Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/323830343a3138343a383030303a3a2f33342d3334203d3e20323632373439.roa
File:                     323830343a3138343a383030303a3a2f33342d3334203d3e20323632373439.roa (raw, json)
Hash identifier:          EL3sRySHfE/ksv6kptFtLE5rQtn3byc7+cztuPRWQ7c=
Subject key identifier:   C6:C3:A2:08:57:EF:96:DA:EF:2B:E3:C8:69:75:CB:70:C7:58:3D:99
Certificate issuer:       /CN=9DAC040D005E337E60D8E70413DC135C767316A4
Certificate serial:       3779076B4086001F8501512472A6FDE43F62E5AF
Authority key identifier: 9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/323830343a3138343a383030303a3a2f33342d3334203d3e20323632373439.roa
Signing time:             Thu 04 Apr 2024 06:00:26 +0000
ROA not before:           Thu 04 Apr 2024 05:55:26 +0000
ROA not after:            Thu 03 Apr 2025 06:00:26 +0000
asID:                     262749
IP address blocks:        2804:184:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl
                          rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 15:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:79:07:6b:40:86:00:1f:85:01:51:24:72:a6:fd:e4:3f:62:e5:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DAC040D005E337E60D8E70413DC135C767316A4
        Validity
            Not Before: Apr  4 05:55:26 2024 GMT
            Not After : Apr  3 06:00:26 2025 GMT
        Subject: CN=C6C3A20857EF96DAEF2BE3C86975CB70C7583D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:aa:67:71:0d:70:7a:06:24:86:8c:86:44:4d:
                    8c:93:eb:27:44:e6:c5:4f:00:74:e5:48:18:01:40:
                    18:7c:6a:e1:40:56:82:c1:90:5f:c9:f1:d4:f8:7c:
                    bd:ee:72:09:66:ed:a3:c6:ee:3c:29:6b:2a:96:b3:
                    2c:e2:fa:fb:c2:f4:c3:5c:14:9b:2a:c7:55:0b:4a:
                    6a:e0:cb:ff:24:fe:60:16:ba:59:2d:e9:56:65:de:
                    82:43:64:5e:aa:3c:4c:38:56:94:f5:5d:6a:0d:be:
                    16:fb:7e:e3:4a:17:fb:00:8e:ce:0f:82:d0:dd:7f:
                    c6:d7:1d:36:9c:e8:df:c9:dd:47:3b:c2:2f:13:5b:
                    1d:cd:21:40:fa:76:41:ed:aa:81:5c:47:c1:2f:8e:
                    cc:eb:f5:af:19:c7:43:0d:df:55:84:0f:cb:76:50:
                    6d:c2:28:66:71:5e:27:e2:95:83:a6:db:e9:87:2b:
                    a1:db:34:db:90:ba:07:1c:6a:16:68:9f:06:de:0c:
                    67:1a:37:3b:be:8e:1a:a7:6e:b2:8c:45:89:c3:8e:
                    7a:0f:dc:90:0f:a0:e5:90:fe:fc:b8:a5:02:05:e2:
                    8a:62:2f:4a:cd:07:27:09:91:60:ba:b9:5d:98:af:
                    76:6f:29:95:2f:ae:38:25:b7:f4:e5:6d:cf:e0:ef:
                    e7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C3:A2:08:57:EF:96:DA:EF:2B:E3:C8:69:75:CB:70:C7:58:3D:99
            X509v3 Authority Key Identifier:
                keyid:9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/323830343a3138343a383030303a3a2f33342d3334203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:184:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7e:23:4a:3d:32:0f:b4:f1:2f:15:41:3a:71:a5:4c:48:23:12:
         cf:a7:5b:ca:15:a2:29:9e:80:1c:a4:73:98:d3:3e:fb:f4:1e:
         3a:e4:86:d2:26:10:50:97:3d:82:1d:81:51:c1:79:e8:a1:10:
         29:00:5e:25:7b:be:42:e1:a1:a8:c6:8b:19:53:c3:74:eb:ab:
         3d:a8:52:5f:c8:d6:0d:ef:62:ab:50:bc:32:d2:5b:9c:c2:29:
         d9:b9:a2:ef:32:d3:ab:dc:69:dc:34:da:c8:45:75:d1:ae:3f:
         0f:64:ed:b1:9b:ee:b9:c3:99:5b:e7:b5:1e:d8:55:ab:13:09:
         dd:e0:c1:e4:b6:6b:4a:8c:14:39:bf:47:fd:e7:c4:8a:a8:03:
         3c:55:90:3c:00:01:41:88:cc:a8:7b:c2:63:1e:c1:73:52:fd:
         a3:0d:1b:7d:fe:c9:12:08:43:48:bc:61:4d:7f:74:be:fe:b4:
         0d:8c:9f:c4:e3:f0:7c:14:14:9f:af:89:57:f4:e1:9a:f3:2e:
         3d:94:6f:60:ee:45:9e:23:cf:6c:6e:6d:30:1e:e3:d7:42:f0:
         43:28:dc:f0:0e:04:96:fe:de:f3:0f:dd:80:4d:be:c3:1e:67:
         15:7b:0d:ad:1c:70:f7:79:8f:8c:f0:a6:05:4d:f0:d9:fb:79:
         66:16:19:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:18:22 2024 by rpki-client on console-ams.rpki-client.org