Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/323830343a3837383a3a2f33322d3336203d3e20323632333734.roa
File:                     323830343a3837383a3a2f33322d3336203d3e20323632333734.roa (raw, json)
Hash identifier:          b9yK+OhKktoALkGnlBXGJUif7JQgKVW3I5aqh7mBf3U=
Subject key identifier:   93:68:AC:BE:34:BF:EB:85:84:42:43:D9:79:50:F1:AC:B8:FA:AA:11
Certificate issuer:       /CN=FD189F4FD7735283B4B27F3CF49E9E1A8456D18F
Certificate serial:       709A3479EA9298561D2C1EF254A09A54AD91670B
Authority key identifier: FD:18:9F:4F:D7:73:52:83:B4:B2:7F:3C:F4:9E:9E:1A:84:56:D1:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/323830343a3837383a3a2f33322d3336203d3e20323632333734.roa
Signing time:             Fri 08 Dec 2023 12:34:43 +0000
ROA not before:           Fri 08 Dec 2023 12:29:43 +0000
ROA not after:            Fri 06 Dec 2024 12:34:43 +0000
asID:                     262374
IP address blocks:        2804:878::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.crl
                          rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9a:34:79:ea:92:98:56:1d:2c:1e:f2:54:a0:9a:54:ad:91:67:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD189F4FD7735283B4B27F3CF49E9E1A8456D18F
        Validity
            Not Before: Dec  8 12:29:43 2023 GMT
            Not After : Dec  6 12:34:43 2024 GMT
        Subject: CN=9368ACBE34BFEB85844243D97950F1ACB8FAAA11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:af:f8:7e:88:37:5e:d7:7e:66:c3:f6:0b:10:
                    21:9f:f8:95:a3:62:8a:fb:11:52:a8:d6:c7:fb:dd:
                    bb:4b:79:47:2a:a1:aa:2f:99:fa:0a:20:84:2e:44:
                    a1:71:cf:77:cd:20:ea:98:5c:64:af:08:da:c4:95:
                    ce:ea:03:cc:82:5e:be:a6:ae:6a:64:d5:ad:3d:f1:
                    f9:e4:9c:fa:49:95:92:bd:d9:a5:af:93:24:1c:b2:
                    b7:df:82:ab:26:09:fd:83:d3:d5:0c:f6:29:cf:4f:
                    48:ff:6d:c1:fe:0d:b2:20:7f:61:48:ac:c2:3d:99:
                    0f:ab:b0:c2:e5:13:0b:a3:85:c8:2c:0d:17:26:34:
                    00:33:ae:4a:be:a9:0c:22:05:29:71:0a:81:cf:50:
                    f1:e4:ca:c7:86:fb:c6:92:92:ef:73:95:b5:a8:64:
                    9b:3b:f3:aa:b7:7f:3a:d5:34:b5:71:3a:e4:a4:33:
                    c3:d1:e1:94:31:d5:dc:b1:9e:ef:4e:1b:9d:42:ac:
                    63:39:f0:da:c9:e9:6f:c0:21:71:d8:85:16:4f:86:
                    b2:da:ee:a2:39:b2:57:12:11:15:57:c7:0f:bb:61:
                    ac:0f:49:34:fc:30:25:8f:ab:c5:07:69:a5:8c:f6:
                    d7:a7:8a:ec:3a:86:c4:05:eb:ae:46:34:ef:1d:72:
                    2e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:68:AC:BE:34:BF:EB:85:84:42:43:D9:79:50:F1:AC:B8:FA:AA:11
            X509v3 Authority Key Identifier:
                keyid:FD:18:9F:4F:D7:73:52:83:B4:B2:7F:3C:F4:9E:9E:1A:84:56:D1:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/323830343a3837383a3a2f33322d3336203d3e20323632333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:878::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:69:91:a8:b8:2d:5c:b8:42:6d:f4:3f:fe:ed:60:40:83:12:
         96:94:b0:e4:42:e5:8e:ca:73:51:cf:f2:38:98:36:f4:1d:c3:
         d7:8d:e0:d7:74:fc:35:ec:96:b8:23:c6:a0:6c:f0:ea:63:53:
         5e:5a:39:ff:7c:72:4f:82:08:b9:80:0f:c1:ef:4e:b0:9d:4f:
         e9:99:25:cd:b6:8a:c1:42:de:af:7f:06:9e:f5:bd:d8:25:11:
         d3:bb:26:71:99:ae:f7:e0:1a:b4:8e:97:8b:11:22:d7:01:c7:
         b2:77:08:69:cb:40:70:8c:25:54:2f:9d:f3:d8:fa:8a:28:cf:
         36:b5:c2:23:05:aa:90:10:b4:c7:f0:41:be:98:9f:38:0d:3f:
         a1:22:84:6c:93:66:97:e7:72:62:d0:4d:d7:4d:77:53:1c:67:
         81:bf:6d:04:9e:27:3f:2f:81:e7:88:3a:cd:40:5c:bf:56:bb:
         0f:dc:da:31:83:01:37:bd:a2:01:04:7f:e0:39:0a:00:2f:2e:
         c8:e5:58:18:42:e1:22:2c:4c:d2:c6:d9:05:53:90:d6:fc:d6:
         a8:7c:e7:4b:cc:d9:89:c3:00:a2:d0:52:57:eb:a3:1f:d1:cf:
         86:72:3e:12:32:4e:a7:52:59:56:d6:88:6b:d1:9d:8c:29:86:
         23:ef:2e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 07:51:33 2024 by rpki-client on console.sobornost.net