Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/warijSjJEV8nVc5KcLabSwroPbYEZpAV6xvDUXcYqBb/1/323830343a383634383a3a2f33322d3332203d3e20323732363333.roa
File:                     323830343a383634383a3a2f33322d3332203d3e20323732363333.roa (raw, json)
Hash identifier:          HgjQ5SnvEiH8QwdgTlEmff1wdR7SqNPEzzfJ3XYc3Ts=
Subject key identifier:   F3:7A:1C:25:7D:0C:B9:6E:97:B5:13:D4:CB:01:4B:DA:84:09:79:AA
Certificate issuer:       /CN=2B879BD1BC8C8BC4822F65B21C2481479AEF4474
Certificate serial:       41F63DB0DA190AA23EE24B24AFB6BE5B47796FB9
Authority key identifier: 2B:87:9B:D1:BC:8C:8B:C4:82:2F:65:B2:1C:24:81:47:9A:EF:44:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B879BD1BC8C8BC4822F65B21C2481479AEF4474.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/warijSjJEV8nVc5KcLabSwroPbYEZpAV6xvDUXcYqBb/1/323830343a383634383a3a2f33322d3332203d3e20323732363333.roa
Signing time:             Thu 04 Apr 2024 14:22:28 +0000
ROA not before:           Thu 04 Apr 2024 14:17:28 +0000
ROA not after:            Thu 03 Apr 2025 14:22:28 +0000
asID:                     272633
IP address blocks:        2804:8648::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/warijSjJEV8nVc5KcLabSwroPbYEZpAV6xvDUXcYqBb/1/2B879BD1BC8C8BC4822F65B21C2481479AEF4474.crl
                          rsync://rpki-repo.registro.br/repo/warijSjJEV8nVc5KcLabSwroPbYEZpAV6xvDUXcYqBb/1/2B879BD1BC8C8BC4822F65B21C2481479AEF4474.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B879BD1BC8C8BC4822F65B21C2481479AEF4474.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f6:3d:b0:da:19:0a:a2:3e:e2:4b:24:af:b6:be:5b:47:79:6f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B879BD1BC8C8BC4822F65B21C2481479AEF4474
        Validity
            Not Before: Apr  4 14:17:28 2024 GMT
            Not After : Apr  3 14:22:28 2025 GMT
        Subject: CN=F37A1C257D0CB96E97B513D4CB014BDA840979AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a8:22:73:2b:6c:93:cb:f0:ef:e6:5b:2c:65:
                    99:bc:cb:69:4d:cb:b8:b6:27:bc:90:73:e4:8b:91:
                    5a:8c:27:17:20:b9:fa:91:aa:79:12:7e:2f:ae:32:
                    31:f2:c9:05:69:d2:9f:49:9d:16:d6:18:a6:2f:ac:
                    5e:20:a2:6a:0d:cd:4a:f0:f4:63:da:9d:aa:ac:5a:
                    ec:a3:0e:70:ec:6d:0d:5e:e7:10:a9:ce:99:2c:9d:
                    a5:a1:8c:48:d2:53:bd:d2:ae:5e:d1:c8:39:bf:f7:
                    63:8b:ca:74:10:d7:cc:c7:6c:b4:ac:67:59:1a:d3:
                    92:14:36:a1:48:87:80:0b:28:47:b9:56:03:68:65:
                    eb:dc:e9:b2:75:67:fa:40:49:99:a3:14:2b:68:30:
                    5a:eb:5c:d5:6d:d4:fc:c9:b0:7f:17:cc:7c:cc:ab:
                    bc:5a:46:92:c0:f2:70:2d:cb:a7:6a:0c:6d:42:00:
                    47:56:4a:6f:27:c0:72:eb:ea:34:0c:97:56:13:b0:
                    f7:55:d9:69:5c:fe:bd:e5:c7:3d:95:3a:3d:24:1a:
                    87:4d:7c:1a:71:03:ba:ac:56:cf:bf:da:cf:c1:af:
                    1a:d0:08:aa:6e:af:91:f2:d1:c8:7e:38:4b:83:11:
                    a9:4c:2e:40:af:5f:a7:f0:5b:59:2a:c1:4c:88:40:
                    1b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7A:1C:25:7D:0C:B9:6E:97:B5:13:D4:CB:01:4B:DA:84:09:79:AA
            X509v3 Authority Key Identifier:
                keyid:2B:87:9B:D1:BC:8C:8B:C4:82:2F:65:B2:1C:24:81:47:9A:EF:44:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/warijSjJEV8nVc5KcLabSwroPbYEZpAV6xvDUXcYqBb/1/2B879BD1BC8C8BC4822F65B21C2481479AEF4474.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B879BD1BC8C8BC4822F65B21C2481479AEF4474.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/warijSjJEV8nVc5KcLabSwroPbYEZpAV6xvDUXcYqBb/1/323830343a383634383a3a2f33322d3332203d3e20323732363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8648::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:18:62:89:98:d0:c8:46:6e:26:2b:9b:e1:a2:1a:14:e8:76:
         86:3b:59:5d:70:3d:26:37:7d:af:9f:d0:3c:10:cf:c9:01:10:
         8f:2f:a1:8e:d9:57:7b:07:42:8f:55:d3:99:e5:d7:5a:9b:89:
         2c:ca:ca:42:98:05:2c:a5:9f:fa:99:35:99:a2:af:0e:6b:ac:
         b4:aa:72:08:ea:3c:0f:e5:36:6d:58:07:87:47:bd:c6:76:9e:
         49:f6:f6:0c:b1:a9:c8:30:53:3e:d0:2c:f0:1e:3f:9a:6b:74:
         c0:34:31:e3:b1:99:a4:3d:91:07:47:bb:01:0d:2b:67:51:38:
         e5:ce:87:a9:6f:6b:0a:6f:6e:18:8d:a0:fd:d2:7a:59:45:57:
         c9:ca:f2:cb:1e:3e:e7:4d:fa:e4:f8:fc:42:58:3f:09:cf:39:
         7a:7a:5f:56:e7:65:d3:1e:8a:6f:56:e0:be:f6:3a:cc:58:b5:
         30:3f:91:9a:a2:51:a4:97:d3:9f:1a:9a:1f:6f:89:9a:31:b4:
         18:27:e3:6c:35:db:54:d0:f0:5c:7d:1c:fd:17:a3:55:81:f3:
         06:6d:58:35:c3:96:fc:96:ac:89:d6:04:65:a3:c8:e6:4d:ff:
         aa:64:7e:b0:a6:55:08:9b:97:50:23:1f:e1:6d:72:66:f2:7d:
         d6:95:ea:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:51:35 2024 by rpki-client on console-fra.rpki-client.org