Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/323830343a343830303a3a2f33322d3332203d3e20323637303931.roa
File:                     323830343a343830303a3a2f33322d3332203d3e20323637303931.roa (raw, json)
Hash identifier:          vr/Oahdek9unPEB1NTmGpUcflbRKFMN2z5neu4oDuZQ=
Subject key identifier:   E4:18:22:61:CF:D8:9D:31:C9:86:4A:20:7F:29:E6:78:70:4B:36:74
Certificate issuer:       /CN=D1767E436F91B824888366F56CC5E3F1E56F76AF
Certificate serial:       418D04495C302B00DD50FB262CB9EC32A7252960
Authority key identifier: D1:76:7E:43:6F:91:B8:24:88:83:66:F5:6C:C5:E3:F1:E5:6F:76:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/323830343a343830303a3a2f33322d3332203d3e20323637303931.roa
Signing time:             Wed 05 Apr 2023 11:42:30 +0000
ROA not before:           Wed 05 Apr 2023 11:37:30 +0000
ROA not after:            Wed 03 Apr 2024 11:42:30 +0000
asID:                     267091
IP address blocks:        2804:4800::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.crl
                          rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 13:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8d:04:49:5c:30:2b:00:dd:50:fb:26:2c:b9:ec:32:a7:25:29:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1767E436F91B824888366F56CC5E3F1E56F76AF
        Validity
            Not Before: Apr  5 11:37:30 2023 GMT
            Not After : Apr  3 11:42:30 2024 GMT
        Subject: CN=E4182261CFD89D31C9864A207F29E678704B3674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:89:ee:58:4e:20:da:9b:90:2f:bc:c9:03:a2:
                    d6:2b:d8:2a:4b:94:b8:f5:e5:bf:10:45:b4:01:4d:
                    c4:11:70:49:87:fa:6a:6d:5f:06:45:dc:8b:2b:e0:
                    0b:2a:53:d1:5c:1a:eb:c1:f0:a6:1d:ba:22:d7:9f:
                    20:80:e6:89:0c:07:89:fb:71:3d:fd:09:6b:69:d8:
                    40:58:0a:4f:91:f1:67:88:38:a7:b5:bc:e3:b9:ef:
                    9d:66:b6:89:42:f3:d0:07:d4:a1:26:55:45:f8:cc:
                    50:35:20:23:1d:3e:9c:7c:21:ee:7c:59:6e:8f:4f:
                    a7:98:2c:7f:39:46:f0:b9:61:99:f7:a7:4d:3d:fc:
                    0b:b4:e3:8e:6e:8d:90:64:de:86:59:ad:97:8e:f0:
                    fb:4f:ed:fe:dc:3f:6a:e5:93:06:83:2e:7f:27:ba:
                    b0:e5:be:07:77:df:41:c9:df:13:6d:6e:2e:58:08:
                    67:1f:70:ab:2b:bf:d7:66:ca:34:5e:55:4c:1a:72:
                    a8:4c:40:48:df:6b:29:8c:cc:77:0b:bb:1d:c3:0f:
                    90:c4:fa:8a:64:3b:5e:2d:4c:19:a0:54:d1:b9:8a:
                    15:08:b4:73:e7:c7:f3:36:a4:37:93:ce:3f:32:08:
                    4b:01:d4:3c:11:63:d9:42:8e:dd:76:68:07:dc:c9:
                    7d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:18:22:61:CF:D8:9D:31:C9:86:4A:20:7F:29:E6:78:70:4B:36:74
            X509v3 Authority Key Identifier:
                keyid:D1:76:7E:43:6F:91:B8:24:88:83:66:F5:6C:C5:E3:F1:E5:6F:76:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/323830343a343830303a3a2f33322d3332203d3e20323637303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4800::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:a6:d6:77:0b:a3:0a:63:e4:2b:84:31:c9:9f:bc:7c:4d:ce:
         b3:93:26:8c:0c:02:46:2c:73:36:48:d6:c1:94:e7:aa:09:57:
         b6:22:a5:ef:ec:bb:5f:40:13:39:40:91:4d:23:52:5f:3c:75:
         40:ee:69:a3:8f:fd:a9:55:29:50:e8:94:4f:e8:76:77:a8:c1:
         50:ad:3b:d5:5c:71:7a:83:1c:05:02:10:8b:6a:8b:a4:bc:4e:
         a4:4a:5d:6e:1c:16:94:9a:e8:98:6f:b9:80:28:de:2e:4c:ce:
         86:0a:27:68:fc:5a:de:0a:8e:93:bf:c2:5d:2a:72:bd:47:a9:
         9c:24:9b:79:15:f7:5e:2e:86:f7:91:bd:44:9c:11:cc:7b:bc:
         89:c1:c9:04:4b:ca:12:c6:cf:56:96:ba:8b:ed:dd:d1:d3:a8:
         7e:5f:43:67:3a:ac:7b:05:5a:b2:fa:95:97:41:38:29:fb:7c:
         4a:f8:c2:34:8f:35:8a:3f:9a:93:3f:8a:d0:4a:65:0d:a0:b1:
         53:0f:a2:a2:d6:1a:53:49:14:af:34:25:60:67:ea:67:15:cd:
         14:70:f8:d4:b9:87:e7:34:68:c3:a0:0a:49:dd:75:50:75:69:
         13:ff:ef:b4:cd:d0:a7:07:a3:1b:99:c3:c3:28:68:ae:85:bb:
         0e:ff:df:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:20 2024 by rpki-client on console.sobornost.net