Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/k3PSyxBLexrCzTbn2PSQ8dwVxPsWShouPTL9M5qjAub/0/323830343a356439633a3a2f33322d313238203d3e20323638393832.roa
File:                     323830343a356439633a3a2f33322d313238203d3e20323638393832.roa (raw, json)
Hash identifier:          q3PeMyLrukfEG+48ElzwVtbgZ/VXBwt6Nzz+GxYwi7M=
Subject key identifier:   80:35:CC:B2:59:DD:0D:1B:6E:1A:4C:21:84:2E:2F:AE:33:77:1D:99
Certificate issuer:       /CN=C96F7A2B618F0D88FDB9AFE0AEC04121374A0C40
Certificate serial:       0FEB740181BA6219F57D9D9C04C75BE23D387A9F
Authority key identifier: C9:6F:7A:2B:61:8F:0D:88:FD:B9:AF:E0:AE:C0:41:21:37:4A:0C:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C96F7A2B618F0D88FDB9AFE0AEC04121374A0C40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k3PSyxBLexrCzTbn2PSQ8dwVxPsWShouPTL9M5qjAub/0/323830343a356439633a3a2f33322d313238203d3e20323638393832.roa
Signing time:             Thu 04 Apr 2024 12:35:43 +0000
ROA not before:           Thu 04 Apr 2024 12:30:43 +0000
ROA not after:            Thu 03 Apr 2025 12:35:43 +0000
asID:                     268982
IP address blocks:        2804:5d9c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/k3PSyxBLexrCzTbn2PSQ8dwVxPsWShouPTL9M5qjAub/0/C96F7A2B618F0D88FDB9AFE0AEC04121374A0C40.crl
                          rsync://rpki-repo.registro.br/repo/k3PSyxBLexrCzTbn2PSQ8dwVxPsWShouPTL9M5qjAub/0/C96F7A2B618F0D88FDB9AFE0AEC04121374A0C40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C96F7A2B618F0D88FDB9AFE0AEC04121374A0C40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:eb:74:01:81:ba:62:19:f5:7d:9d:9c:04:c7:5b:e2:3d:38:7a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C96F7A2B618F0D88FDB9AFE0AEC04121374A0C40
        Validity
            Not Before: Apr  4 12:30:43 2024 GMT
            Not After : Apr  3 12:35:43 2025 GMT
        Subject: CN=8035CCB259DD0D1B6E1A4C21842E2FAE33771D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:a6:58:5a:db:7e:94:d6:70:cd:6a:f9:9e:
                    f8:57:6d:af:08:29:77:96:99:7b:6e:50:98:e4:2a:
                    9b:07:b0:32:4d:c9:4d:23:a3:13:09:40:ce:ef:8e:
                    71:91:44:b6:f7:f5:2a:0a:9b:ed:b1:78:88:6c:be:
                    4e:57:d4:54:2d:e0:78:3a:1c:c6:78:de:89:4d:97:
                    50:d2:5e:4d:ff:30:b5:d7:7a:fe:3e:ed:d6:ba:a7:
                    c7:df:27:92:b4:a6:ed:9a:b3:f2:87:ed:92:a1:b8:
                    29:aa:a0:2f:7e:ff:08:54:5a:e9:35:f5:7c:ac:63:
                    26:21:02:bc:69:0d:29:66:b0:61:e0:c9:ac:63:19:
                    eb:b3:f1:2a:19:33:80:f3:9b:00:86:78:49:a8:a7:
                    ed:24:28:bb:9e:0a:51:e2:7e:0f:73:a0:f9:14:cc:
                    68:e6:39:55:93:60:af:cd:eb:ce:55:6f:cb:1a:91:
                    3a:50:f6:f4:da:1c:cc:c7:ab:8a:1f:f5:c4:75:01:
                    fa:9c:6f:7d:1c:64:a7:1d:aa:a2:01:e0:90:69:3c:
                    93:18:9e:0a:f7:13:9e:51:86:54:ab:4d:b3:dd:df:
                    be:3a:ff:61:d1:08:e7:70:4d:22:65:48:d8:ae:88:
                    c8:ac:fa:5f:ae:39:3c:c4:c4:01:cc:5e:45:48:65:
                    a8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:35:CC:B2:59:DD:0D:1B:6E:1A:4C:21:84:2E:2F:AE:33:77:1D:99
            X509v3 Authority Key Identifier:
                keyid:C9:6F:7A:2B:61:8F:0D:88:FD:B9:AF:E0:AE:C0:41:21:37:4A:0C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k3PSyxBLexrCzTbn2PSQ8dwVxPsWShouPTL9M5qjAub/0/C96F7A2B618F0D88FDB9AFE0AEC04121374A0C40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C96F7A2B618F0D88FDB9AFE0AEC04121374A0C40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k3PSyxBLexrCzTbn2PSQ8dwVxPsWShouPTL9M5qjAub/0/323830343a356439633a3a2f33322d313238203d3e20323638393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:09:b3:39:4c:b2:19:67:6f:6d:11:aa:a4:08:ff:af:ce:05:
         32:34:22:54:83:e5:c0:0a:df:b5:ef:6a:4e:ca:34:99:dc:70:
         51:8d:f1:a9:8f:b3:d9:1b:5c:47:fd:db:ec:db:9e:a1:69:0f:
         eb:1a:de:d9:d8:f3:bb:0c:d4:61:f3:b9:62:0d:ed:29:54:df:
         4d:98:9d:1c:c5:ce:51:f3:16:ed:33:21:9d:b8:36:31:ec:70:
         be:b8:ec:89:cd:da:93:52:e8:0c:99:40:c6:d1:17:1e:9c:d9:
         20:d4:ae:f7:95:65:21:48:df:d8:f0:61:4d:b3:65:35:ef:f7:
         84:30:a5:75:88:5d:e3:6e:63:24:66:9a:d1:b6:b7:c0:6b:30:
         d2:3b:8a:4e:b0:3c:e0:19:8a:f1:70:af:fe:88:ac:9b:4e:f6:
         d0:2e:77:d1:f7:a3:10:bb:36:5a:83:d4:5f:de:31:44:1f:50:
         e3:04:c9:c3:58:f0:11:6b:ab:a8:49:5c:eb:94:f7:0f:9e:9c:
         9c:8a:c4:e0:a5:ce:01:a3:d0:c2:06:80:32:6b:ff:02:f0:c1:
         9c:75:58:2c:4c:b1:f7:0a:95:a6:ec:67:b9:69:0b:69:11:62:
         6d:5c:c3:55:d2:15:2e:a3:04:9d:25:df:1e:62:3b:58:36:16:
         37:80:c7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:51:08 2024 by rpki-client on console-ams.rpki-client.org