Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/323830343a3136383a3a2f33322d3438203d3e203238323739.roa
File:                     323830343a3136383a3a2f33322d3438203d3e203238323739.roa (raw, json)
Hash identifier:          zWrB6x6OMldh/tpUnHx8gQc8qAbY6c5stBsXnr8tMgA=
Subject key identifier:   26:61:08:1D:DE:CF:F2:4F:44:60:B7:2C:6D:D7:83:D8:AD:E5:43:6D
Certificate issuer:       /CN=713D42750562117CA0DB7D96A623898EF91F6ADA
Certificate serial:       458934AB659E503072BC4A9BFDFBE3DF42A6B201
Authority key identifier: 71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/323830343a3136383a3a2f33322d3438203d3e203238323739.roa
Signing time:             Thu 04 Apr 2024 23:37:57 +0000
ROA not before:           Thu 04 Apr 2024 23:32:57 +0000
ROA not after:            Thu 03 Apr 2025 23:37:57 +0000
asID:                     28279
IP address blocks:        2804:168::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl
                          rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:89:34:ab:65:9e:50:30:72:bc:4a:9b:fd:fb:e3:df:42:a6:b2:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713D42750562117CA0DB7D96A623898EF91F6ADA
        Validity
            Not Before: Apr  4 23:32:57 2024 GMT
            Not After : Apr  3 23:37:57 2025 GMT
        Subject: CN=2661081DDECFF24F4460B72C6DD783D8ADE5436D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:31:c2:b4:64:35:45:24:60:c0:48:80:3c:6f:
                    3a:66:11:0a:ab:b8:d5:23:cb:53:0e:fc:fa:47:fd:
                    9b:db:fe:ea:f7:6e:1c:99:b3:02:07:ff:b1:df:83:
                    32:1d:fd:5e:08:65:54:1f:43:87:55:fc:31:f3:1d:
                    69:25:d8:95:11:44:f6:45:6e:67:ab:ce:0f:a5:c8:
                    f6:1d:5d:2f:9d:5b:b1:41:f5:7c:ec:30:b0:86:f3:
                    6c:26:45:6f:8e:da:cd:dd:2e:5d:ce:fc:e2:4c:16:
                    a5:57:ef:c7:5b:10:23:20:ee:ee:9a:22:70:3b:a4:
                    d5:2a:95:48:90:d3:cd:14:9b:68:9d:3f:d0:14:d9:
                    6a:aa:22:b8:c3:a3:9a:7d:dc:f4:14:50:f3:e5:5e:
                    fa:05:14:f1:08:17:2e:b1:0c:a0:46:2c:7e:2f:3f:
                    81:18:b2:6a:ec:d4:85:e5:9d:0f:c2:35:bd:08:00:
                    3f:d2:df:6a:b1:67:05:a2:2f:d6:7d:6a:b9:57:55:
                    4b:1e:f2:da:21:a4:8d:14:6d:62:ad:52:61:54:c4:
                    31:60:c8:52:be:4f:a1:1d:50:ce:3d:51:43:8f:a5:
                    47:b9:6f:82:5c:35:7d:5c:41:c3:09:25:e8:14:ab:
                    a5:be:4e:f2:09:06:62:33:ce:a3:13:89:6a:77:82:
                    71:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:61:08:1D:DE:CF:F2:4F:44:60:B7:2C:6D:D7:83:D8:AD:E5:43:6D
            X509v3 Authority Key Identifier:
                keyid:71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/323830343a3136383a3a2f33322d3438203d3e203238323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:168::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:29:08:35:62:43:00:65:fb:03:6b:03:4c:0c:53:04:e1:aa:
         7c:be:8e:aa:1a:1f:cb:5d:78:23:e4:90:78:c6:73:46:99:46:
         f4:3d:9a:96:63:9a:93:a8:56:2d:52:4d:e5:fe:9e:68:18:cf:
         85:d2:da:a2:0f:75:f2:05:bc:85:39:af:29:18:06:96:68:38:
         e9:d1:9f:10:ff:50:2c:3b:f7:88:4f:9e:ff:e2:f7:31:d5:14:
         ad:17:9a:90:95:83:23:fb:c7:1e:81:33:8b:8c:bd:c6:95:2e:
         42:be:31:d5:d6:2a:71:07:3b:26:8f:2c:a2:64:b4:d6:2a:a3:
         23:44:e7:ec:ab:23:3a:25:a5:ac:9c:3c:bc:55:6a:4b:46:cf:
         88:ca:1c:fc:5e:9d:e4:31:f3:63:94:6e:f6:ae:1c:59:8f:8f:
         80:34:56:86:0e:ab:e2:21:68:0d:69:10:a2:f8:66:02:da:84:
         5e:5f:20:f7:05:4f:8e:f5:0f:38:29:ef:40:4f:ee:b2:10:f1:
         6d:f1:9b:f8:3d:23:34:b4:72:1e:88:10:e3:ae:52:5c:37:c6:
         c6:a5:c9:8b:a1:4f:27:37:38:9b:7b:c2:0d:b2:f5:58:03:d2:
         9d:61:4a:56:20:76:a7:56:c2:78:18:2a:07:5e:6b:00:99:e0:
         63:4a:75:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:07:41 2024 by rpki-client on console-fra.rpki-client.org