Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/2/323830343a6363343a3a2f33322d3438203d3e203532353531.roa
File:                     323830343a6363343a3a2f33322d3438203d3e203532353531.roa (raw, json)
Hash identifier:          9/cY7DJ3BRFo3KHZ2nSN6rLlDSwPL59mSV25nl9NmuM=
Subject key identifier:   25:60:66:C9:CE:E5:B8:A1:E1:AE:D4:A4:FF:4D:14:96:6F:F7:62:3B
Certificate issuer:       /CN=19FF3CAC4DD2A26EC7E57760D9D9A231D6B5A1E5
Certificate serial:       3E24AED50E2C8AD0667CEDBD748AEE69DD60B385
Authority key identifier: 19:FF:3C:AC:4D:D2:A2:6E:C7:E5:77:60:D9:D9:A2:31:D6:B5:A1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FF3CAC4DD2A26EC7E57760D9D9A231D6B5A1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/2/323830343a6363343a3a2f33322d3438203d3e203532353531.roa
Signing time:             Thu 04 Apr 2024 21:43:16 +0000
ROA not before:           Thu 04 Apr 2024 21:38:16 +0000
ROA not after:            Thu 03 Apr 2025 21:43:16 +0000
asID:                     52551
IP address blocks:        2804:cc4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/2/19FF3CAC4DD2A26EC7E57760D9D9A231D6B5A1E5.crl
                          rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/2/19FF3CAC4DD2A26EC7E57760D9D9A231D6B5A1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FF3CAC4DD2A26EC7E57760D9D9A231D6B5A1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 13:37:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:24:ae:d5:0e:2c:8a:d0:66:7c:ed:bd:74:8a:ee:69:dd:60:b3:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FF3CAC4DD2A26EC7E57760D9D9A231D6B5A1E5
        Validity
            Not Before: Apr  4 21:38:16 2024 GMT
            Not After : Apr  3 21:43:16 2025 GMT
        Subject: CN=256066C9CEE5B8A1E1AED4A4FF4D14966FF7623B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:87:ad:46:e9:5c:f3:d6:12:40:1a:e3:c5:77:
                    0a:80:a1:30:ee:97:bb:28:0a:16:cb:e3:c0:84:2c:
                    80:e0:b0:8e:03:a0:5e:e5:7d:d7:08:54:f7:d6:76:
                    84:30:bc:76:77:0d:c7:81:b2:d9:7d:a6:fc:6a:ef:
                    20:33:c9:ff:3f:a8:78:ec:73:51:d0:32:28:f2:5b:
                    b4:dc:a0:38:cb:e6:f6:68:64:f8:a7:c0:6d:0d:f1:
                    d5:af:b0:1d:33:8b:f3:4c:69:c2:1a:af:83:24:bd:
                    13:fb:4f:84:51:75:cd:24:22:49:a9:17:d4:d4:5f:
                    1d:df:fd:1e:3a:8a:4c:cd:90:3e:5f:aa:f2:f7:9a:
                    ef:54:46:4d:0d:fe:75:75:c6:fb:8a:a3:82:f6:ff:
                    41:0f:7e:13:c8:18:d5:34:80:86:b2:cd:47:37:3f:
                    54:44:f6:fe:c8:96:ab:b5:d1:f8:81:f7:8a:63:77:
                    d2:6b:66:ab:81:5f:2c:85:ab:2e:91:84:d6:cc:b3:
                    01:e0:91:41:a6:d6:7b:b6:c4:ce:b8:bf:79:bb:3a:
                    5b:79:e5:82:21:0a:71:40:88:d5:67:6b:d9:00:91:
                    bb:f9:ea:70:53:a3:41:dc:05:07:c3:1b:29:bc:2b:
                    5a:d7:cd:96:8d:1b:0c:e1:3f:a6:8b:eb:98:07:ec:
                    e0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:60:66:C9:CE:E5:B8:A1:E1:AE:D4:A4:FF:4D:14:96:6F:F7:62:3B
            X509v3 Authority Key Identifier:
                keyid:19:FF:3C:AC:4D:D2:A2:6E:C7:E5:77:60:D9:D9:A2:31:D6:B5:A1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/2/19FF3CAC4DD2A26EC7E57760D9D9A231D6B5A1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FF3CAC4DD2A26EC7E57760D9D9A231D6B5A1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/2/323830343a6363343a3a2f33322d3438203d3e203532353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:2c:37:8d:19:7b:4a:fa:d3:4e:10:4f:4c:d5:76:0b:64:68:
         b4:b0:91:6a:91:c6:6e:de:fd:d7:4d:d8:a3:9c:95:5c:1e:a7:
         18:1f:cf:16:35:d1:46:eb:78:0b:45:58:a6:e4:7e:e0:4c:81:
         8e:15:03:7c:68:70:48:eb:bf:0b:7d:ed:3e:98:0e:6b:f3:2a:
         ed:ce:1a:e9:63:fb:05:b8:fd:d5:d0:92:30:39:1e:2f:ff:5f:
         df:b1:c4:fc:c3:4c:ca:f9:c1:ea:2b:97:eb:4b:6c:df:dc:db:
         f9:ff:c7:6a:e3:b4:0d:21:91:59:50:77:ab:9a:7b:4b:ed:a0:
         69:2e:dc:d3:67:15:a8:dd:d9:d1:f3:9c:80:10:48:75:60:b2:
         3d:a8:9b:7e:8f:e0:f4:fc:20:1c:9c:68:c3:84:be:aa:ea:87:
         2d:3f:fe:79:08:7b:41:14:32:15:34:8b:bb:06:aa:a4:67:3f:
         6c:ac:d5:15:83:7e:26:81:16:a4:25:2c:9d:d4:2e:b7:f6:7a:
         6e:e0:08:43:f2:16:8f:08:5d:6a:aa:39:64:6f:99:43:80:a3:
         30:07:44:68:7f:d0:a6:92:c7:be:66:a0:78:f4:11:c9:70:ee:
         9c:06:8d:4f:11:a0:4c:e8:db:46:a6:4c:45:4f:1d:9b:ed:ec:
         41:9a:5a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 14:46:33 2024 by rpki-client on console-fra.rpki-client.org