Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/1/323830343a316235343a3a2f33342d3334203d3e203631373232.roa
File:                     323830343a316235343a3a2f33342d3334203d3e203631373232.roa (raw, json)
Hash identifier:          HXj8Ie1Kzge6KkJN176CLYX5xO4pE9rFxJDa6W7aPpE=
Subject key identifier:   E8:18:04:DE:A9:5C:EA:86:2C:5A:B7:D2:18:46:BB:16:25:53:E3:74
Certificate issuer:       /CN=29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D
Certificate serial:       60DAE9FD7CBD4F7640FC2CCE973E9A203EF41806
Authority key identifier: 29:12:5A:50:D3:9B:1A:BC:3B:AB:97:49:5F:6B:1E:71:5B:8A:CB:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/1/323830343a316235343a3a2f33342d3334203d3e203631373232.roa
Signing time:             Thu 04 Apr 2024 22:34:31 +0000
ROA not before:           Thu 04 Apr 2024 22:29:31 +0000
ROA not after:            Thu 03 Apr 2025 22:34:31 +0000
asID:                     61722
IP address blocks:        2804:1b54::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/1/29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D.crl
                          rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/1/29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:da:e9:fd:7c:bd:4f:76:40:fc:2c:ce:97:3e:9a:20:3e:f4:18:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D
        Validity
            Not Before: Apr  4 22:29:31 2024 GMT
            Not After : Apr  3 22:34:31 2025 GMT
        Subject: CN=E81804DEA95CEA862C5AB7D21846BB162553E374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8c:cb:ca:ed:80:5b:2f:c8:6d:0a:bf:71:88:
                    47:fb:5c:ed:8e:bb:9d:2b:bc:47:69:72:75:23:c1:
                    f2:7a:52:a1:3d:26:be:61:76:67:5a:a1:0c:99:6f:
                    0d:da:52:d9:73:04:d3:20:08:7d:98:39:09:22:07:
                    f1:47:5d:c6:17:84:cf:53:25:7c:80:a1:fa:c4:b8:
                    ba:12:1d:5b:9b:db:e6:8f:a5:ff:aa:fa:04:13:70:
                    60:03:1f:83:8a:75:64:bc:f1:24:ed:42:1f:16:61:
                    78:f8:be:a7:4b:19:74:2e:2f:eb:7a:ab:5e:65:ba:
                    51:c4:50:40:04:5b:64:9d:84:44:c8:22:26:8b:26:
                    a8:aa:f6:e5:f6:ef:79:49:c4:60:c0:8a:38:81:bc:
                    95:f1:10:ed:76:b6:77:2f:e6:18:3e:f0:0b:62:5c:
                    58:3f:f9:fe:5e:d2:16:c4:a4:d3:57:be:e9:08:fd:
                    a6:b4:6c:5b:e0:21:c9:f7:c4:56:a2:89:40:00:c9:
                    81:09:ff:34:43:9f:b9:ab:06:09:0c:04:90:72:c9:
                    30:48:91:2a:73:d2:60:47:43:37:21:36:24:be:b6:
                    94:10:57:7e:94:7f:a9:fb:e0:d4:c6:d2:3b:0a:b8:
                    6e:9e:82:a4:93:f9:04:d3:8e:91:d4:db:5b:ef:69:
                    6a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:18:04:DE:A9:5C:EA:86:2C:5A:B7:D2:18:46:BB:16:25:53:E3:74
            X509v3 Authority Key Identifier:
                keyid:29:12:5A:50:D3:9B:1A:BC:3B:AB:97:49:5F:6B:1E:71:5B:8A:CB:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/1/29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/1/323830343a316235343a3a2f33342d3334203d3e203631373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b54::/34

    Signature Algorithm: sha256WithRSAEncryption
         10:ba:be:00:ff:4b:a0:63:bf:98:0a:21:bb:7c:26:5f:e4:aa:
         98:7b:bb:d4:09:af:d9:46:41:91:34:24:7a:76:a2:77:48:4f:
         48:78:69:00:58:d1:7a:52:bf:b5:a5:03:b8:34:3f:dc:d2:ca:
         70:d8:6d:67:55:4a:de:78:9b:42:d0:28:bc:4c:45:7a:7b:cf:
         a6:2b:05:46:c4:63:c3:1b:9f:7c:f2:50:f4:c4:e4:fc:09:87:
         08:b6:95:1b:82:b0:01:5a:9d:7e:af:95:c6:c4:3e:28:15:4d:
         64:a5:dc:2a:c9:68:fc:b7:6e:73:d9:da:79:2b:e3:35:dc:0c:
         3b:68:b6:fa:1d:93:41:a0:e8:91:b8:ec:34:2e:eb:c2:47:55:
         77:c4:a6:e6:97:0b:46:25:97:b3:80:cb:e6:96:e7:8e:cf:04:
         f0:79:45:4d:a8:dc:60:31:6f:83:d1:94:a3:a0:47:0f:1f:0b:
         f4:ea:cf:60:d1:97:ee:c9:93:74:e4:0a:0c:ed:19:3b:33:df:
         f6:6e:92:f8:33:bb:bf:0e:c7:cf:47:db:a9:1b:be:c3:56:d1:
         9d:c6:04:79:a4:3a:a6:37:d2:20:f1:ba:95:d1:b2:8b:1f:1c:
         3a:cd:72:f6:c5:82:23:29:05:3c:46:bb:22:a9:74:b8:a9:4c:
         da:ca:f8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:07 2024 by rpki-client on console-fra.rpki-client.org