Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63SoBtnCSUFd62w4uH7wpmLxmkJQSsXtjF9pCjF7VmKX/0/323830343a383362303a3a2f33322d3438203d3e20323732323132.roa
File:                     323830343a383362303a3a2f33322d3438203d3e20323732323132.roa (raw, json)
Hash identifier:          2PLUZwiNcTW5wh4ujsVIGdJZOfaVDL3gTrfKviVr7mI=
Subject key identifier:   CE:7C:1A:E7:49:59:85:2B:9E:52:04:96:97:B0:B3:EA:24:F5:B1:5F
Certificate issuer:       /CN=6D9755623E75A13224A7728661EE90C9A5BB230E
Certificate serial:       479765771575D7F6A72CEB1D07536A5E500A947D
Authority key identifier: 6D:97:55:62:3E:75:A1:32:24:A7:72:86:61:EE:90:C9:A5:BB:23:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D9755623E75A13224A7728661EE90C9A5BB230E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63SoBtnCSUFd62w4uH7wpmLxmkJQSsXtjF9pCjF7VmKX/0/323830343a383362303a3a2f33322d3438203d3e20323732323132.roa
Signing time:             Tue 30 Jul 2024 19:52:38 +0000
ROA not before:           Tue 30 Jul 2024 19:47:38 +0000
ROA not after:            Tue 29 Jul 2025 19:52:38 +0000
asID:                     272212
IP address blocks:        2804:83b0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63SoBtnCSUFd62w4uH7wpmLxmkJQSsXtjF9pCjF7VmKX/0/6D9755623E75A13224A7728661EE90C9A5BB230E.crl
                          rsync://rpki-repo.registro.br/repo/63SoBtnCSUFd62w4uH7wpmLxmkJQSsXtjF9pCjF7VmKX/0/6D9755623E75A13224A7728661EE90C9A5BB230E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D9755623E75A13224A7728661EE90C9A5BB230E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Dec 2024 00:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:97:65:77:15:75:d7:f6:a7:2c:eb:1d:07:53:6a:5e:50:0a:94:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D9755623E75A13224A7728661EE90C9A5BB230E
        Validity
            Not Before: Jul 30 19:47:38 2024 GMT
            Not After : Jul 29 19:52:38 2025 GMT
        Subject: CN=CE7C1AE74959852B9E52049697B0B3EA24F5B15F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:02:f1:20:4f:09:3f:c3:5c:52:9e:c1:1b:3b:
                    8e:62:b1:c9:bb:85:1c:1e:14:bb:ce:af:a4:44:cb:
                    71:cf:2b:84:2e:93:f8:62:df:9a:76:99:8c:62:9d:
                    2e:64:be:a0:bf:b1:30:16:ca:63:79:40:23:a0:16:
                    35:f4:7c:d6:b9:68:55:d0:bf:19:5f:db:ed:a3:e1:
                    1c:a4:62:39:7b:92:69:05:28:2d:63:e9:66:f8:76:
                    ce:e4:58:29:9b:4c:34:82:16:d5:cb:99:91:77:89:
                    2e:f2:64:7d:9c:b3:f7:cc:34:f8:6e:50:1b:ff:98:
                    c8:3c:25:f2:31:20:fc:7c:03:e4:ec:f4:78:7c:d4:
                    14:42:7d:4f:f1:ce:e2:29:8b:26:aa:ac:a8:4f:21:
                    45:bd:c1:d3:05:ec:97:75:b4:34:48:3e:57:90:ed:
                    82:a1:7d:12:8a:89:48:d3:e3:14:0b:e0:00:77:5d:
                    38:f4:2a:31:76:70:fd:42:cb:02:65:f4:50:54:cc:
                    dc:bc:a3:df:aa:0b:13:e1:dd:c1:c0:20:27:9c:8c:
                    e4:be:6e:43:a3:25:23:a7:bd:63:90:e0:9c:56:2c:
                    6b:6d:fe:e9:1b:35:b6:36:62:05:34:12:0d:fc:0d:
                    53:2c:ba:33:84:cd:2b:f1:86:1c:83:98:93:37:a3:
                    35:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7C:1A:E7:49:59:85:2B:9E:52:04:96:97:B0:B3:EA:24:F5:B1:5F
            X509v3 Authority Key Identifier:
                keyid:6D:97:55:62:3E:75:A1:32:24:A7:72:86:61:EE:90:C9:A5:BB:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63SoBtnCSUFd62w4uH7wpmLxmkJQSsXtjF9pCjF7VmKX/0/6D9755623E75A13224A7728661EE90C9A5BB230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D9755623E75A13224A7728661EE90C9A5BB230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63SoBtnCSUFd62w4uH7wpmLxmkJQSsXtjF9pCjF7VmKX/0/323830343a383362303a3a2f33322d3438203d3e20323732323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:d9:10:9d:f6:75:54:35:8f:c5:8e:02:cd:e3:f6:3b:34:13:
         b3:c5:d1:fd:7f:a6:9c:a8:1a:7c:3a:56:b2:c2:58:c7:49:8a:
         05:72:b6:43:43:aa:8c:48:60:6d:73:c2:4f:4f:1c:af:5f:04:
         50:d9:6a:41:80:56:8a:35:2a:af:e8:48:14:c2:ed:41:88:cb:
         c8:59:dd:05:f3:ad:f9:3c:00:78:fd:58:67:56:a3:56:18:7a:
         51:79:62:c5:36:1e:cb:67:a5:74:95:40:2a:42:08:b6:95:7a:
         23:e2:ef:3b:c4:bb:8a:eb:fb:7b:86:6c:69:ca:bd:98:ce:13:
         9c:ea:54:98:0f:27:82:a8:80:59:66:e0:fc:1f:7f:0d:11:99:
         60:24:19:48:2f:60:4f:6e:05:7b:e3:96:89:c7:33:df:00:0e:
         3f:06:8c:1f:69:72:88:69:e3:55:f1:91:f7:52:10:e9:2f:59:
         42:6f:4c:99:7d:97:b7:12:b7:b1:3c:ba:25:e4:ac:f4:d2:84:
         4e:f4:1b:40:09:74:16:e1:92:11:4c:4e:b3:42:39:90:a1:04:
         83:f8:3e:9d:d9:31:25:5c:4d:8d:33:c5:84:0f:7b:43:c6:43:
         87:7f:6d:02:01:30:f9:61:1d:66:f9:23:28:5e:fd:a5:b1:c0:
         09:5b:1a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 22:36:20 2024 by rpki-client on console-ams.rpki-client.org