Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/323830343a316362633a3a2f33322d3332203d3e203631363732.roa
File:                     323830343a316362633a3a2f33322d3332203d3e203631363732.roa (raw, json)
Hash identifier:          YKfRcEwV5IhxkrgjZMQu9VFpN3UE9SXSfGxPgut7/ls=
Subject key identifier:   5F:FE:87:71:8F:6C:B2:45:6E:21:14:CE:75:5C:97:9C:97:1B:CA:54
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       E7C75F7CF8F78FBDB0D7703B0C2594B2BF0FDA
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/323830343a316362633a3a2f33322d3332203d3e203631363732.roa
Signing time:             Thu 04 Apr 2024 18:22:40 +0000
ROA not before:           Thu 04 Apr 2024 18:17:40 +0000
ROA not after:            Thu 03 Apr 2025 18:22:40 +0000
asID:                     61672
IP address blocks:        2804:1cbc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
                          rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e7:c7:5f:7c:f8:f7:8f:bd:b0:d7:70:3b:0c:25:94:b2:bf:0f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Apr  4 18:17:40 2024 GMT
            Not After : Apr  3 18:22:40 2025 GMT
        Subject: CN=5FFE87718F6CB2456E2114CE755C979C971BCA54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5d:c6:2d:0d:d3:10:f8:6f:ac:f0:62:6b:84:
                    21:89:76:3c:62:24:3e:43:f2:30:a7:25:a6:b9:53:
                    56:3b:d4:11:7d:f2:83:8f:bb:65:b2:c5:30:9a:27:
                    20:ca:44:64:0e:70:d2:8e:ac:69:95:c2:af:5c:82:
                    06:18:be:b2:b3:57:b0:25:dd:76:32:2b:fc:f7:e0:
                    cb:51:24:36:25:03:5f:00:a0:99:7a:62:e8:4b:69:
                    53:bf:80:5a:cf:52:d4:74:75:15:7e:35:bd:bc:aa:
                    7c:c9:94:7c:2e:9e:d7:b8:4b:35:a0:17:e1:a9:37:
                    17:a9:96:ab:6b:af:05:e4:82:01:42:62:ed:d8:a6:
                    53:f1:71:16:bb:6c:fd:ce:e6:34:ee:c3:72:10:1d:
                    3f:b9:6e:92:c6:d4:0d:2e:f8:ec:15:86:a7:70:23:
                    b8:f9:d0:1a:69:85:9e:ca:24:ce:7d:80:16:32:a0:
                    58:90:b1:5d:5f:c5:93:3f:29:b4:e7:2b:c6:b4:3c:
                    cf:4b:6a:c3:9c:5b:1e:bc:04:4e:12:70:67:60:1f:
                    6f:b8:b6:92:16:e6:e7:21:6d:ed:76:5b:5d:0e:f4:
                    27:a2:4b:d1:8c:ae:73:78:63:88:bb:b0:5a:91:75:
                    02:b7:e2:3a:61:35:a4:17:dd:15:fb:70:4e:3b:1c:
                    3b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FE:87:71:8F:6C:B2:45:6E:21:14:CE:75:5C:97:9C:97:1B:CA:54
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/323830343a316362633a3a2f33322d3332203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:ca:3f:a7:6a:ce:5e:80:8d:9b:ff:cb:df:40:a1:49:51:fc:
         9d:7f:e1:ae:45:90:f1:0d:c1:76:82:57:6c:bb:32:ac:00:95:
         a9:cc:eb:23:08:9d:88:c4:90:72:7b:55:7b:45:48:e7:64:b1:
         06:9a:60:6b:90:f0:a0:45:f5:4d:a8:ea:14:23:d7:54:08:e1:
         0a:4a:0d:bc:ca:cc:34:19:c0:ec:66:de:c5:d7:25:84:f0:9a:
         7d:19:52:35:39:eb:fa:43:23:a2:1c:45:d0:db:0f:41:b3:b1:
         89:0f:67:ec:0a:2e:b8:00:51:d1:61:95:d3:5d:3f:d9:74:79:
         d6:96:6c:9d:e2:b8:4b:11:39:97:46:cb:cb:e5:40:b2:f4:a7:
         f0:d5:14:71:c5:ce:27:87:b1:17:34:41:0a:0c:af:7c:f7:dc:
         6f:f3:3f:a8:7b:44:5a:dd:f5:37:14:81:05:09:64:06:a5:7e:
         3e:94:93:24:17:98:27:2f:35:bc:46:64:d4:48:f9:7d:15:12:
         c2:e3:b8:a3:65:6e:e8:db:06:83:d2:ee:7e:c6:87:49:b9:12:
         0a:ea:8c:49:74:51:48:ba:e9:c5:7b:56:90:08:38:53:d1:73:
         1c:fe:65:aa:f4:7c:04:7e:3f:e9:88:24:7c:f0:20:35:a1:e7:
         6f:dc:5d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:43 2024 by rpki-client on console-fra.rpki-client.org