Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/323830343a3863633a3a2f33322d3438203d3e20323632333934.roa
File:                     323830343a3863633a3a2f33322d3438203d3e20323632333934.roa (raw, json)
Hash identifier:          17LM06Pv1Vzx9sAYMmioTRKL+FLKa8Qxr7ZCvUPYmF0=
Subject key identifier:   DC:E4:5D:88:71:3E:1C:06:7C:B3:E6:D4:80:B0:05:DA:6D:0A:4A:3D
Certificate issuer:       /CN=7F262696BA0E69FA1058BEF98B1386A9CCEB7D71
Certificate serial:       49BC390325DB417120DBFB14A5897A84A60BCF62
Authority key identifier: 7F:26:26:96:BA:0E:69:FA:10:58:BE:F9:8B:13:86:A9:CC:EB:7D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/323830343a3863633a3a2f33322d3438203d3e20323632333934.roa
Signing time:             Thu 04 Apr 2024 17:16:47 +0000
ROA not before:           Thu 04 Apr 2024 17:11:47 +0000
ROA not after:            Thu 03 Apr 2025 17:16:47 +0000
asID:                     262394
IP address blocks:        2804:8cc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.crl
                          rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:bc:39:03:25:db:41:71:20:db:fb:14:a5:89:7a:84:a6:0b:cf:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F262696BA0E69FA1058BEF98B1386A9CCEB7D71
        Validity
            Not Before: Apr  4 17:11:47 2024 GMT
            Not After : Apr  3 17:16:47 2025 GMT
        Subject: CN=DCE45D88713E1C067CB3E6D480B005DA6D0A4A3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2f:90:f2:8a:30:9e:41:63:86:46:e4:be:7c:
                    c1:9c:32:c2:10:11:b0:0d:71:f2:ce:b4:d4:16:fd:
                    53:64:39:9f:c7:1f:49:cb:6f:c9:9e:4d:60:29:99:
                    ed:8b:e9:e4:4e:25:75:0b:c2:d4:d9:d3:3c:49:96:
                    c1:3d:93:67:b3:d4:d0:20:bf:15:a8:f3:e5:b2:82:
                    87:d6:27:95:2e:01:3d:7a:83:97:12:01:d7:3b:44:
                    0e:a5:91:ca:51:0e:bb:75:e9:9e:9c:6a:8a:0c:cc:
                    c0:33:e7:8c:a0:2a:1d:4d:f1:6d:7f:81:08:f8:de:
                    85:5a:5b:d4:0c:91:28:94:5b:a9:92:f4:35:59:8d:
                    24:5c:cd:55:0f:a9:85:68:2c:fa:9e:5e:d6:71:20:
                    cc:8b:68:d3:f6:a6:4c:41:1b:a0:13:63:be:26:97:
                    8d:d2:29:db:3e:fa:14:39:4a:a3:f2:0b:e3:25:d0:
                    6c:33:8b:26:d6:38:d5:9e:6d:97:8c:ae:78:74:2c:
                    a7:86:2f:fb:5d:11:97:bc:b6:f1:d7:46:a8:23:c3:
                    37:ce:a7:cb:40:6b:17:04:2e:fb:56:00:06:c8:69:
                    ad:07:ea:13:5f:19:d6:63:d8:e8:8c:13:12:9f:11:
                    14:2a:0d:6c:9f:7f:0e:2e:20:e1:99:86:e4:69:f4:
                    70:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E4:5D:88:71:3E:1C:06:7C:B3:E6:D4:80:B0:05:DA:6D:0A:4A:3D
            X509v3 Authority Key Identifier:
                keyid:7F:26:26:96:BA:0E:69:FA:10:58:BE:F9:8B:13:86:A9:CC:EB:7D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/323830343a3863633a3a2f33322d3438203d3e20323632333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:ec:e5:eb:5f:68:04:25:8e:52:10:4a:c7:87:1e:3b:0e:a0:
         85:35:bf:54:0c:49:76:20:2d:e8:55:6e:73:88:51:b1:f2:25:
         dd:ab:e0:3f:7c:24:9f:12:4a:c4:32:ef:b0:9d:c3:12:c9:66:
         b0:fe:b6:a5:c9:d7:dd:ba:bf:ff:f4:86:8f:92:9b:54:10:8b:
         83:bb:29:49:3f:0d:ec:0b:cf:02:76:d9:4d:b3:3a:54:0f:73:
         64:87:1c:e6:b4:6d:c0:2c:8f:65:b9:c4:fe:95:53:7e:54:26:
         e1:d9:f2:0c:3d:8b:7a:d8:8c:45:0e:80:83:ae:ab:e9:38:3a:
         e0:db:92:e6:ea:e3:1a:83:ee:cc:9f:1a:b5:9a:dd:ae:52:fd:
         f7:08:1c:85:53:63:b3:d3:ee:fe:18:9f:cd:96:20:4e:c0:eb:
         37:42:14:54:ef:6e:d3:b0:65:c1:05:35:e4:2d:98:59:2d:af:
         7c:3e:23:6d:27:82:68:15:5e:4a:9e:3b:5b:1f:db:11:4d:f0:
         bc:8d:e7:db:a3:7c:38:56:c7:05:af:10:08:2e:3f:05:1d:a3:
         45:20:52:ac:f4:69:b1:d0:33:da:e6:67:bd:b1:75:d6:14:f7:
         9d:d0:d7:6c:9a:d8:a7:32:ed:d1:45:4a:59:0d:3c:12:ff:f8:
         5e:ca:13:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:50 2024 by rpki-client on console-fra.rpki-client.org