Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a343038303a3a2f34322d3432203d3e20323632343234.roa
File:                     323830343a363136343a343038303a3a2f34322d3432203d3e20323632343234.roa (raw, json)
Hash identifier:          qFR62s/4vspm72j3TB+96Zh4I/yB2Q41PkUWPjzUfZE=
Subject key identifier:   10:2B:B4:88:28:7F:A4:97:E2:C9:4A:84:CA:1D:C7:D7:03:2B:12:50
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       6044B646F60FFDFF9B3921827C015DDCADBF28E1
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a343038303a3a2f34322d3432203d3e20323632343234.roa
Signing time:             Wed 15 May 2024 13:26:55 +0000
ROA not before:           Wed 15 May 2024 13:21:55 +0000
ROA not after:            Wed 14 May 2025 13:26:55 +0000
asID:                     262424
IP address blocks:        2804:6164:4080::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:44:b6:46:f6:0f:fd:ff:9b:39:21:82:7c:01:5d:dc:ad:bf:28:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: May 15 13:21:55 2024 GMT
            Not After : May 14 13:26:55 2025 GMT
        Subject: CN=102BB488287FA497E2C94A84CA1DC7D7032B1250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bd:c5:ff:e2:9c:c3:2e:7a:b2:58:4b:24:ae:
                    63:c6:14:78:63:37:8c:48:9d:cc:c4:ff:e6:54:d8:
                    17:80:94:cd:2a:a7:b6:12:cb:05:5d:bc:36:d8:62:
                    6a:2c:5c:07:03:15:8a:80:00:c0:b2:34:7d:e9:af:
                    c5:f6:cd:bd:c6:1e:75:45:ef:c8:90:4e:15:52:f8:
                    5e:c0:cb:9c:77:e9:be:7a:b1:bc:96:ae:59:ae:1b:
                    9b:f6:7d:df:eb:87:2f:70:02:b8:5c:c4:b0:2c:67:
                    27:5f:8d:79:29:eb:ad:90:d2:3e:dd:87:21:57:bc:
                    68:89:cc:13:d3:86:46:a4:73:81:71:4b:b4:df:f6:
                    1a:d9:c0:b5:e3:4e:10:02:d2:5f:2e:2b:64:93:c9:
                    58:70:5a:13:ba:9d:52:36:cf:e5:fb:e4:5a:32:e3:
                    e4:51:be:6f:2a:c3:21:87:fc:8b:bb:65:2b:b0:75:
                    3b:9e:c3:3c:27:2a:b4:02:d3:be:6e:a1:a9:6a:15:
                    33:f5:12:45:70:38:25:ed:7f:f2:0a:1e:e2:8c:33:
                    29:2d:50:07:af:eb:2e:e2:bd:42:d6:cd:42:35:d5:
                    a8:25:9c:eb:24:bf:80:68:35:a4:52:74:58:51:6d:
                    e8:79:c7:0b:99:ea:33:a1:47:c9:37:40:de:bc:e9:
                    09:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2B:B4:88:28:7F:A4:97:E2:C9:4A:84:CA:1D:C7:D7:03:2B:12:50
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a343038303a3a2f34322d3432203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6164:4080::/42

    Signature Algorithm: sha256WithRSAEncryption
         88:97:10:e0:b8:b0:6f:20:72:3e:3c:25:12:5a:2b:81:77:40:
         b6:f2:7b:25:04:a3:40:4c:71:28:e1:f7:b3:68:b6:15:6b:b7:
         ce:9d:fb:fd:9d:2a:9e:67:34:29:0a:e7:49:1a:b1:06:d2:0b:
         1f:14:80:4c:1b:76:7e:a7:3b:28:07:da:6d:81:3c:aa:a7:51:
         83:5c:67:c2:57:64:d6:7d:b8:e4:c6:5a:3b:4f:60:c5:f3:7c:
         ea:76:6b:3d:d5:53:dc:4e:83:7b:b5:e9:1d:65:93:5b:6d:f3:
         0a:63:40:6d:67:54:fb:76:be:5d:35:58:0b:32:60:db:9d:5f:
         5b:bb:06:2e:d1:a6:6a:3b:d2:1f:05:6e:d2:36:a3:ef:ec:4b:
         e3:07:e4:cb:ac:8a:89:9a:a5:dc:11:80:f1:2a:08:2a:aa:37:
         3f:6b:d8:d2:fe:c6:81:85:0a:88:c0:fc:b3:f5:11:97:0a:c6:
         3d:8a:41:a5:81:e2:fd:df:27:8e:68:3f:a5:e2:17:3c:fa:25:
         f5:3c:c0:f6:83:05:81:2a:fe:2f:dc:74:dd:5f:9d:86:c3:fc:
         18:cf:a8:e3:4e:fe:16:11:3c:61:ef:af:04:39:2d:41:e5:38:
         bb:71:46:de:d1:79:ba:a9:ba:7e:9b:9d:b4:57:2a:ae:d9:76:
         a2:fb:62:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:09 2024 by rpki-client on console-ams.rpki-client.org