Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/323830343a313839343a3a2f33322d313238203d3e203631393431.roa
File:                     323830343a313839343a3a2f33322d313238203d3e203631393431.roa (raw, json)
Hash identifier:          Z03kjJanckckkzDLT8EhqtZ2Kty2w9Fkj4To6RJFSBE=
Subject key identifier:   72:6E:6A:CD:BB:E7:ED:EC:A6:92:FE:D3:84:F9:DD:23:4E:28:4F:66
Certificate issuer:       /CN=0FA221552193846F5AD22D6A3DABDDD6D48FB676
Certificate serial:       5E8046A4FE5C095427D8873AE3513649370B37BB
Authority key identifier: 0F:A2:21:55:21:93:84:6F:5A:D2:2D:6A:3D:AB:DD:D6:D4:8F:B6:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FA221552193846F5AD22D6A3DABDDD6D48FB676.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/323830343a313839343a3a2f33322d313238203d3e203631393431.roa
Signing time:             Fri 12 Jul 2024 16:37:52 +0000
ROA not before:           Fri 12 Jul 2024 16:32:52 +0000
ROA not after:            Fri 11 Jul 2025 16:37:52 +0000
asID:                     61941
IP address blocks:        2804:1894::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.crl
                          rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FA221552193846F5AD22D6A3DABDDD6D48FB676.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 08:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:80:46:a4:fe:5c:09:54:27:d8:87:3a:e3:51:36:49:37:0b:37:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FA221552193846F5AD22D6A3DABDDD6D48FB676
        Validity
            Not Before: Jul 12 16:32:52 2024 GMT
            Not After : Jul 11 16:37:52 2025 GMT
        Subject: CN=726E6ACDBBE7EDECA692FED384F9DD234E284F66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:09:19:31:e9:ae:8f:b7:f0:3a:24:2e:54:b1:
                    dc:ed:32:22:1f:bc:6e:45:97:93:4a:b3:3a:71:e1:
                    9e:ff:8b:11:9e:c7:e4:cc:04:8e:a1:ca:07:14:15:
                    cb:5f:69:d5:c4:bd:ba:7c:4e:ed:83:65:db:c7:35:
                    63:b7:cf:99:f7:e4:11:b6:d2:a9:31:c7:cd:5c:46:
                    94:82:2a:c9:81:8f:f7:8b:33:cd:cc:e3:c1:19:23:
                    6b:8b:ce:3f:52:1d:36:23:73:bf:f5:b1:50:bc:c2:
                    75:a1:28:a2:3b:0a:66:4a:13:6b:be:12:14:e7:47:
                    47:e0:61:1d:0a:a5:8e:e7:c4:cc:e3:90:05:ae:04:
                    03:d2:2d:ad:15:be:35:b8:01:c0:3b:45:a3:ab:b5:
                    4d:2a:e5:74:06:3e:c9:68:6d:99:52:16:ab:e5:93:
                    15:66:bb:d5:8d:3f:cc:b8:53:c3:a1:32:2c:5c:67:
                    3a:5b:c3:58:48:9e:d9:d1:ef:12:f6:99:60:9d:9c:
                    03:0a:d6:61:42:f5:8c:35:71:6e:6a:c4:91:a2:23:
                    df:5f:70:76:27:1f:64:d3:2b:b0:42:9f:d2:94:ea:
                    1d:c7:72:63:ad:a3:ee:9f:6a:06:79:ea:cc:b9:dc:
                    94:2a:7d:3f:20:8b:82:ed:8b:f5:61:9c:af:80:fc:
                    27:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6E:6A:CD:BB:E7:ED:EC:A6:92:FE:D3:84:F9:DD:23:4E:28:4F:66
            X509v3 Authority Key Identifier:
                keyid:0F:A2:21:55:21:93:84:6F:5A:D2:2D:6A:3D:AB:DD:D6:D4:8F:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FA221552193846F5AD22D6A3DABDDD6D48FB676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/323830343a313839343a3a2f33322d313238203d3e203631393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1894::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:b4:da:37:41:7c:ff:00:96:71:c6:42:c0:b6:fd:9e:59:f1:
         54:6a:2f:4e:83:26:6f:db:13:49:e6:84:21:07:fe:b3:c7:69:
         4f:46:3e:32:f7:39:da:cb:eb:3e:4f:c2:23:30:bc:89:cc:57:
         b8:6c:1b:b0:ec:9b:90:ed:eb:e6:35:9d:9a:93:3b:14:18:0f:
         a9:96:28:f3:30:34:ff:5d:ce:6e:c9:94:bc:a3:4f:eb:03:9f:
         3a:7e:b5:1e:5d:c2:f3:fe:2f:c4:62:ba:e9:1a:c2:e5:ec:47:
         0a:b6:78:b3:6b:ec:4f:11:64:ed:e9:c9:fe:04:40:57:ce:27:
         98:8e:03:8a:26:92:8e:eb:d7:1b:b1:e1:d8:53:9b:3c:0b:26:
         cb:b4:b4:38:db:69:66:a7:26:b6:f5:6a:d4:dc:28:c6:14:8c:
         82:f2:c1:2a:c6:94:c5:52:61:69:89:ad:a3:57:98:aa:1c:87:
         7b:40:25:cd:af:03:95:98:aa:1b:30:27:71:1c:73:51:09:56:
         ee:58:e8:92:49:0f:fe:25:13:18:1e:be:07:23:b2:04:55:76:
         8d:ea:c6:51:ad:ef:73:35:1d:ed:a8:0c:a4:98:2d:41:f3:27:
         b4:2e:e7:d7:5f:82:7a:64:8b:78:86:68:d7:96:df:a9:ae:c0:
         df:ff:fd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 08:55:30 2024 by rpki-client on console-ams.rpki-client.org