Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/323830343a353965343a3a2f33342d3334203d3e20323638373332.roa
File:                     323830343a353965343a3a2f33342d3334203d3e20323638373332.roa (raw, json)
Hash identifier:          DoMCVwJ0ahoVOCq3L7frMQqGtYOJYWd7qwP/kLlJUMU=
Subject key identifier:   32:FE:21:2A:B4:16:6A:8B:0B:AA:BC:F9:58:0B:2B:EC:17:AF:46:C0
Certificate issuer:       /CN=B7124651D19D132543E991B7A74DD4A680768A09
Certificate serial:       5A4B67AB1832CD10FCFABC3C243424769A9362C8
Authority key identifier: B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/323830343a353965343a3a2f33342d3334203d3e20323638373332.roa
Signing time:             Wed 03 Apr 2024 18:30:10 +0000
ROA not before:           Wed 03 Apr 2024 18:25:10 +0000
ROA not after:            Wed 02 Apr 2025 18:30:10 +0000
asID:                     268732
IP address blocks:        2804:59e4::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl
                          rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 19:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4b:67:ab:18:32:cd:10:fc:fa:bc:3c:24:34:24:76:9a:93:62:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7124651D19D132543E991B7A74DD4A680768A09
        Validity
            Not Before: Apr  3 18:25:10 2024 GMT
            Not After : Apr  2 18:30:10 2025 GMT
        Subject: CN=32FE212AB4166A8B0BAABCF9580B2BEC17AF46C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:78:d5:c7:e8:0c:7c:c5:09:12:dc:b1:f9:b0:
                    d7:dd:60:33:3d:b1:6d:58:c2:8d:e9:7d:b7:6e:cf:
                    62:6c:09:ae:c1:30:e3:2d:8a:86:10:d1:62:e2:b9:
                    14:9e:af:2c:bb:c7:4d:e2:6d:10:f2:f8:99:d1:b5:
                    c4:77:ea:f9:6f:2e:95:1f:c5:59:97:14:dd:3e:1f:
                    0e:3a:bf:ee:d8:9a:6f:89:ad:fe:90:13:69:b0:11:
                    0d:12:5a:c4:f0:29:4a:3f:7c:b9:a3:a0:81:7f:dd:
                    b9:3f:28:30:16:c2:8d:62:e4:cd:db:b4:61:96:e3:
                    25:32:ed:cb:d3:d4:7b:2a:c9:ed:0a:c1:8f:50:4c:
                    62:a7:a7:7b:4d:d5:48:7a:a4:ca:c8:9f:0b:75:59:
                    81:4f:7f:97:9b:23:b9:c3:7c:e7:bb:e9:51:13:25:
                    56:55:36:5c:18:f9:12:0e:f5:11:e1:70:3e:49:6b:
                    21:fb:08:d1:ec:23:66:b3:81:2b:b4:b1:b0:8c:fa:
                    65:cb:fc:71:da:1f:5d:01:c8:ee:b1:c1:0c:82:6b:
                    96:0e:11:cd:fe:de:98:56:ad:ae:ad:4c:4a:16:3c:
                    e9:9d:1b:f6:df:f8:65:b9:64:a0:03:74:96:d4:9e:
                    6f:e2:83:26:43:83:39:19:fd:25:a1:2d:e1:3c:17:
                    8d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FE:21:2A:B4:16:6A:8B:0B:AA:BC:F9:58:0B:2B:EC:17:AF:46:C0
            X509v3 Authority Key Identifier:
                keyid:B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/323830343a353965343a3a2f33342d3334203d3e20323638373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59e4::/34

    Signature Algorithm: sha256WithRSAEncryption
         23:19:5b:09:24:1e:52:f6:cd:e5:ff:68:d5:2d:22:d2:71:18:
         08:db:74:3f:08:3f:1a:83:46:d1:c1:87:b7:e6:0a:5f:ea:64:
         cd:8a:7e:ce:83:62:40:4c:0d:42:0c:97:d8:43:da:6e:20:93:
         97:ff:9e:4e:53:ea:af:73:8d:a6:80:e2:4c:ea:c9:e6:c8:7c:
         e5:70:b6:a8:4f:7b:ce:14:be:f5:99:1a:8e:3f:d4:c3:f0:7a:
         52:02:bd:f9:66:d6:37:f2:66:bb:bc:c6:91:59:9c:c3:97:ec:
         ba:68:16:3d:b0:e4:64:b4:99:67:6d:de:34:06:85:83:11:9d:
         53:82:30:22:93:a2:e6:63:b2:df:24:74:3c:e8:7a:52:88:84:
         c9:15:0c:89:6f:d4:47:7d:d7:2d:79:75:30:ed:bf:30:91:6a:
         49:cf:4e:bf:f6:23:89:18:6d:7e:3f:71:a6:9e:fc:04:dc:6d:
         bd:92:8e:90:db:81:72:e1:6d:2a:c9:98:3e:27:97:23:ca:2d:
         e2:bc:76:76:bf:08:d7:97:64:d9:f8:48:e3:24:b4:33:96:a6:
         ab:68:44:f1:0f:1b:d6:be:d8:17:77:8b:fa:0c:24:38:a3:9b:
         a1:e7:48:ba:4d:51:e4:0e:c4:fd:0c:12:fb:74:3b:32:55:81:
         0b:47:6b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:14:10 2024 by rpki-client on console-ams.rpki-client.org