Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/323830343a6235343a3a2f33322d3438203d3e203532373635.roa
File:                     323830343a6235343a3a2f33322d3438203d3e203532373635.roa (raw, json)
Hash identifier:          zkXM2zSa6P9DWu3hr9iXGl1IvPfRxIUOXOjs6gmfUrQ=
Subject key identifier:   04:4C:99:F4:39:7F:53:EE:8C:DF:2A:70:26:B7:F8:17:01:CE:B9:15
Certificate issuer:       /CN=A601CC15A099E546A3DCBD53AF497300DAA65598
Certificate serial:       72449F3FFC2D213B3C5CC53EC340A655FFDB6A37
Authority key identifier: A6:01:CC:15:A0:99:E5:46:A3:DC:BD:53:AF:49:73:00:DA:A6:55:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/323830343a6235343a3a2f33322d3438203d3e203532373635.roa
Signing time:             Thu 04 Apr 2024 18:15:31 +0000
ROA not before:           Thu 04 Apr 2024 18:10:31 +0000
ROA not after:            Thu 03 Apr 2025 18:15:31 +0000
asID:                     52765
IP address blocks:        2804:b54::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.crl
                          rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 00:45:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:44:9f:3f:fc:2d:21:3b:3c:5c:c5:3e:c3:40:a6:55:ff:db:6a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A601CC15A099E546A3DCBD53AF497300DAA65598
        Validity
            Not Before: Apr  4 18:10:31 2024 GMT
            Not After : Apr  3 18:15:31 2025 GMT
        Subject: CN=044C99F4397F53EE8CDF2A7026B7F81701CEB915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:05:b4:94:62:ef:73:af:8a:ac:da:bb:e7:71:
                    a2:62:e3:44:e6:95:c2:19:cc:0a:cb:3e:3f:47:21:
                    27:e3:3a:5c:63:1d:93:a1:a8:fe:b4:1d:37:28:97:
                    da:5b:dc:7f:97:a2:f6:74:92:0d:cb:bc:0a:f9:05:
                    74:a0:40:d3:7a:83:be:03:91:ef:35:92:ef:04:04:
                    a9:de:9a:bc:70:72:dc:d0:58:84:c6:ad:94:65:25:
                    7f:69:55:77:ac:92:b6:5e:4b:a7:cf:c4:12:17:84:
                    95:ed:cf:72:f6:c7:b9:6a:82:84:50:46:68:c1:51:
                    c0:d3:52:9e:1a:0a:b9:f1:13:3d:36:f4:b2:b1:3a:
                    64:8f:70:f6:94:70:06:2c:c2:c5:7d:4f:6e:60:26:
                    cc:11:a7:38:c1:69:44:c7:8a:8b:c7:ad:8b:21:88:
                    48:24:6c:a4:a4:ec:09:de:24:c6:4b:1f:87:b4:99:
                    5b:6a:46:ec:dd:9b:48:09:5d:2e:42:7d:76:66:95:
                    6e:36:77:76:f8:d7:51:30:66:90:ce:ae:46:23:10:
                    13:85:ad:c1:dc:3d:f4:9c:f7:6e:2d:be:ab:b0:a6:
                    b9:9e:35:55:78:78:45:19:d5:e4:1d:b8:0b:00:00:
                    9b:15:49:eb:81:ac:d2:8c:fa:38:5c:19:43:27:d7:
                    07:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4C:99:F4:39:7F:53:EE:8C:DF:2A:70:26:B7:F8:17:01:CE:B9:15
            X509v3 Authority Key Identifier:
                keyid:A6:01:CC:15:A0:99:E5:46:A3:DC:BD:53:AF:49:73:00:DA:A6:55:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/323830343a6235343a3a2f33322d3438203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b54::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:92:94:85:27:16:96:2d:86:33:8c:78:91:43:d2:1b:2f:5d:
         32:e6:f2:9c:7f:0a:a6:eb:21:d7:a1:71:56:87:8e:8b:49:22:
         0c:10:97:42:07:ea:cb:5c:b1:3f:28:b2:93:75:4e:f9:64:3c:
         62:a5:9a:5a:56:9c:da:d6:ba:28:03:05:37:17:7b:79:5c:fb:
         11:30:f6:f7:3a:16:b9:00:05:ed:1b:ff:68:1c:9b:35:48:4c:
         d1:95:18:61:b2:46:e3:39:6c:ba:2e:ff:ca:a3:e6:45:98:ce:
         9f:e6:a0:6e:30:6d:5b:14:dc:53:73:48:ff:53:62:88:ce:5d:
         6d:48:36:77:50:99:ea:81:74:51:cc:ad:92:8e:19:79:5f:7c:
         ae:5c:24:fd:5c:93:1e:ae:c8:da:c5:1d:b9:09:9b:db:87:60:
         6e:ad:ef:bf:18:59:c1:d9:c7:db:0a:70:7a:75:f4:b9:9c:44:
         e9:90:4c:d7:65:b9:6d:ad:f2:18:f3:18:0a:41:7b:07:f2:6f:
         8b:c7:56:96:6b:63:b6:69:29:fe:86:30:e1:b1:ed:9c:bb:11:
         45:6b:e0:34:69:2b:cc:4a:41:d3:ea:3a:4e:47:1a:0a:db:5d:
         e1:9f:12:54:e0:d0:29:20:f9:a0:4b:de:cc:f6:36:b7:5d:29:
         2c:bf:c3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:38:37 2024 by rpki-client on console-ams.rpki-client.org