bb:ea:38:b8:b4:5f:bc:68:b2:32:23:
                    f2:7d:75:47:96:63:a1:0a:d4:6b:f2:7d:25:1f:61:
                    e7:02:05:95:4a:70:70:cf:00:ee:45:6f:0d:25:4d:
                    39:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DC:91:E7:DF:81:DB:3D:4A:AB:AB:E6:03:BD:E8:6A:C4:5F:64:B2
            X509v3 Authority Key Identifier:
                keyid:35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/323830343a383262343a3a2f33322d313238203d3e20323732353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:95:16:40:05:89:47:d9:b8:a3:30:ed:33:9a:ea:d9:bf:b9:
         3b:23:7a:57:96:4b:a7:ba:13:94:e4:58:a6:df:7a:00:39:6a:
         5a:6c:11:e9:a4:23:c5:c7:6f:d8:dc:63:db:ed:b4:58:07:79:
         8c:85:d6:cd:0d:1b:82:8a:4a:69:22:1b:f4:6c:36:63:07:c6:
         9f:11:02:e5:b9:31:d6:ae:aa:19:e7:c7:8b:d9:d5:c0:35:3d:
         62:35:b8:14:ee:22:f9:ac:30:ce:e9:e7:b3:cd:5c:5e:37:a6:
         36:72:4b:8d:62:83:1e:f3:25:96:3a:d7:2b:2a:69:31:a5:64:
         5d:a6:a2:3c:85:75:86:60:5a:ca:56:21:29:a5:11:81:bc:a7:
         af:62:df:81:5b:d5:8a:7f:49:40:f5:6b:e5:ee:90:69:cd:34:
         dc:82:88:81:e5:8c:ef:39:8a:49:77:69:1a:23:a4:74:97:66:
         10:83:02:4b:94:e2:ba:87:a0:04:58:40:2a:99:d2:4e:b6:8e:
         76:96:bc:75:fd:18:c9:1b:92:98:b9:00:5b:0b:7d:dd:e0:15:
         4e:05:39:1a:0c:ee:a0:b2:12:df:4b:8e:f1:24:28:b9:cf:88:
         2f:9f:9c:b5:a0:c5:f4:9f:5a:50:e5:5f:de:0e:a9:a0:1f:21:
         ba:c0:42:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:13 2024 by rpki-client on console-fra.rpki-client.org