Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/323830343a6561303a3a2f33322d3438203d3e203532393638.roa
File:                     323830343a6561303a3a2f33322d3438203d3e203532393638.roa (raw, json)
Hash identifier:          ZgXzZB7XyMZbG+C6H4ex+AnfaAH5PtwQL794HWs2PMU=
Subject key identifier:   07:77:01:8E:A1:90:60:D8:42:46:98:45:E9:8D:51:E0:33:2B:E7:E8
Certificate issuer:       /CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
Certificate serial:       7D724677BFCA7DFC59EC0E8BBDD238CD580563D5
Authority key identifier: C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/323830343a6561303a3a2f33322d3438203d3e203532393638.roa
Signing time:             Wed 23 Oct 2024 22:07:23 +0000
ROA not before:           Wed 23 Oct 2024 22:02:23 +0000
ROA not after:            Wed 22 Oct 2025 22:07:23 +0000
asID:                     52968
IP address blocks:        2804:ea0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl
                          rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:72:46:77:bf:ca:7d:fc:59:ec:0e:8b:bd:d2:38:cd:58:05:63:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
        Validity
            Not Before: Oct 23 22:02:23 2024 GMT
            Not After : Oct 22 22:07:23 2025 GMT
        Subject: CN=0777018EA19060D842469845E98D51E0332BE7E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:8f:c8:5f:22:cd:a0:66:ae:fa:b5:07:a5:ca:
                    01:f5:3c:a9:21:9b:d8:0e:e8:ba:73:f8:ee:36:95:
                    03:61:fb:85:ba:7a:13:6a:37:6d:9e:56:49:ff:4a:
                    8f:9e:b7:c1:96:68:89:f5:1b:75:08:63:38:37:4f:
                    23:c9:32:53:e1:d3:5a:9c:dd:6c:9b:5f:e6:b8:56:
                    22:29:0c:a0:2d:79:17:1a:af:6d:e0:da:3f:6b:aa:
                    ca:08:9e:9d:18:27:8c:7e:4a:ff:97:db:d9:21:7d:
                    b2:53:6c:ca:d9:cc:2d:a2:f9:6d:87:93:d7:23:9e:
                    7e:7f:92:6d:74:51:b4:40:7e:a1:3d:db:e8:9f:72:
                    72:d8:bf:4b:1f:dd:13:9d:8b:ef:79:b4:fd:2d:9f:
                    68:3d:c9:83:54:ed:51:7a:a2:89:00:42:c8:b4:08:
                    93:d0:89:de:da:22:48:35:35:ee:c1:29:1d:cb:17:
                    25:28:2c:6a:d2:04:67:78:17:37:6f:8b:95:d3:a1:
                    28:cd:70:7e:f8:7e:3e:90:fc:f5:a2:cc:31:7c:95:
                    c1:36:ad:c5:a4:9b:26:4e:c7:62:1c:7b:b4:68:ab:
                    0c:a2:88:7f:3a:9f:6a:63:5c:89:55:c0:86:2c:29:
                    94:10:99:56:eb:09:05:4f:09:8b:4c:28:5c:93:7a:
                    cf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:77:01:8E:A1:90:60:D8:42:46:98:45:E9:8D:51:E0:33:2B:E7:E8
            X509v3 Authority Key Identifier:
                keyid:C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/323830343a6561303a3a2f33322d3438203d3e203532393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:07:e8:fc:88:7a:21:5e:06:a4:ed:bf:a5:c4:b3:cc:6b:6e:
         37:d4:14:66:87:ae:f8:fa:89:90:5e:ea:7e:13:1b:be:72:9a:
         32:84:bf:f0:0c:67:68:f6:9d:19:d2:d6:04:ad:da:6c:be:d8:
         c2:f4:59:00:33:b1:bd:26:94:05:f4:9c:b4:34:56:dd:b8:45:
         3d:cf:87:7f:53:45:55:a3:d9:00:24:4c:93:f3:ee:d7:a4:03:
         46:ab:3c:cc:4c:e5:a2:0f:dd:51:40:79:c3:be:4e:3f:18:d1:
         62:fd:ee:5a:0b:94:9f:90:0b:92:b9:88:e6:0c:8e:9d:d2:fa:
         2c:f8:08:ac:04:93:53:74:0d:32:64:22:ea:e5:52:61:a6:1e:
         24:25:85:18:22:4a:a6:52:15:00:f6:d5:50:0d:44:eb:08:8a:
         6c:3c:3e:5a:c1:8e:b2:28:c6:22:ce:c3:42:6f:07:9c:8e:72:
         ca:58:87:47:1d:a8:8e:35:20:5f:bf:d3:29:33:27:c8:cb:04:
         f3:cc:2d:34:df:87:0c:df:cb:5d:2d:2b:38:d2:4b:f6:b5:d0:
         d6:0a:c9:f7:4c:52:3f:4e:47:af:b5:72:4f:3c:11:c1:6d:6e:
         23:42:7d:4f:87:7f:de:32:a3:19:d3:cc:83:00:e5:9f:e5:83:
         b4:09:7e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:59 2024 by rpki-client on console-ams.rpki-client.org