Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/323830343a3931633a3a2f33322d3634203d3e203532383737.roa
File:                     323830343a3931633a3a2f33322d3634203d3e203532383737.roa (raw, json)
Hash identifier:          khHTmwgfxVxQDCoIYMTK91B7VSTNBzqRbnZWqMjgmRM=
Subject key identifier:   4C:21:F6:F6:2A:13:44:8C:C9:19:57:0B:F3:04:FC:E3:5B:A1:7E:B4
Certificate issuer:       /CN=CE199B761AB444E82DC4918B4D38917C16AEC7B8
Certificate serial:       566760B676B45019C68D5BC578A38CB1540CD7C8
Authority key identifier: CE:19:9B:76:1A:B4:44:E8:2D:C4:91:8B:4D:38:91:7C:16:AE:C7:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE199B761AB444E82DC4918B4D38917C16AEC7B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/323830343a3931633a3a2f33322d3634203d3e203532383737.roa
Signing time:             Tue 05 Nov 2024 18:14:49 +0000
ROA not before:           Tue 05 Nov 2024 18:09:49 +0000
ROA not after:            Tue 04 Nov 2025 18:14:49 +0000
asID:                     52877
IP address blocks:        2804:91c::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.crl
                          rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE199B761AB444E82DC4918B4D38917C16AEC7B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:67:60:b6:76:b4:50:19:c6:8d:5b:c5:78:a3:8c:b1:54:0c:d7:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE199B761AB444E82DC4918B4D38917C16AEC7B8
        Validity
            Not Before: Nov  5 18:09:49 2024 GMT
            Not After : Nov  4 18:14:49 2025 GMT
        Subject: CN=4C21F6F62A13448CC919570BF304FCE35BA17EB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d2:e8:57:0a:71:8b:28:68:98:b9:b3:59:37:
                    45:c2:ca:c0:f6:e8:e2:f5:97:62:09:8a:80:2d:30:
                    e9:b1:40:5f:44:79:e8:09:3a:9f:c0:26:46:98:1f:
                    61:c0:56:58:8b:74:8e:20:01:44:56:69:9a:a9:9e:
                    4f:06:24:9e:2d:9c:25:f7:ca:1e:3d:7c:fe:51:7d:
                    a9:00:69:58:58:f0:5c:8e:18:e2:81:6d:f5:cf:e8:
                    ba:24:13:79:c4:8c:32:85:2c:25:bf:dc:31:13:28:
                    07:ce:e6:b9:df:bb:cd:7e:77:11:ea:6c:7e:2d:e4:
                    58:66:20:00:98:2b:3d:34:db:9f:16:ca:33:5d:75:
                    2d:f8:26:97:a0:4d:20:ec:80:1c:a1:a9:8c:92:ef:
                    ba:4b:c2:47:61:b8:74:a8:f7:ec:d4:71:6f:6a:64:
                    26:db:0e:27:20:f7:05:8b:44:56:fd:27:de:61:63:
                    5c:0e:76:f2:f3:b9:b9:5d:3f:83:e3:d0:3e:28:72:
                    61:f3:59:ea:b1:96:ef:3a:0b:96:94:dc:40:ed:ae:
                    1f:b6:ce:48:50:9e:99:95:f2:d2:ad:49:05:5a:9f:
                    3b:7e:f0:8e:a6:d5:6a:16:6d:7e:be:e3:25:35:d0:
                    ba:22:68:cf:fa:e9:16:3d:4f:b7:40:5c:0e:c2:b1:
                    99:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:21:F6:F6:2A:13:44:8C:C9:19:57:0B:F3:04:FC:E3:5B:A1:7E:B4
            X509v3 Authority Key Identifier:
                keyid:CE:19:9B:76:1A:B4:44:E8:2D:C4:91:8B:4D:38:91:7C:16:AE:C7:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE199B761AB444E82DC4918B4D38917C16AEC7B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/323830343a3931633a3a2f33322d3634203d3e203532383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91c::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:cc:96:e9:a7:f1:55:f6:25:13:e6:86:c0:c7:4b:9d:e2:33:
         4f:fe:0b:ff:45:a7:3f:7b:84:28:02:70:95:99:4f:87:e1:70:
         28:9a:93:8d:d7:9a:7e:54:50:b0:89:ea:6d:7c:32:19:a4:1f:
         b0:ea:7b:db:6a:b1:f6:30:97:8c:6d:35:99:a7:4f:5a:73:dc:
         d4:04:82:27:57:39:eb:96:1b:72:9e:54:b5:9f:7c:57:37:6e:
         9e:b0:88:51:e2:c8:19:a1:47:83:80:15:ea:4f:cb:0c:88:d3:
         9a:9a:76:81:dc:fa:14:b6:3f:89:b8:d3:a0:b9:75:a2:74:37:
         18:1e:e7:e7:9a:51:19:55:91:c5:13:8b:7f:6b:a5:83:90:7e:
         53:af:39:ee:5b:22:75:19:51:ad:7d:38:ee:19:51:66:d9:07:
         77:e7:ff:f6:85:e9:3a:0e:8c:49:2d:51:95:ff:04:5f:0b:64:
         56:70:33:d8:5b:cf:a5:81:d2:44:f1:c5:3f:69:91:4e:d5:71:
         b2:78:2d:b9:4f:36:9e:1b:23:85:77:69:c3:f2:7d:2c:58:15:
         a3:92:4d:6e:60:60:03:1d:d4:23:6c:82:91:cd:9c:b7:8f:23:
         46:2d:b9:87:da:ae:87:58:bd:3d:97:c3:7b:2c:77:f2:e3:82:
         9f:e7:84:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:31 2024 by rpki-client on console-ams.rpki-client.org