Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/323830343a6133633a3a2f33322d3332203d3e203533303534.roa
File:                     323830343a6133633a3a2f33322d3332203d3e203533303534.roa (raw, json)
Hash identifier:          cv4/yseGg1DcMckUiZpR4dH6nMZdJoYAp7Y9mQzFkUU=
Subject key identifier:   65:71:85:87:50:6C:21:9C:86:D1:D1:38:8A:DA:EF:7B:1F:EA:D5:A3
Certificate issuer:       /CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
Certificate serial:       36F03616F51ED9957BCC1A07C38184EA4910AB33
Authority key identifier: 91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/323830343a6133633a3a2f33322d3332203d3e203533303534.roa
Signing time:             Thu 07 Nov 2024 20:54:21 +0000
ROA not before:           Thu 07 Nov 2024 20:49:21 +0000
ROA not after:            Thu 06 Nov 2025 20:54:21 +0000
asID:                     53054
IP address blocks:        2804:a3c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f0:36:16:f5:1e:d9:95:7b:cc:1a:07:c3:81:84:ea:49:10:ab:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
        Validity
            Not Before: Nov  7 20:49:21 2024 GMT
            Not After : Nov  6 20:54:21 2025 GMT
        Subject: CN=65718587506C219C86D1D1388ADAEF7B1FEAD5A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:f0:f9:16:1b:15:83:49:f9:ff:c3:82:e9:5f:
                    68:dc:ed:db:cb:1b:97:c6:68:89:19:a1:85:75:a6:
                    5f:43:f0:6d:48:7c:09:12:12:0f:8b:4c:1d:69:2a:
                    17:33:0c:e5:31:c8:b6:0e:de:23:4d:95:84:bb:36:
                    21:9e:93:1f:de:85:ad:0a:30:ab:14:f4:71:7b:ee:
                    2c:0e:ae:26:a3:4c:84:95:7f:e6:d6:ec:ce:5c:ff:
                    7e:d9:be:07:fa:f4:4e:86:3a:95:55:ae:6c:19:64:
                    78:33:a0:11:72:f3:c9:8a:f4:f2:29:78:cc:85:4c:
                    d7:bc:b7:2e:6e:f7:a0:1a:81:98:f9:08:08:69:29:
                    33:f1:79:ca:40:45:33:05:7e:d5:2b:62:85:d0:0b:
                    e0:7e:67:43:a6:50:0e:11:16:b3:23:f5:91:43:1c:
                    6d:5c:1e:39:62:4a:f3:80:09:30:1c:ef:b7:19:c5:
                    a5:45:29:de:c1:63:75:0d:bd:2a:17:14:c8:82:d7:
                    90:20:30:17:58:13:ba:fa:97:e0:25:eb:65:de:4e:
                    80:5b:9a:c3:7d:9c:a5:16:73:d7:21:63:6b:92:f8:
                    f6:93:f5:e4:3b:5c:3f:51:6d:35:6b:3e:2e:08:fd:
                    f9:5a:79:b0:fc:9d:16:cd:6e:f2:59:1e:e2:30:9b:
                    e7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:71:85:87:50:6C:21:9C:86:D1:D1:38:8A:DA:EF:7B:1F:EA:D5:A3
            X509v3 Authority Key Identifier:
                keyid:91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/323830343a6133633a3a2f33322d3332203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:07:c0:8d:a1:a8:55:4a:19:86:08:20:12:68:86:f4:b9:18:
         b3:9b:18:0d:ed:5a:0b:f1:0f:0d:a7:40:4b:1f:a2:53:52:40:
         3b:1e:b7:7a:fe:c0:ee:52:dc:2b:29:c4:70:2e:1b:3c:99:44:
         c5:bc:c3:00:64:a4:b4:ff:ca:31:c0:c3:bf:07:19:b0:44:3c:
         bc:8e:27:eb:3f:77:02:ea:cd:ef:83:75:82:1c:71:e6:63:84:
         13:e5:bc:af:02:d5:85:88:c2:ac:ec:70:7f:07:9b:de:ed:ca:
         ed:28:c0:d0:b1:49:8b:f6:d9:4e:e0:19:45:d4:34:37:b0:10:
         ac:f0:f6:ec:ad:66:f8:fa:5b:b3:15:a9:c2:24:4e:3a:8f:1f:
         15:37:b2:55:85:93:80:f2:04:b1:93:9b:a1:f6:4d:0e:d9:b7:
         bb:e0:b0:96:e1:f2:75:c3:d1:06:e2:98:37:14:cb:22:f0:c9:
         b6:ac:85:4e:9b:25:e2:61:e9:90:7d:04:0e:21:e0:a3:6a:2b:
         c8:17:b0:71:4f:28:fb:d6:15:5f:6d:2c:e9:53:5e:97:10:f4:
         9a:35:b8:25:ed:d9:cc:cb:e1:b7:0c:0c:50:69:a6:58:14:49:
         55:48:fa:74:f1:a0:b8:8b:b8:25:31:4f:8e:a2:15:0a:2a:4c:
         cf:40:7f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:16 2024 by rpki-client on console-ams.rpki-client.org