Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/323830343a316234343a3a2f33352d3335203d3e203631373137.roa
File:                     323830343a316234343a3a2f33352d3335203d3e203631373137.roa (raw, json)
Hash identifier:          rfQXEEEFSvOxfWpOArPXE9Y8pm/V1ZwMi0finTllo88=
Subject key identifier:   17:C4:30:D5:E8:4E:FC:E7:1D:7B:6C:F7:18:90:4C:1E:43:9D:EA:1F
Certificate issuer:       /CN=818877B39D32BF83248D22BD29D162AD2243D97A
Certificate serial:       2F57D35C4F7F05D948C8C490201B6E8712D45AD1
Authority key identifier: 81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/323830343a316234343a3a2f33352d3335203d3e203631373137.roa
Signing time:             Thu 04 Apr 2024 15:37:47 +0000
ROA not before:           Thu 04 Apr 2024 15:32:47 +0000
ROA not after:            Thu 03 Apr 2025 15:37:47 +0000
asID:                     61717
IP address blocks:        2804:1b44::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.crl
                          rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 21:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:57:d3:5c:4f:7f:05:d9:48:c8:c4:90:20:1b:6e:87:12:d4:5a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818877B39D32BF83248D22BD29D162AD2243D97A
        Validity
            Not Before: Apr  4 15:32:47 2024 GMT
            Not After : Apr  3 15:37:47 2025 GMT
        Subject: CN=17C430D5E84EFCE71D7B6CF718904C1E439DEA1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:80:2a:30:6c:f2:fc:03:7d:43:98:54:82:
                    d1:3b:c7:bd:02:f4:65:c6:bc:5d:4d:1a:01:90:af:
                    fe:8a:ec:39:6b:e2:d1:3e:fa:c8:27:8f:8d:b4:e5:
                    bd:95:fc:b0:8a:06:41:52:ac:13:ed:78:6b:43:4a:
                    bc:16:8a:af:0f:2b:73:0a:9b:a7:88:fa:b2:cf:13:
                    70:29:96:95:03:dd:03:17:82:10:15:81:10:5a:d5:
                    49:8c:79:ab:11:2a:a5:ee:12:7c:7f:a9:0a:fe:20:
                    19:4f:9d:92:e5:af:cc:2d:98:f8:d7:be:a2:80:71:
                    29:32:12:77:f2:af:2f:c8:45:6c:ff:97:49:9b:c5:
                    ea:ab:72:ab:92:06:54:45:28:0f:f4:9c:49:f8:ee:
                    e1:15:38:3e:83:6a:c8:d7:0f:8f:d5:74:6b:e9:df:
                    57:f3:f7:ba:4a:57:4a:a8:86:14:0a:a9:52:96:ef:
                    dd:cc:d8:ab:fe:e4:5c:21:20:2b:f5:74:f0:a4:5e:
                    67:56:a1:0a:e3:d5:76:09:d2:7f:3e:1e:1c:84:18:
                    86:69:6b:a6:76:8e:86:c2:01:c7:86:a9:58:18:b5:
                    24:4d:b7:44:31:13:a2:49:e3:24:1b:23:c3:bf:e1:
                    df:94:b5:a1:cc:e0:ab:7c:91:4e:95:ec:76:9e:54:
                    90:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C4:30:D5:E8:4E:FC:E7:1D:7B:6C:F7:18:90:4C:1E:43:9D:EA:1F
            X509v3 Authority Key Identifier:
                keyid:81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/323830343a316234343a3a2f33352d3335203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b44::/35

    Signature Algorithm: sha256WithRSAEncryption
         a7:fd:01:e9:6c:fd:2d:84:75:00:c5:dc:fb:d0:7b:63:0b:c9:
         27:9e:d8:dc:62:c8:bd:a4:92:45:3b:3f:a2:f8:68:f2:8a:e4:
         1d:db:48:3d:dc:10:b5:e0:f7:4d:ca:68:2e:a0:c8:9e:a3:d8:
         71:e1:2f:8f:9a:f5:8c:00:ae:25:f5:6a:1a:3b:0a:25:67:e5:
         24:e7:61:5d:46:25:90:2d:75:70:ba:4f:ce:f6:80:76:65:f2:
         7a:97:ba:e6:b9:56:70:16:50:be:5e:a4:84:6a:fd:31:0b:bf:
         87:84:ac:23:90:9d:ce:30:7f:96:5d:b9:7b:d8:09:ca:cd:a3:
         5a:da:e7:f0:a9:77:53:5b:4f:4f:e2:a0:39:5d:7f:2a:9b:8f:
         cd:29:66:b8:04:fa:ae:ec:c1:9d:3b:f2:54:3f:de:40:73:88:
         b8:e2:4c:06:31:86:f0:3f:ae:86:3c:6a:24:e9:91:dd:5e:bb:
         74:55:8d:4b:a6:30:ed:88:43:d5:b2:a0:42:c3:cd:87:8f:01:
         61:46:e7:78:94:41:1e:86:13:c7:71:72:a2:4a:9a:f6:64:81:
         ea:61:75:6c:e1:00:6d:82:91:16:76:11:48:95:71:7d:4a:c3:
         df:83:3e:8c:c5:2f:ed:67:18:59:de:8b:e2:e5:c7:78:94:83:
         56:51:f1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:33 2024 by rpki-client on console-fra.rpki-client.org