Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/323830343a323063383a3a2f33322d3335203d3e20323634353134.roa
File:                     323830343a323063383a3a2f33322d3335203d3e20323634353134.roa (raw, json)
Hash identifier:          fCAuGBxWXtW/XQ5wxCXbnrs1OVIS6mq3nhWFseUELaA=
Subject key identifier:   4F:8D:2C:35:D5:67:05:54:F8:24:38:42:F5:0D:31:37:8B:FA:DC:E9
Certificate issuer:       /CN=5116131606911447B81AE3C7A8BE76D217A043B2
Certificate serial:       3C746ECC6598C6FE384C67BA0AB3BE483B334F91
Authority key identifier: 51:16:13:16:06:91:14:47:B8:1A:E3:C7:A8:BE:76:D2:17:A0:43:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5116131606911447B81AE3C7A8BE76D217A043B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/323830343a323063383a3a2f33322d3335203d3e20323634353134.roa
Signing time:             Wed 03 Apr 2024 18:31:50 +0000
ROA not before:           Wed 03 Apr 2024 18:26:50 +0000
ROA not after:            Wed 02 Apr 2025 18:31:50 +0000
asID:                     264514
IP address blocks:        2804:20c8::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/5116131606911447B81AE3C7A8BE76D217A043B2.crl
                          rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/5116131606911447B81AE3C7A8BE76D217A043B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5116131606911447B81AE3C7A8BE76D217A043B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:74:6e:cc:65:98:c6:fe:38:4c:67:ba:0a:b3:be:48:3b:33:4f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5116131606911447B81AE3C7A8BE76D217A043B2
        Validity
            Not Before: Apr  3 18:26:50 2024 GMT
            Not After : Apr  2 18:31:50 2025 GMT
        Subject: CN=3082010A0282010100CB4B485C00AE8A86D36B2E196B38C113292EAB9C8CB57C41F64F374AD6BEE5B4739400A54FFE04FBCB9BBF516988D1208064A816B3365CBC4A00445FFCA7229BE3C0166FC76C911C092E65A0AE3C725064017668590F4DB6E48E30F1606A4D806A08590345D2655093BA544280EF127AD661E5991B75458C6CAAFF4E4CD9C82382C535EC27B96412287B932558E0E14C72D8AE972DE9C7D957F42C6A15A6241291C62241B2A5F6E1E12AEC60D54B6478D3795ECC7AD8599E34C121327BEE12A5D83F10F58545445775670E6E0A1A1CD7FF8D3512EBAC78BD1CCE1ECC9F9AFEBB6F039B4B84B6515AC0500D31FA63E2250B0026FC4E8080D58E851A2B96BC7EED0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4b:48:5c:00:ae:8a:86:d3:6b:2e:19:6b:38:
                    c1:13:29:2e:ab:9c:8c:b5:7c:41:f6:4f:37:4a:d6:
                    be:e5:b4:73:94:00:a5:4f:fe:04:fb:cb:9b:bf:51:
                    69:88:d1:20:80:64:a8:16:b3:36:5c:bc:4a:00:44:
                    5f:fc:a7:22:9b:e3:c0:16:6f:c7:6c:91:1c:09:2e:
                    65:a0:ae:3c:72:50:64:01:76:68:59:0f:4d:b6:e4:
                    8e:30:f1:60:6a:4d:80:6a:08:59:03:45:d2:65:50:
                    93:ba:54:42:80:ef:12:7a:d6:61:e5:99:1b:75:45:
                    8c:6c:aa:ff:4e:4c:d9:c8:23:82:c5:35:ec:27:b9:
                    64:12:28:7b:93:25:58:e0:e1:4c:72:d8:ae:97:2d:
                    e9:c7:d9:57:f4:2c:6a:15:a6:24:12:91:c6:22:41:
                    b2:a5:f6:e1:e1:2a:ec:60:d5:4b:64:78:d3:79:5e:
                    cc:7a:d8:59:9e:34:c1:21:32:7b:ee:12:a5:d8:3f:
                    10:f5:85:45:44:57:75:67:0e:6e:0a:1a:1c:d7:ff:
                    8d:35:12:eb:ac:78:bd:1c:ce:1e:cc:9f:9a:fe:bb:
                    6f:03:9b:4b:84:b6:51:5a:c0:50:0d:31:fa:63:e2:
                    25:0b:00:26:fc:4e:80:80:d5:8e:85:1a:2b:96:bc:
                    7e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8D:2C:35:D5:67:05:54:F8:24:38:42:F5:0D:31:37:8B:FA:DC:E9
            X509v3 Authority Key Identifier:
                keyid:51:16:13:16:06:91:14:47:B8:1A:E3:C7:A8:BE:76:D2:17:A0:43:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/5116131606911447B81AE3C7A8BE76D217A043B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5116131606911447B81AE3C7A8BE76D217A043B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/323830343a323063383a3a2f33322d3335203d3e20323634353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:4b:67:3b:ff:50:fd:53:29:a5:3e:4a:2e:8d:b0:a6:03:5d:
         b0:2b:89:ff:b3:92:a0:e7:a1:b3:f1:ab:e4:fb:e8:75:81:4d:
         bb:33:3e:21:07:e2:e6:fe:aa:41:97:a6:f5:d5:9d:d5:ee:55:
         fc:ee:28:cb:c6:97:74:44:ca:a3:2a:3f:16:6b:0d:67:72:75:
         8a:ff:77:20:7b:ea:47:cb:c3:b9:f9:9e:9d:ed:8c:9f:cf:75:
         83:2b:65:e5:ec:99:e6:46:81:ed:54:89:14:7f:9b:a1:b3:e1:
         c7:8c:18:65:14:6e:44:d0:0a:a2:61:42:86:08:70:6f:06:5c:
         18:13:00:b3:f4:bf:e0:98:20:4b:aa:4a:2e:ac:46:ae:c8:5c:
         a6:48:eb:0f:e1:db:92:b1:69:ec:50:60:ea:f6:1c:d8:09:8c:
         25:88:6b:15:2f:da:2d:21:4d:6b:1e:04:56:17:7b:40:20:00:
         eb:a8:99:6f:d2:98:88:2c:6c:ad:26:a2:9f:45:bd:88:8d:7f:
         b5:e0:01:7d:fd:81:05:52:22:c4:eb:86:e5:9b:73:8b:82:5c:
         81:3d:70:a4:53:29:a2:a9:77:eb:64:b1:db:8c:2d:8d:e4:93:
         6b:86:11:d8:c7:21:a0:57:b2:60:f7:97:93:1b:ca:3b:ec:90:
         53:08:a0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:47 2024 by rpki-client on console-fra.rpki-client.org