Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a383030303a3a2f33352d3335203d3e20323632343234.roa
File:                     323830343a363136343a383030303a3a2f33352d3335203d3e20323632343234.roa (raw, json)
Hash identifier:          dKQfvNAF8JTCv6HuyukauK4rBji+DMezCW51ndPCKfQ=
Subject key identifier:   2E:AD:E7:85:82:40:75:95:97:5F:DA:B8:62:E5:22:6E:51:89:E0:5C
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       4C2BB58A3B5CF6AEC35EACDBDACD642EF4EA8D67
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a383030303a3a2f33352d3335203d3e20323632343234.roa
Signing time:             Wed 15 May 2024 13:26:57 +0000
ROA not before:           Wed 15 May 2024 13:21:57 +0000
ROA not after:            Wed 14 May 2025 13:26:57 +0000
asID:                     262424
IP address blocks:        2804:6164:8000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2b:b5:8a:3b:5c:f6:ae:c3:5e:ac:db:da:cd:64:2e:f4:ea:8d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: May 15 13:21:57 2024 GMT
            Not After : May 14 13:26:57 2025 GMT
        Subject: CN=2EADE78582407595975FDAB862E5226E5189E05C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0b:39:30:cd:d7:1b:d9:66:bc:f9:5f:2a:8b:
                    dc:9c:a3:05:0c:3d:69:db:59:f7:f9:06:1f:49:05:
                    a4:4c:a4:c8:df:2c:db:14:5e:2c:ea:4b:2e:c5:a4:
                    df:43:63:6d:ec:9b:bd:78:73:cb:2a:d8:e3:9f:9d:
                    9d:2d:e9:c2:ea:59:75:5a:6a:88:45:cd:58:45:a4:
                    d8:15:6e:25:ca:e8:f2:18:89:b4:17:83:f0:6e:d7:
                    9b:51:32:26:df:a7:ab:7f:8d:43:c7:9c:14:f5:6a:
                    1e:69:ad:94:8c:3e:33:b6:02:39:68:bc:8c:a2:48:
                    6d:c0:30:9c:e4:8d:51:df:ea:35:de:5b:49:a0:ce:
                    0b:03:1e:cb:5e:a9:ee:f7:dc:3c:5b:c3:54:7c:1a:
                    02:e2:89:7b:41:f6:61:54:f3:0a:31:82:6c:82:78:
                    ea:12:79:dc:e5:5a:fc:52:ec:9c:12:b7:88:ba:0c:
                    f4:a3:da:80:cd:4b:d7:b7:d3:08:38:0e:e5:1b:0a:
                    7f:d1:2b:d0:48:d2:1f:ec:fd:62:71:17:ce:fd:17:
                    16:4b:70:05:3e:31:16:94:e5:ac:2b:7b:07:ae:63:
                    33:48:c7:4f:d4:c1:d9:b3:b3:9b:6e:bd:79:2f:79:
                    10:af:e6:a8:d4:62:23:9b:5f:ae:e7:1c:65:74:20:
                    ad:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AD:E7:85:82:40:75:95:97:5F:DA:B8:62:E5:22:6E:51:89:E0:5C
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a383030303a3a2f33352d3335203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6164:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         14:e8:f4:d1:38:71:07:5e:73:a9:87:1a:d0:a2:78:75:a9:92:
         42:80:65:75:85:02:c6:51:67:df:70:5c:01:fa:19:61:cb:d6:
         32:af:21:55:b3:ca:57:0f:1f:6c:66:7d:48:fc:cc:d1:0a:01:
         df:92:fc:d1:28:6b:65:1f:3b:34:d5:2e:cf:ce:85:60:a0:d9:
         25:4d:4c:63:27:ed:39:a3:08:81:f3:9c:f0:b3:59:a9:8a:63:
         2e:b3:9a:6d:93:89:96:fc:0f:cf:27:d4:ac:79:e9:41:1f:ed:
         80:a5:0d:19:63:1d:32:ca:24:b9:a7:8d:57:12:45:d7:bd:db:
         f9:ad:81:3a:a1:27:e4:42:45:a7:57:d7:16:f7:0c:4c:d4:26:
         fb:a5:7d:e0:70:9c:bd:b0:30:82:be:b0:ec:de:58:eb:88:1a:
         96:50:d8:f9:fc:54:0d:64:56:5e:7c:6f:fd:92:af:6c:08:5a:
         3e:59:66:d6:f4:86:fa:6a:5f:51:fa:c4:c8:af:8a:c4:16:2f:
         da:86:6c:d9:19:e6:81:70:4e:b9:45:00:6b:11:a0:32:c0:6b:
         9a:62:f3:f7:92:29:5b:78:a1:02:6c:dd:0b:73:9d:ea:98:44:
         32:79:52:86:0d:e0:8a:f9:0b:cf:8b:17:cc:7c:bf:65:47:b5:
         4c:e9:df:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:09 2024 by rpki-client on console-ams.rpki-client.org