Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/323830343a376430303a3a2f33322d3438203d3e20323731353332.roa
File:                     323830343a376430303a3a2f33322d3438203d3e20323731353332.roa (raw, json)
Hash identifier:          MROku5FrlyDYZfynxiQk908exzqjpK7UKF1BfulhVaE=
Subject key identifier:   C9:89:DB:83:27:28:02:DE:60:4D:BF:8C:17:2C:56:E2:98:1A:9C:F3
Certificate issuer:       /CN=6982D51872DC91BEC06EE371CAE70C62F710F7BA
Certificate serial:       31D6E91CC799AD44B596F9A3138AA8E718F61493
Authority key identifier: 69:82:D5:18:72:DC:91:BE:C0:6E:E3:71:CA:E7:0C:62:F7:10:F7:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/323830343a376430303a3a2f33322d3438203d3e20323731353332.roa
Signing time:             Thu 04 Apr 2024 03:33:37 +0000
ROA not before:           Thu 04 Apr 2024 03:28:37 +0000
ROA not after:            Thu 03 Apr 2025 03:33:37 +0000
asID:                     271532
IP address blocks:        2804:7d00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.crl
                          rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d6:e9:1c:c7:99:ad:44:b5:96:f9:a3:13:8a:a8:e7:18:f6:14:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6982D51872DC91BEC06EE371CAE70C62F710F7BA
        Validity
            Not Before: Apr  4 03:28:37 2024 GMT
            Not After : Apr  3 03:33:37 2025 GMT
        Subject: CN=C989DB83272802DE604DBF8C172C56E2981A9CF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:51:da:67:86:28:70:39:0e:af:5e:83:6f:7b:
                    3e:19:12:1d:42:60:25:0a:a4:43:d2:55:96:23:0d:
                    30:52:27:bc:d5:2d:5c:d4:66:5e:b4:f1:54:9a:50:
                    15:41:7f:bb:5a:03:d3:85:b5:a3:4d:3a:61:8b:0f:
                    aa:96:9a:38:fc:e9:1f:e8:9b:e8:c1:7c:38:1e:f9:
                    2d:22:7f:88:f1:40:3c:c8:b8:46:92:d2:d8:66:ca:
                    c0:ec:79:51:b7:06:ab:af:7c:bb:f3:36:41:17:2d:
                    ee:de:c6:8d:05:c7:88:7e:0d:80:92:95:ba:c0:38:
                    b9:6f:c1:42:1a:06:9b:ff:59:bb:df:a6:5e:3c:24:
                    db:c0:d6:09:45:b6:33:f2:79:d7:95:f0:66:51:e5:
                    04:d6:8a:0e:9f:ce:e1:dc:13:17:e5:2d:bc:4f:57:
                    d9:fc:8b:25:ae:72:b8:35:52:b5:5a:65:ac:3b:e3:
                    27:eb:af:17:1c:b1:2d:1a:4b:db:5c:39:43:44:ce:
                    78:15:01:70:9c:8a:ea:cb:57:1f:85:3d:c5:6c:41:
                    ef:b0:9f:d1:ef:bb:7c:c7:e5:ac:80:c7:a6:8d:b3:
                    0c:0f:99:4f:63:12:5f:5e:25:32:6e:55:dd:35:e3:
                    da:e3:1d:74:dd:0f:cc:7d:7b:27:70:b9:76:84:a0:
                    9c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:89:DB:83:27:28:02:DE:60:4D:BF:8C:17:2C:56:E2:98:1A:9C:F3
            X509v3 Authority Key Identifier:
                keyid:69:82:D5:18:72:DC:91:BE:C0:6E:E3:71:CA:E7:0C:62:F7:10:F7:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/323830343a376430303a3a2f33322d3438203d3e20323731353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:f7:92:3e:f4:70:ea:4e:7f:39:c9:44:ba:51:ee:f8:2d:e3:
         25:21:96:af:76:79:1b:49:95:10:9c:64:01:b2:2f:b0:08:4f:
         93:c3:cf:56:9c:c3:15:c8:56:5e:a9:c4:0c:59:dd:bf:02:ab:
         3b:9b:ba:e7:c4:c4:b8:24:bc:1f:47:1f:3f:90:6f:9a:cf:bf:
         bd:89:d0:c6:bc:bd:8c:e7:6b:78:6d:60:e2:77:81:62:9a:69:
         75:de:aa:81:95:02:47:9a:04:13:4b:70:44:ff:ab:22:87:a6:
         0f:6a:54:d8:31:d9:95:d3:ba:16:6a:a9:ce:a4:b9:a4:9c:f7:
         ae:e5:77:20:f8:c4:aa:be:53:65:dc:62:da:82:a4:0c:5c:52:
         21:78:e2:d5:28:d4:b4:2a:1a:53:95:2c:41:71:28:57:11:fa:
         bf:9d:35:38:c2:a1:33:ab:9d:13:29:08:0f:24:cf:43:53:5d:
         cf:69:62:9f:a0:ac:d6:c4:2a:b9:bb:3b:c6:68:ce:52:1a:86:
         30:8f:11:e0:ea:4a:06:e4:a9:be:e6:98:6a:69:2e:73:bf:88:
         e8:46:6e:b9:14:cf:06:1d:1b:9c:5e:09:73:da:9e:df:ff:b2:
         e7:e8:83:81:3a:57:d2:7a:3b:94:c6:f3:18:2d:f6:b7:87:7e:
         d3:80:7c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:33 2024 by rpki-client on console-fra.rpki-client.org