Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/323830343a323561343a3a2f33322d313238203d3e203532383231.roa
File:                     323830343a323561343a3a2f33322d313238203d3e203532383231.roa (raw, json)
Hash identifier:          vGZtWWS5AEZQpMfNacnb+qPe45FThe3Jq4bvoGAIzLg=
Subject key identifier:   63:BF:1A:14:D2:25:4F:2A:76:8F:91:51:F2:BB:80:6D:B1:51:E2:E7
Certificate issuer:       /CN=AA090686B63C4DDE208B445E0CACD3F4386E8D00
Certificate serial:       57A0D14CBA85DFD8F802520B5A76715654147EA3
Authority key identifier: AA:09:06:86:B6:3C:4D:DE:20:8B:44:5E:0C:AC:D3:F4:38:6E:8D:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/323830343a323561343a3a2f33322d313238203d3e203532383231.roa
Signing time:             Fri 05 Apr 2024 04:49:16 +0000
ROA not before:           Fri 05 Apr 2024 04:44:16 +0000
ROA not after:            Fri 04 Apr 2025 04:49:16 +0000
asID:                     52821
IP address blocks:        2804:25a4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.crl
                          rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a0:d1:4c:ba:85:df:d8:f8:02:52:0b:5a:76:71:56:54:14:7e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA090686B63C4DDE208B445E0CACD3F4386E8D00
        Validity
            Not Before: Apr  5 04:44:16 2024 GMT
            Not After : Apr  4 04:49:16 2025 GMT
        Subject: CN=63BF1A14D2254F2A768F9151F2BB806DB151E2E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:99:97:8c:40:5b:9d:95:37:e6:ab:d4:5a:25:
                    c3:f9:e9:e7:e8:8d:27:1a:e9:65:80:66:39:7c:c7:
                    c5:2a:f1:c5:af:30:c3:d6:87:f3:ec:b1:48:c7:a4:
                    bc:c4:80:5a:6e:3e:70:4d:d0:b0:6f:bc:83:71:b2:
                    d7:22:dc:80:67:03:5b:3d:f6:43:d2:a8:c4:8e:fa:
                    76:b9:40:a2:de:57:47:ac:9b:16:d9:2c:6f:e1:31:
                    b4:0f:cf:3c:df:7d:63:19:d3:0d:a3:f0:65:1d:a9:
                    92:80:5c:44:83:88:8f:e9:10:6f:13:c0:0c:ac:40:
                    4e:0b:be:13:7d:96:a8:ac:ab:c9:af:00:66:a2:36:
                    d9:1b:b6:ca:3b:cd:48:98:43:e6:75:d4:33:18:f3:
                    1a:4a:fc:05:67:b5:da:10:5c:2c:57:d4:4e:f7:fe:
                    01:8b:06:82:b6:42:7b:c7:c2:fe:40:f5:1c:1e:85:
                    4f:32:16:c5:e0:3a:e8:02:93:ef:1c:94:15:19:93:
                    5e:a5:cd:c5:ea:a1:c9:1a:c2:15:ab:a9:d5:d6:e7:
                    42:3f:b7:1c:48:84:af:12:64:4c:7e:b7:45:3f:e9:
                    dd:51:88:17:61:c6:fb:b3:72:1a:0d:ec:b7:1a:79:
                    5d:eb:c2:db:a0:2e:c8:29:44:0d:ed:6e:d6:fc:6f:
                    4b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BF:1A:14:D2:25:4F:2A:76:8F:91:51:F2:BB:80:6D:B1:51:E2:E7
            X509v3 Authority Key Identifier:
                keyid:AA:09:06:86:B6:3C:4D:DE:20:8B:44:5E:0C:AC:D3:F4:38:6E:8D:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/323830343a323561343a3a2f33322d313238203d3e203532383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:22:cb:d3:de:d3:d1:55:b7:ef:b5:f2:2b:6e:c2:90:f2:2d:
         b9:f0:ed:4c:6a:ca:c5:b2:b6:a1:6d:41:cd:f8:0a:90:0f:a7:
         ba:89:1c:02:e3:81:df:b1:fa:33:39:59:da:94:78:ef:f0:c3:
         a3:8b:1b:4a:ce:84:90:2d:05:dd:b6:38:a8:73:49:4d:a7:34:
         c3:25:cf:80:c8:2f:f1:19:65:cd:67:6f:cb:b4:06:9e:c6:70:
         2a:2d:25:bf:88:65:b1:c5:4d:cf:2e:bc:e3:e6:13:0d:52:9a:
         8e:97:ca:3c:01:24:7f:23:39:be:01:c8:e7:de:4a:7f:75:4f:
         5f:fa:d0:bc:4f:80:ff:8c:2b:3a:30:14:91:c0:95:e3:12:01:
         69:a6:e8:37:a1:1d:6f:85:07:34:4d:cb:60:55:c2:44:4d:cd:
         e3:f1:20:31:c8:29:21:a9:88:c8:33:a4:31:67:af:8f:ce:4e:
         b3:22:87:64:7b:cd:56:bd:12:2f:59:f8:88:ab:c9:6d:9d:c6:
         d7:af:75:c3:38:72:1b:09:b9:09:5d:f3:9a:4f:4a:72:4d:32:
         36:6b:17:e9:50:cb:ef:22:14:f1:24:60:78:3b:48:a8:92:dc:
         d0:7d:b8:70:70:47:55:eb:f3:6d:74:52:cc:14:f6:c9:a6:0f:
         43:58:d2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:34 2024 by rpki-client on console-ams.rpki-client.org