Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/1/323830343a326463343a3a2f33322d3333203d3e20323635333032.roa
File:                     323830343a326463343a3a2f33322d3333203d3e20323635333032.roa (raw, json)
Hash identifier:          bWWMfxJWdOlJItg71pSFDooxJo98G8d8vHo4tofr+J0=
Subject key identifier:   9F:80:9B:C6:C2:47:34:7A:EA:8D:7A:A0:41:57:EF:85:7A:7A:82:08
Certificate issuer:       /CN=197FCDDAE310D022081D86F4C3E65FDA0DAB655E
Certificate serial:       353A1574B775092E7B2515964E78DB73F1E23562
Authority key identifier: 19:7F:CD:DA:E3:10:D0:22:08:1D:86:F4:C3:E6:5F:DA:0D:AB:65:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/197FCDDAE310D022081D86F4C3E65FDA0DAB655E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/1/323830343a326463343a3a2f33322d3333203d3e20323635333032.roa
Signing time:             Thu 04 Apr 2024 13:37:38 +0000
ROA not before:           Thu 04 Apr 2024 13:32:38 +0000
ROA not after:            Thu 03 Apr 2025 13:37:38 +0000
asID:                     265302
IP address blocks:        2804:2dc4::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/1/197FCDDAE310D022081D86F4C3E65FDA0DAB655E.crl
                          rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/1/197FCDDAE310D022081D86F4C3E65FDA0DAB655E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/197FCDDAE310D022081D86F4C3E65FDA0DAB655E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:43:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:3a:15:74:b7:75:09:2e:7b:25:15:96:4e:78:db:73:f1:e2:35:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=197FCDDAE310D022081D86F4C3E65FDA0DAB655E
        Validity
            Not Before: Apr  4 13:32:38 2024 GMT
            Not After : Apr  3 13:37:38 2025 GMT
        Subject: CN=9F809BC6C247347AEA8D7AA04157EF857A7A8208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fe:43:75:7b:9d:36:ae:d4:38:37:bf:ac:9d:
                    c8:8d:aa:1a:74:86:bb:32:17:ae:f2:1d:39:86:ce:
                    46:18:b7:46:56:a5:e2:7c:67:6f:29:98:79:2e:65:
                    10:0b:ec:fb:33:0a:f1:84:02:69:59:f0:28:51:eb:
                    63:03:f2:01:1b:bd:0c:6f:20:e0:39:56:8a:50:35:
                    8f:59:36:1d:0a:e7:83:07:e0:68:d3:60:18:3d:77:
                    e1:7b:79:fe:00:32:18:24:59:ea:58:d9:16:53:39:
                    52:8b:18:ae:6d:8d:ee:42:a0:cb:73:8c:87:42:90:
                    3f:f3:bd:88:ee:00:2b:4e:cf:ea:ce:e2:73:d9:f4:
                    b7:8f:d5:96:1a:bf:15:41:47:c6:c7:14:c2:b0:59:
                    ba:f3:8b:b0:39:eb:23:48:6f:4d:60:47:84:7b:ac:
                    34:fb:00:57:59:45:b7:b3:b9:a4:03:d2:9c:58:48:
                    20:f4:75:5a:3e:eb:96:75:d9:89:1c:d1:44:c0:e9:
                    1f:38:51:a0:34:6e:f7:11:e5:ba:dd:bf:9a:61:c0:
                    6e:2a:52:ba:63:54:ac:75:f2:90:58:26:3e:22:ce:
                    ed:df:0f:9d:ae:e0:6b:ec:77:64:20:ae:57:b7:11:
                    ec:35:f5:63:46:7a:bf:c7:a4:85:b0:c1:20:8e:5f:
                    d3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:80:9B:C6:C2:47:34:7A:EA:8D:7A:A0:41:57:EF:85:7A:7A:82:08
            X509v3 Authority Key Identifier:
                keyid:19:7F:CD:DA:E3:10:D0:22:08:1D:86:F4:C3:E6:5F:DA:0D:AB:65:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/1/197FCDDAE310D022081D86F4C3E65FDA0DAB655E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/197FCDDAE310D022081D86F4C3E65FDA0DAB655E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/1/323830343a326463343a3a2f33322d3333203d3e20323635333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:d1:b6:d3:48:ec:c5:67:99:77:53:e3:da:d7:81:94:af:0b:
         79:34:3f:e4:72:4d:e9:29:92:77:48:31:4c:28:e0:ae:9f:0e:
         1c:70:35:f9:b1:8a:96:af:8b:96:6a:47:f4:26:a8:1e:73:8b:
         3e:dd:5d:26:50:7f:bf:6f:33:1b:3d:ce:92:a9:42:58:66:11:
         17:78:79:aa:52:43:52:53:a6:0e:f0:1f:8f:f4:f8:31:fa:f8:
         04:b1:fb:ba:bf:7e:5a:d9:97:a7:6f:0b:84:35:f8:94:0d:3d:
         7b:57:22:c7:16:4f:8d:f0:ca:c6:47:48:d3:87:f6:06:96:a8:
         53:37:8a:d3:be:4d:c2:01:d9:3a:69:b3:64:a2:e0:ac:d4:1b:
         44:41:41:df:b1:15:19:ee:b4:d1:50:13:b9:b3:2d:01:09:64:
         c1:51:c1:7b:9d:9a:9d:43:79:29:73:75:c2:9b:9c:de:a4:23:
         3d:1f:0f:a6:ae:b8:45:cc:31:40:69:2b:c7:70:2a:b4:87:78:
         6b:2e:5d:8f:c5:c5:6d:f2:93:9b:da:d3:36:59:5d:7e:a6:a5:
         1d:1d:61:53:67:8d:1e:32:2e:55:ed:cd:ac:eb:c9:a4:25:ae:
         1d:4a:c1:f7:77:ef:dc:4b:0a:43:a4:9a:76:51:f9:df:6d:dd:
         24:71:76:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:15 2024 by rpki-client on console-fra.rpki-client.org