Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a343034303a3a2f34322d3432203d3e20323632343234.roa
File:                     323830343a363136343a343034303a3a2f34322d3432203d3e20323632343234.roa (raw, json)
Hash identifier:          X+PAwNlutRsiaBrahaNAqpQ1SHNdWswdrzLEdi8NY9I=
Subject key identifier:   7D:C6:6D:A8:87:71:5C:04:92:DE:A0:4A:03:12:BE:66:BF:3B:75:ED
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       28266C3602DF448D5589CA17FB06BE5FAC7F8761
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a343034303a3a2f34322d3432203d3e20323632343234.roa
Signing time:             Wed 15 May 2024 13:26:53 +0000
ROA not before:           Wed 15 May 2024 13:21:53 +0000
ROA not after:            Wed 14 May 2025 13:26:53 +0000
asID:                     262424
IP address blocks:        2804:6164:4040::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:26:6c:36:02:df:44:8d:55:89:ca:17:fb:06:be:5f:ac:7f:87:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: May 15 13:21:53 2024 GMT
            Not After : May 14 13:26:53 2025 GMT
        Subject: CN=7DC66DA887715C0492DEA04A0312BE66BF3B75ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8d:85:7c:8a:35:21:69:9a:93:19:7d:4c:86:
                    ef:a3:84:61:d8:46:9a:9f:bf:7d:29:87:12:90:de:
                    c5:2c:2f:c8:23:25:10:f2:37:fe:d1:6c:92:56:c8:
                    67:43:0c:cd:1b:c7:e3:36:a3:cc:aa:5c:50:66:0f:
                    40:7d:3c:c7:46:46:0d:87:d1:5e:c5:a8:9e:59:df:
                    bc:7b:a3:a5:b0:94:ce:24:9e:64:d5:83:26:a9:af:
                    b3:48:30:5c:26:04:5f:f9:74:41:81:8f:2d:dd:84:
                    e5:34:24:35:45:6c:79:ed:d7:9e:ab:89:3d:ea:ab:
                    12:b1:5a:ee:43:14:de:45:a5:09:e4:98:8c:4c:85:
                    67:bc:72:72:4d:ca:4b:c0:b9:70:72:00:16:44:a1:
                    ff:8b:00:2a:6f:be:19:e4:18:df:8c:13:67:04:ac:
                    d0:f9:14:87:58:30:0d:ce:d7:c8:d6:f0:8e:8e:f5:
                    5e:43:cd:59:79:05:08:3c:e4:40:bf:ea:d2:7b:04:
                    ed:69:6f:26:e4:62:54:f1:9b:a4:7b:c7:31:df:20:
                    e9:f5:2f:21:94:6d:1d:dd:43:11:a7:f3:d4:2d:3e:
                    4b:c9:4b:3d:09:2c:81:07:e5:e9:e2:64:76:b1:10:
                    c2:b2:7b:70:3c:06:56:e9:73:78:b8:59:af:ca:99:
                    b0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C6:6D:A8:87:71:5C:04:92:DE:A0:4A:03:12:BE:66:BF:3B:75:ED
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a343034303a3a2f34322d3432203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6164:4040::/42

    Signature Algorithm: sha256WithRSAEncryption
         93:38:63:4d:a3:f7:32:95:f8:38:3b:fb:82:e0:74:67:6b:f3:
         6a:c3:7e:12:45:c6:dd:5b:3d:d8:d5:ad:39:e4:cc:c3:27:5d:
         7b:88:0d:ae:b4:77:37:7b:47:06:2f:03:1b:64:40:ea:67:33:
         3f:36:f0:39:0a:d0:26:d4:a9:58:85:21:e2:4a:f1:a7:a6:e8:
         3a:e1:db:be:f3:95:16:fa:f9:77:92:5c:ec:57:3e:a4:dc:b5:
         c3:2f:97:c4:20:ae:34:3f:00:54:f6:35:0c:48:9d:37:7e:bf:
         94:8d:89:d9:09:d7:f1:45:9c:3d:5b:80:1b:45:a4:90:da:c6:
         7b:77:42:47:99:78:06:ce:ae:6b:d3:01:b2:43:1f:3e:79:12:
         a3:c1:a8:00:72:aa:43:bf:7b:9b:20:50:b6:de:49:52:98:37:
         9b:ed:fa:1a:1f:0b:5a:c2:bf:ae:8c:61:68:43:c3:7a:64:90:
         79:61:06:75:4e:29:65:77:15:de:5b:71:3f:38:61:18:7f:a6:
         e5:d9:05:91:3f:71:8e:44:19:19:09:15:51:84:f6:a2:2e:f4:
         d3:45:82:85:d5:c8:ff:01:cb:d5:a4:47:b2:ce:37:20:bb:6e:
         ee:13:99:9a:37:25:c1:e3:65:3c:2a:04:b1:d9:f6:a6:5b:13:
         35:2d:37:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:09 2024 by rpki-client on console-ams.rpki-client.org