Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/323830343a343630303a3a2f33322d3438203d3e20323636393631.roa
File:                     323830343a343630303a3a2f33322d3438203d3e20323636393631.roa (raw, json)
Hash identifier:          xH9DGXAbvMEOvYD6zwRWxz2Vksgi1scvDz5bJ7WLn4g=
Subject key identifier:   72:D7:29:96:DE:44:C1:C3:62:BE:A5:BA:22:33:92:7E:D3:79:BD:06
Certificate issuer:       /CN=D1912E8079F06A04DB6C319B91D5B1DF09EE9A26
Certificate serial:       1012053C2E082D2076EFFDAD2693BE98252F225C
Authority key identifier: D1:91:2E:80:79:F0:6A:04:DB:6C:31:9B:91:D5:B1:DF:09:EE:9A:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1912E8079F06A04DB6C319B91D5B1DF09EE9A26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/323830343a343630303a3a2f33322d3438203d3e20323636393631.roa
Signing time:             Mon 12 Aug 2024 18:46:17 +0000
ROA not before:           Mon 12 Aug 2024 18:41:17 +0000
ROA not after:            Mon 11 Aug 2025 18:46:17 +0000
asID:                     266961
IP address blocks:        2804:4600::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/D1912E8079F06A04DB6C319B91D5B1DF09EE9A26.crl
                          rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/D1912E8079F06A04DB6C319B91D5B1DF09EE9A26.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1912E8079F06A04DB6C319B91D5B1DF09EE9A26.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:12:05:3c:2e:08:2d:20:76:ef:fd:ad:26:93:be:98:25:2f:22:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1912E8079F06A04DB6C319B91D5B1DF09EE9A26
        Validity
            Not Before: Aug 12 18:41:17 2024 GMT
            Not After : Aug 11 18:46:17 2025 GMT
        Subject: CN=72D72996DE44C1C362BEA5BA2233927ED379BD06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4c:d9:62:54:c1:f8:c7:2a:dd:e4:a8:33:9d:
                    f7:cb:06:88:ef:00:99:45:22:81:a4:89:f1:fd:e1:
                    65:e5:70:e7:2e:f0:02:e3:45:c6:b3:29:d6:8e:6a:
                    49:3b:43:09:d5:5c:d3:f6:53:8f:eb:05:5e:b1:a8:
                    a3:c4:9b:ff:39:ed:fb:16:9c:16:86:9d:ba:a4:60:
                    a8:9f:aa:40:10:cd:a4:a0:27:a4:a1:d2:cf:c8:98:
                    0e:36:46:e0:09:19:19:39:ea:b0:47:88:6e:61:81:
                    77:aa:c5:b6:b6:6a:36:d8:f2:cb:cf:7d:3d:04:27:
                    e2:2f:79:31:94:88:3d:ca:7d:6a:70:88:18:c9:e0:
                    3c:06:fa:58:74:ed:03:c4:91:40:7b:8a:b2:08:ff:
                    09:fe:3d:af:1d:5b:e1:ed:86:dd:9c:be:a5:3a:c9:
                    f6:1e:8d:57:f5:f1:9f:9b:b3:d8:ed:80:c1:53:c2:
                    de:65:5e:ea:b3:75:20:dd:0d:87:26:84:ec:61:bb:
                    c8:42:62:45:cc:5e:5a:49:e9:bf:6c:54:b8:5b:aa:
                    9c:82:50:38:91:5d:3b:3e:ba:d4:49:ef:43:31:c5:
                    dd:3d:3a:d6:15:bb:6e:b5:6c:94:45:92:d0:41:fe:
                    40:b8:62:91:99:5c:a8:c4:74:c7:3b:08:bf:65:ad:
                    83:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D7:29:96:DE:44:C1:C3:62:BE:A5:BA:22:33:92:7E:D3:79:BD:06
            X509v3 Authority Key Identifier:
                keyid:D1:91:2E:80:79:F0:6A:04:DB:6C:31:9B:91:D5:B1:DF:09:EE:9A:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/D1912E8079F06A04DB6C319B91D5B1DF09EE9A26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1912E8079F06A04DB6C319B91D5B1DF09EE9A26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/323830343a343630303a3a2f33322d3438203d3e20323636393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4600::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:7b:81:74:b5:7c:19:49:4f:e5:a3:a1:dd:4b:b4:55:61:df:
         6e:42:7a:a4:fa:be:ee:a6:a8:a5:87:22:1a:bb:15:cf:f5:83:
         96:07:9c:47:08:40:1f:a6:aa:90:99:ca:f9:76:6b:71:70:98:
         3c:55:ce:eb:4f:b2:7b:1f:4f:a8:83:4a:fc:f5:1a:e4:ff:f7:
         76:07:e7:a5:46:ef:79:43:bf:fe:34:30:ea:14:b0:90:e2:75:
         5a:63:86:58:a6:60:53:2c:0f:dc:db:40:d5:76:a3:b6:eb:e9:
         b8:a7:9e:50:a2:6c:a8:e9:5a:7a:c7:ee:16:54:67:15:c2:6e:
         be:23:da:48:57:1b:da:0b:61:d0:c1:aa:1e:64:d6:7f:e2:ce:
         b4:59:18:46:4d:6e:85:8f:ab:f5:c1:09:67:8d:2e:36:e1:fb:
         12:c9:9b:cf:4f:2d:7c:4b:74:b0:97:e9:8b:03:35:40:75:f4:
         67:5f:62:35:63:ae:7f:fa:f4:00:f8:ab:b5:5f:85:7d:9b:66:
         ce:5b:a2:85:8c:cc:bd:5e:8f:ee:e2:9e:77:48:c8:54:6b:70:
         82:78:c4:98:38:ab:f1:5f:bb:64:9b:ee:05:93:f8:20:21:83:
         53:5a:7e:ad:ec:4c:80:0d:82:dd:a4:d7:87:51:73:cd:37:b9:
         1d:1f:06:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:19 2024 by rpki-client on console-fra.rpki-client.org