Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/1/323830343a376338383a3a2f33322d313238203d3e20323731353032.roa
File:                     323830343a376338383a3a2f33322d313238203d3e20323731353032.roa (raw, json)
Hash identifier:          oVPXO7/kAEC80dX36mb77/XohbDTAySUcfhHGJ3EI2E=
Subject key identifier:   DA:19:64:E5:B8:D2:63:8E:46:EB:5B:D5:1B:04:2E:A9:37:2C:D5:8F
Certificate issuer:       /CN=15B4BB8D00708B865A04094E47913761287812EA
Certificate serial:       1AD8BE0A1AECDEE281DE32D11C7B7BAE0378A326
Authority key identifier: 15:B4:BB:8D:00:70:8B:86:5A:04:09:4E:47:91:37:61:28:78:12:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15B4BB8D00708B865A04094E47913761287812EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/1/323830343a376338383a3a2f33322d313238203d3e20323731353032.roa
Signing time:             Thu 04 Apr 2024 06:25:43 +0000
ROA not before:           Thu 04 Apr 2024 06:20:43 +0000
ROA not after:            Thu 03 Apr 2025 06:25:43 +0000
asID:                     271502
IP address blocks:        2804:7c88::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/1/15B4BB8D00708B865A04094E47913761287812EA.crl
                          rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/1/15B4BB8D00708B865A04094E47913761287812EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15B4BB8D00708B865A04094E47913761287812EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d8:be:0a:1a:ec:de:e2:81:de:32:d1:1c:7b:7b:ae:03:78:a3:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15B4BB8D00708B865A04094E47913761287812EA
        Validity
            Not Before: Apr  4 06:20:43 2024 GMT
            Not After : Apr  3 06:25:43 2025 GMT
        Subject: CN=DA1964E5B8D2638E46EB5BD51B042EA9372CD58F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6c:b5:cb:ba:40:ce:84:09:42:4d:19:97:43:
                    34:13:70:73:80:c3:6e:e6:e7:c2:e8:39:48:3e:51:
                    b9:2b:24:9c:0d:07:4b:8c:87:ae:a9:f9:b9:bc:8b:
                    ca:ed:be:a9:7b:65:ce:17:0f:8d:da:39:ad:31:03:
                    2b:d1:74:f3:ee:04:76:32:3f:43:ce:ec:00:50:6d:
                    c8:e4:37:36:7d:dd:7e:b0:13:14:dc:78:2b:d1:b5:
                    06:b9:a7:cc:51:84:86:76:af:39:0b:73:83:60:f9:
                    f6:d3:a8:52:75:92:47:bf:c4:d3:e7:87:25:fb:3a:
                    64:21:d7:f0:cb:67:8d:34:47:fe:36:0f:a5:c9:14:
                    ea:c2:dd:b4:fd:bd:95:4f:f5:08:f2:7f:a8:6b:8f:
                    ec:bf:65:59:7b:78:89:9a:81:9c:ce:c0:18:17:57:
                    3a:bb:18:39:f8:1c:63:ed:55:94:f1:3b:09:75:d6:
                    d8:7a:7b:83:e7:69:33:93:6a:2d:c1:a2:79:48:33:
                    5c:b8:fc:8f:71:0d:41:d5:a4:01:bd:19:3c:8a:72:
                    72:60:44:bc:85:ec:05:92:24:3b:4f:12:7b:3b:12:
                    36:a0:fc:36:a4:3d:8e:fa:a1:29:99:5a:1b:5c:b9:
                    3e:df:46:fe:fb:c3:05:ac:50:d6:21:ee:8d:cb:7d:
                    d1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:19:64:E5:B8:D2:63:8E:46:EB:5B:D5:1B:04:2E:A9:37:2C:D5:8F
            X509v3 Authority Key Identifier:
                keyid:15:B4:BB:8D:00:70:8B:86:5A:04:09:4E:47:91:37:61:28:78:12:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/1/15B4BB8D00708B865A04094E47913761287812EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15B4BB8D00708B865A04094E47913761287812EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/1/323830343a376338383a3a2f33322d313238203d3e20323731353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c88::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:18:5e:ee:a2:f6:1d:99:37:fc:22:4e:a8:4e:02:14:2c:a5:
         8f:06:1d:58:77:f2:82:76:2d:f1:35:15:c1:08:cc:55:56:b9:
         cb:4e:ac:93:3c:38:56:78:89:bb:d5:7f:35:aa:f4:54:da:99:
         0c:56:e1:85:38:0f:03:09:f0:80:fc:10:15:95:24:2c:9f:23:
         40:90:ea:39:8b:d6:52:3b:cb:9e:e5:04:e1:6c:43:0b:73:af:
         88:2d:59:b1:e3:36:29:1f:b6:6a:4c:50:72:5e:67:e5:f2:cc:
         a3:a4:3b:4b:d6:f5:9b:85:6f:f6:ed:6a:4b:4b:51:ab:4b:d6:
         04:c5:1a:dc:91:24:f6:fa:ec:2b:05:28:4f:fe:45:df:c9:ae:
         d0:bd:74:11:86:cd:05:00:b5:5e:70:ec:d6:47:71:7f:87:04:
         96:44:7b:47:01:3d:da:8d:20:c8:db:3b:74:3c:a7:71:da:4d:
         f8:ea:67:cb:3f:7b:e9:09:f8:df:d8:e7:a8:8e:66:18:85:1b:
         69:26:9d:a2:87:10:97:6f:c8:24:da:16:e2:4e:46:df:d9:c5:
         d1:8d:f5:0a:a6:bd:d8:f6:0a:45:44:74:ab:76:4c:80:b1:23:
         dc:83:24:bb:a5:78:b9:db:1b:be:bf:b9:0c:1d:fd:04:16:e4:
         18:f6:9f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:14 2024 by rpki-client on console-fra.rpki-client.org