Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/323830343a3231383a3a2f33322d313238203d3e203237373135.roa
File:                     323830343a3231383a3a2f33322d313238203d3e203237373135.roa (raw, json)
Hash identifier:          2ZS6s1WnS0z/aDi3yaUPSNrHeKy1c2hUwoC7sHacOMQ=
Subject key identifier:   9B:3C:94:64:91:94:37:AE:AC:88:CB:3C:8B:79:36:F0:31:F5:ED:23
Certificate issuer:       /CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
Certificate serial:       4A43447D00CB3C2275957A8599F3BCA9E4450B41
Authority key identifier: F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/323830343a3231383a3a2f33322d313238203d3e203237373135.roa
Signing time:             Thu 04 Apr 2024 01:16:59 +0000
ROA not before:           Thu 04 Apr 2024 01:11:59 +0000
ROA not after:            Thu 03 Apr 2025 01:16:59 +0000
asID:                     27715
IP address blocks:        2804:218::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl
                          rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:43:44:7d:00:cb:3c:22:75:95:7a:85:99:f3:bc:a9:e4:45:0b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
        Validity
            Not Before: Apr  4 01:11:59 2024 GMT
            Not After : Apr  3 01:16:59 2025 GMT
        Subject: CN=9B3C9464919437AEAC88CB3C8B7936F031F5ED23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f8:11:af:c8:36:3e:0d:c8:8b:4b:96:09:36:
                    45:35:d8:61:14:59:05:49:ab:68:a6:c5:fe:10:88:
                    43:b1:fd:53:b5:78:3a:bd:9e:2a:18:08:67:50:d0:
                    91:a2:0c:53:b6:ee:4d:17:97:d8:46:93:e1:f2:f3:
                    09:6a:fb:63:42:45:92:a2:6c:5a:03:f9:88:a0:72:
                    44:7b:90:47:4e:7d:b5:6e:2b:af:71:aa:47:d6:b8:
                    d5:e0:d2:ce:ac:75:2b:45:f5:57:b6:e9:f8:13:c8:
                    a2:a7:bd:b5:e4:bf:63:3d:d8:92:69:4d:07:45:ce:
                    9d:9c:0d:df:ca:44:19:1a:48:df:93:24:18:6f:12:
                    f7:f9:c5:c9:73:d9:82:0e:82:25:91:ef:0e:56:fc:
                    63:6e:74:f5:5d:9e:e5:49:0d:b4:9c:31:7a:76:58:
                    13:11:46:9d:18:c2:dc:ca:16:c5:47:6d:ea:f8:cb:
                    00:88:9a:58:db:86:ad:6c:05:b5:39:40:67:e9:bb:
                    31:3b:fa:1e:7c:2c:38:85:34:fd:46:97:b8:3e:33:
                    97:ac:79:12:c5:be:06:0d:a1:70:76:80:c4:ad:f9:
                    b1:ac:65:a8:a9:90:82:bc:ec:66:8f:67:46:93:48:
                    ef:c3:de:6e:4e:32:1c:d9:df:e1:b3:38:19:fb:ef:
                    79:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3C:94:64:91:94:37:AE:AC:88:CB:3C:8B:79:36:F0:31:F5:ED:23
            X509v3 Authority Key Identifier:
                keyid:F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/323830343a3231383a3a2f33322d313238203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:218::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:7b:f4:4a:6b:09:84:f5:a4:ea:76:49:5b:2d:f4:f3:7b:aa:
         b2:e5:f9:20:68:80:fe:a0:83:a0:fa:5f:ae:85:bb:ac:70:e5:
         0f:2c:7d:09:88:60:be:46:98:a5:07:ca:d7:26:ee:29:1c:f5:
         b5:12:71:2e:e2:3f:5e:44:34:8f:81:9e:9d:08:06:90:95:8d:
         18:f6:9a:da:42:51:48:77:2c:6d:6d:cb:b6:93:06:55:51:db:
         bc:bf:ad:6a:8e:46:e5:1e:f9:eb:38:c3:74:a6:75:de:84:b8:
         33:89:d9:d5:57:78:a5:6b:11:a8:4c:0a:f3:91:9a:af:20:0c:
         ca:8e:48:2c:70:c1:b3:35:83:0a:a3:46:3d:e1:94:02:a6:65:
         bc:52:fb:42:22:b5:66:97:c0:08:86:b6:c7:a6:4d:42:37:1e:
         d3:d5:2d:57:4b:04:95:4e:33:75:0c:b1:26:11:06:ae:a8:11:
         ad:24:04:1e:dd:f3:ed:95:de:3e:1e:f9:2c:93:ff:c6:e4:7f:
         ef:4c:cb:91:b3:89:5f:93:a6:cc:27:38:c8:26:a4:b6:ec:4a:
         e4:90:a9:9f:ed:a2:74:7f:41:ff:fe:79:d8:69:ec:a7:7b:42:
         a9:6d:2d:d2:ae:2f:05:85:a2:2c:db:33:79:f8:b9:ee:20:55:
         7e:17:42:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:36 2024 by rpki-client on console-fra.rpki-client.org