Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5k682DNcUvUojGoMbzejBjUcKg4EJ4aA1yaXXvDADbcB/0/323830343a343933633a3a2f33322d3332203d3e20323637313732.roa
File:                     323830343a343933633a3a2f33322d3332203d3e20323637313732.roa (raw, json)
Hash identifier:          pDisvlHvg/YmESEmNA+TTV1L0KCR24/n6pwuamk3v/8=
Subject key identifier:   62:A7:AE:A6:64:03:92:32:BC:3E:19:C7:82:A8:9A:70:53:50:29:FB
Certificate issuer:       /CN=AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD
Certificate serial:       2C441613661AA52DAD36AFAF57D4B345872A5AB1
Authority key identifier: AE:BB:CB:B7:EF:CC:7F:ED:03:3C:BF:3F:33:3F:E9:C8:0B:28:FF:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5k682DNcUvUojGoMbzejBjUcKg4EJ4aA1yaXXvDADbcB/0/323830343a343933633a3a2f33322d3332203d3e20323637313732.roa
Signing time:             Mon 22 Jul 2024 15:31:15 +0000
ROA not before:           Mon 22 Jul 2024 15:26:15 +0000
ROA not after:            Mon 21 Jul 2025 15:31:15 +0000
asID:                     267172
IP address blocks:        2804:493c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5k682DNcUvUojGoMbzejBjUcKg4EJ4aA1yaXXvDADbcB/0/AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD.crl
                          rsync://rpki-repo.registro.br/repo/5k682DNcUvUojGoMbzejBjUcKg4EJ4aA1yaXXvDADbcB/0/AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:44:16:13:66:1a:a5:2d:ad:36:af:af:57:d4:b3:45:87:2a:5a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD
        Validity
            Not Before: Jul 22 15:26:15 2024 GMT
            Not After : Jul 21 15:31:15 2025 GMT
        Subject: CN=62A7AEA664039232BC3E19C782A89A70535029FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:77:6a:e3:36:7b:d4:68:05:0a:30:da:e9:e8:
                    c4:ec:23:c3:a4:ce:7f:49:72:cc:77:d0:a2:61:75:
                    9e:da:3b:c8:38:3b:50:b1:5b:4e:26:45:b9:85:5f:
                    97:1c:82:e5:47:72:ac:30:e5:54:39:fd:a6:aa:d1:
                    d7:66:eb:7a:03:9f:43:6d:6c:0c:b2:3a:0f:d0:4f:
                    be:2f:2d:85:9c:d2:7b:61:25:5a:aa:d3:f7:79:17:
                    14:ab:83:48:0a:d7:92:89:c5:f5:ad:06:ce:c6:d4:
                    3b:b1:a9:cb:f0:9d:ea:3d:eb:af:c9:aa:a5:ad:1d:
                    81:b9:68:a5:bd:dd:db:1c:32:bc:3c:52:c2:8a:ac:
                    d8:bf:e0:f4:fc:a7:50:35:20:28:30:ed:4d:ba:13:
                    31:34:2c:fa:94:9b:a7:9b:7b:81:4f:36:3a:8f:b8:
                    25:f4:4f:e3:b7:91:c7:34:91:0a:7b:e4:cf:7f:97:
                    79:37:91:a1:ff:bb:40:a1:7a:2c:cf:50:13:97:e4:
                    94:ae:35:ab:1f:52:ef:3d:cf:d3:c9:36:68:7a:43:
                    41:fe:eb:c4:30:7e:4d:ff:bd:75:22:60:12:5b:e9:
                    7d:44:e5:03:1b:95:91:7b:b1:b3:6e:2c:5f:f0:c5:
                    15:e7:39:79:8b:62:95:ae:c1:f0:9e:96:8c:75:a7:
                    7e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A7:AE:A6:64:03:92:32:BC:3E:19:C7:82:A8:9A:70:53:50:29:FB
            X509v3 Authority Key Identifier:
                keyid:AE:BB:CB:B7:EF:CC:7F:ED:03:3C:BF:3F:33:3F:E9:C8:0B:28:FF:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5k682DNcUvUojGoMbzejBjUcKg4EJ4aA1yaXXvDADbcB/0/AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5k682DNcUvUojGoMbzejBjUcKg4EJ4aA1yaXXvDADbcB/0/323830343a343933633a3a2f33322d3332203d3e20323637313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:493c::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:ad:f8:d0:53:7c:6c:47:2e:33:9c:78:26:8e:91:14:7a:a7:
         2c:21:92:bf:d8:19:c3:73:d4:7a:07:3b:f9:a0:f1:da:74:ea:
         50:6b:05:dd:83:7f:0e:68:60:a4:a8:87:80:5d:bb:e6:b1:90:
         9d:7e:18:57:8d:eb:3f:fa:a7:b1:fe:a8:0b:26:ad:a7:2c:a0:
         08:68:fb:40:9b:8e:88:58:ee:ab:87:98:a5:f7:6d:99:3a:bb:
         8c:ac:84:a6:49:99:cc:e4:f7:c6:e2:eb:96:b5:93:e3:61:73:
         0f:f8:4e:ac:3d:e2:63:31:8d:d9:36:98:fb:d4:17:36:0f:7d:
         16:d7:ff:6f:c3:9d:b2:4e:12:22:a7:12:31:e4:7e:70:2d:1c:
         fe:12:af:a6:be:06:81:b5:c8:45:bd:89:e3:24:aa:fa:ca:2a:
         12:09:87:d8:cc:d6:a2:f9:7f:e9:84:1b:e9:4c:50:3c:4c:1b:
         b4:a1:c6:46:08:3f:6d:b8:41:54:4b:e7:96:be:1d:db:90:d1:
         35:13:9c:a8:57:81:ec:6b:33:06:fb:b9:1f:57:59:53:bd:64:
         47:6c:0c:c9:6f:79:f5:73:aa:2a:56:ae:9a:00:de:7f:b4:12:
         93:d0:d0:b7:43:d9:20:ea:9e:7a:e9:0d:58:58:61:10:9b:2f:
         4f:53:20:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:32 2024 by rpki-client on console-ams.rpki-client.org