Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/323830343a37343a3a2f33322d3332203d3e203238333338.roa
File:                     323830343a37343a3a2f33322d3332203d3e203238333338.roa (raw, json)
Hash identifier:          A5Fauz5itRd7VQW8/tXkVSP0WbT6uvGk9JVBgMJMI0c=
Subject key identifier:   60:AA:80:FB:FE:F6:FE:EA:21:9C:98:07:EA:F5:FA:B6:82:53:69:D4
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       168C80A4A5B2EDC65852B26A96DD3478F5942EB3
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/323830343a37343a3a2f33322d3332203d3e203238333338.roa
Signing time:             Wed 29 May 2024 18:17:13 +0000
ROA not before:           Wed 29 May 2024 18:12:13 +0000
ROA not after:            Wed 28 May 2025 18:17:13 +0000
asID:                     28338
IP address blocks:        2804:74::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8c:80:a4:a5:b2:ed:c6:58:52:b2:6a:96:dd:34:78:f5:94:2e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:12:13 2024 GMT
            Not After : May 28 18:17:13 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:d8:72:18:04:54:0b:3e:38:2a:f4:d7:d6:
                    5a:17:20:f1:cc:da:20:b3:67:48:3f:93:ac:23:a5:
                    31:2f:c1:52:a3:28:6a:99:96:9c:f4:48:36:59:81:
                    bc:ee:69:d6:e2:ed:11:0f:70:16:87:6c:1c:cc:a7:
                    e2:a7:bd:e1:8c:cb:65:3d:6f:1f:03:5a:18:22:74:
                    ca:7e:4f:24:e8:79:4e:7f:2b:5e:78:36:30:32:79:
                    88:51:d6:9c:03:6c:7a:bf:6a:48:b3:b7:a0:64:e5:
                    51:0d:b0:b8:d2:28:39:4b:45:87:41:71:49:81:c8:
                    40:14:a8:b7:56:2d:ef:63:b3:04:22:60:a9:e4:6a:
                    ec:af:53:d1:cf:fc:98:08:c1:ab:20:48:d9:4a:47:
                    49:79:bb:46:69:f5:a8:15:ff:65:bb:f0:72:23:a2:
                    58:8d:c4:59:bc:de:33:63:8d:66:17:f9:d5:64:19:
                    06:09:ba:d8:4f:28:2c:43:82:07:30:50:64:31:9a:
                    84:5a:1c:33:12:60:ca:17:9b:cc:81:7e:f9:45:d2:
                    4d:24:90:b0:6b:7b:8b:f7:ec:0f:54:e0:28:71:fd:
                    65:54:9e:93:41:05:0f:ae:1d:29:e2:bd:24:39:16:
                    7d:10:4b:1f:a6:83:2e:8d:4b:5b:98:85:8d:d0:0d:
                    8d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AA:80:FB:FE:F6:FE:EA:21:9C:98:07:EA:F5:FA:B6:82:53:69:D4
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/323830343a37343a3a2f33322d3332203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:ee:e1:50:96:29:5b:42:2d:c2:a0:29:78:df:08:a4:8e:aa:
         f3:52:5f:ea:11:47:0b:04:13:aa:fc:b1:0a:95:56:a8:d5:d0:
         7e:66:77:f4:d0:9b:b1:f4:c0:80:54:74:ea:c3:3c:7b:e4:ba:
         d9:2a:ae:e4:a4:75:7d:6d:38:55:34:06:44:6e:83:21:97:e0:
         5d:35:ac:dc:c3:e2:8e:95:f6:50:ad:4c:68:5f:e9:6b:31:c6:
         b5:b5:75:ef:0d:a4:95:3b:29:22:b7:dc:6a:a8:f5:c2:20:95:
         2e:fe:66:7c:ce:77:64:f9:e8:95:e4:6a:2f:4e:7b:c2:e8:bc:
         8a:43:5f:6f:46:75:63:15:e7:90:76:e3:ed:cc:e4:80:0d:6f:
         d9:b7:d2:2d:0b:c7:59:da:f3:7e:0e:fb:9e:d2:30:bc:6e:cd:
         d6:4a:2a:48:b5:ac:0a:ef:2f:34:c6:7b:ee:dd:39:39:40:53:
         12:50:b7:33:42:56:d6:68:ff:ab:9e:34:f6:02:c1:7d:28:cd:
         54:7b:bd:3f:58:6c:2f:bb:63:07:32:7e:50:53:ba:1d:54:09:
         cc:64:71:2d:c9:b5:14:1d:b6:bc:b4:e9:d2:f1:a0:e3:74:9f:
         d8:c8:3a:f3:b1:97:7d:c6:ca:f2:a5:74:cd:b2:34:ed:aa:54:
         6c:47:44:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:22 2024 by rpki-client on console-ams.rpki-client.org