Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/1/323830343a343632633a3a2f33322d3332203d3e20323636393733.roa
File:                     323830343a343632633a3a2f33322d3332203d3e20323636393733.roa (raw, json)
Hash identifier:          RyoWvlOcc+acjXXrl3UDFqvdNgDczRUEas/Mqsc1Azk=
Subject key identifier:   87:6B:C2:D7:A5:D6:18:09:DA:5B:5E:A9:CA:E8:B4:A7:07:A6:B0:94
Certificate issuer:       /CN=961C10291E95158CF12D8EAA6CC5D0B05DE85838
Certificate serial:       55622F8C100F1DF0511586638714EA4EB58092F2
Authority key identifier: 96:1C:10:29:1E:95:15:8C:F1:2D:8E:AA:6C:C5:D0:B0:5D:E8:58:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961C10291E95158CF12D8EAA6CC5D0B05DE85838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/1/323830343a343632633a3a2f33322d3332203d3e20323636393733.roa
Signing time:             Thu 04 Apr 2024 02:28:41 +0000
ROA not before:           Thu 04 Apr 2024 02:23:41 +0000
ROA not after:            Thu 03 Apr 2025 02:28:41 +0000
asID:                     266973
IP address blocks:        2804:462c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/1/961C10291E95158CF12D8EAA6CC5D0B05DE85838.crl
                          rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/1/961C10291E95158CF12D8EAA6CC5D0B05DE85838.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961C10291E95158CF12D8EAA6CC5D0B05DE85838.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 14:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:62:2f:8c:10:0f:1d:f0:51:15:86:63:87:14:ea:4e:b5:80:92:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961C10291E95158CF12D8EAA6CC5D0B05DE85838
        Validity
            Not Before: Apr  4 02:23:41 2024 GMT
            Not After : Apr  3 02:28:41 2025 GMT
        Subject: CN=876BC2D7A5D61809DA5B5EA9CAE8B4A707A6B094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:ca:e8:59:4c:2a:02:2c:e6:10:c7:7a:ae:
                    27:51:69:ab:27:c7:46:ca:df:ae:49:78:ce:6d:40:
                    9f:a8:b5:f7:3d:88:2f:68:e0:43:a5:81:bc:34:ad:
                    c2:cf:b7:2c:43:3e:30:8b:e3:ad:33:fc:d2:eb:3d:
                    07:07:e0:96:dd:6b:4e:f7:4d:6b:6e:ae:78:0b:95:
                    0c:33:a8:c5:6e:96:dc:10:36:c3:15:98:94:97:43:
                    f8:cd:dc:85:d7:60:2e:ea:66:a0:c4:b1:4a:bd:7b:
                    a5:29:bc:34:37:96:29:a5:d7:48:f0:0b:f4:97:d7:
                    3a:54:25:7b:91:e9:78:e9:d0:66:54:c6:89:b5:73:
                    a5:3b:f8:d8:ae:38:71:0c:e9:f9:31:44:0b:3a:61:
                    50:07:e7:ae:35:bd:d8:d7:c5:88:8a:dd:c2:ed:a1:
                    61:2d:22:2f:db:a0:67:9b:82:3f:02:e0:fb:08:a3:
                    56:d1:2f:cc:3a:4a:d4:47:17:61:37:4f:03:ce:55:
                    f6:04:1e:e1:31:b6:45:8f:53:f8:4d:74:35:6f:ee:
                    3a:e3:69:22:b7:c0:08:a3:fd:65:d1:ff:04:c5:db:
                    7f:15:49:a8:ec:0c:14:35:fe:7f:81:6b:53:7f:84:
                    cf:70:5f:1e:15:4a:22:6a:52:da:6f:9b:b6:47:8c:
                    2d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6B:C2:D7:A5:D6:18:09:DA:5B:5E:A9:CA:E8:B4:A7:07:A6:B0:94
            X509v3 Authority Key Identifier:
                keyid:96:1C:10:29:1E:95:15:8C:F1:2D:8E:AA:6C:C5:D0:B0:5D:E8:58:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/1/961C10291E95158CF12D8EAA6CC5D0B05DE85838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961C10291E95158CF12D8EAA6CC5D0B05DE85838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/1/323830343a343632633a3a2f33322d3332203d3e20323636393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:462c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:42:65:90:66:0b:dd:ad:ac:87:81:04:68:e9:57:a5:5d:a1:
         24:76:c2:2e:1b:2b:25:dd:0e:df:bc:bb:48:a1:56:9f:88:70:
         03:86:a5:8d:c3:37:63:10:74:e4:4d:ae:52:19:15:92:3a:c6:
         09:c3:37:5a:c9:da:ae:a3:2e:f6:15:ff:7e:07:bf:a9:a2:0e:
         76:87:4f:2d:f7:ab:f4:ae:5f:4f:a7:0e:0b:b5:65:04:69:21:
         1d:e1:a7:ba:31:f7:47:bb:6b:a3:45:90:ad:51:b8:e3:e0:03:
         be:ce:80:59:57:72:65:5b:5d:b9:45:8b:65:36:1a:c6:9a:aa:
         a2:7f:49:a7:4e:fc:45:48:8c:04:de:24:b5:f1:a7:b5:e7:86:
         57:39:2d:83:bb:cb:4a:8d:98:22:b7:12:77:8e:28:83:55:0f:
         3f:1f:6d:f3:ba:86:78:b8:76:d2:e5:db:25:d5:c4:31:b7:8e:
         a8:24:85:56:ce:91:08:43:36:13:dc:76:dd:21:02:9b:f9:71:
         78:2f:f6:62:8b:f2:2d:fd:65:c8:44:33:c6:c5:96:84:a7:04:
         5e:a1:9d:44:c1:99:aa:80:39:b0:39:d8:6a:25:55:c8:19:35:
         95:c1:2d:16:6a:e5:7d:a9:0e:56:9a:ba:20:9e:17:db:88:cd:
         f5:7a:71:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:15:26 2024 by rpki-client on console-fra.rpki-client.org