Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/323830343a316236303a3a2f33322d313238203d3e203631373234.roa
File:                     323830343a316236303a3a2f33322d313238203d3e203631373234.roa (raw, json)
Hash identifier:          /Q+WeS2C8fOJdlqCZF431cP4eB8x8b7OolTSsP43kgI=
Subject key identifier:   B8:5B:87:79:77:4F:92:1D:BF:C9:6C:22:1B:61:63:BE:5C:11:84:50
Certificate issuer:       /CN=22556D0290AA08E04E52E5890C17182439269D40
Certificate serial:       7E4B6F5621C7E3816F8E89EBD912749BD5B2CCEA
Authority key identifier: 22:55:6D:02:90:AA:08:E0:4E:52:E5:89:0C:17:18:24:39:26:9D:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22556D0290AA08E04E52E5890C17182439269D40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/323830343a316236303a3a2f33322d313238203d3e203631373234.roa
Signing time:             Tue 17 Sep 2024 12:59:59 +0000
ROA not before:           Tue 17 Sep 2024 12:54:59 +0000
ROA not after:            Tue 16 Sep 2025 12:59:59 +0000
asID:                     61724
IP address blocks:        2804:1b60::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/22556D0290AA08E04E52E5890C17182439269D40.crl
                          rsync://rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/22556D0290AA08E04E52E5890C17182439269D40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22556D0290AA08E04E52E5890C17182439269D40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 22:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:4b:6f:56:21:c7:e3:81:6f:8e:89:eb:d9:12:74:9b:d5:b2:cc:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22556D0290AA08E04E52E5890C17182439269D40
        Validity
            Not Before: Sep 17 12:54:59 2024 GMT
            Not After : Sep 16 12:59:59 2025 GMT
        Subject: CN=B85B8779774F921DBFC96C221B6163BE5C118450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:10:af:b5:57:6c:4f:ad:c4:a7:80:d3:6f:54:
                    05:ac:bf:93:70:99:e0:39:0c:26:6e:45:7e:9d:4d:
                    17:2e:14:a9:f7:26:e2:51:69:e6:5f:a4:92:13:80:
                    aa:48:90:bb:be:2d:64:04:d3:f7:52:4d:93:01:53:
                    4a:27:43:2f:16:0d:4f:c3:7e:32:49:7c:06:1e:b8:
                    c5:64:77:e2:3f:b1:ff:5f:92:5d:0e:57:36:e9:90:
                    ca:0d:55:ef:67:f1:75:93:4a:95:41:dc:74:7a:49:
                    28:1e:dc:0b:a7:0c:e6:8e:ff:75:ff:e7:64:65:d2:
                    4d:c6:ca:b4:24:03:fb:f1:27:b0:a1:2e:e9:b1:e1:
                    91:13:48:b0:84:43:c8:fa:bd:4a:cc:db:fe:b7:44:
                    ad:24:10:92:15:b2:f0:b8:d0:eb:c5:29:c7:5c:b1:
                    f8:e6:01:bd:ea:2d:b2:8e:49:60:7f:49:c5:00:bf:
                    c0:34:12:fa:8d:40:cb:88:4c:a7:c5:c2:5e:d0:9a:
                    94:17:e5:87:08:eb:7e:74:09:ba:b0:5d:dd:1d:90:
                    33:4c:e8:f1:32:8c:c3:16:ed:58:9d:6e:27:6e:be:
                    41:20:5d:5b:6f:5b:de:a5:13:66:9d:06:ac:1b:31:
                    a5:f9:7a:42:22:5b:74:88:a9:6d:e7:96:68:33:77:
                    44:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5B:87:79:77:4F:92:1D:BF:C9:6C:22:1B:61:63:BE:5C:11:84:50
            X509v3 Authority Key Identifier:
                keyid:22:55:6D:02:90:AA:08:E0:4E:52:E5:89:0C:17:18:24:39:26:9D:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/22556D0290AA08E04E52E5890C17182439269D40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22556D0290AA08E04E52E5890C17182439269D40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/323830343a316236303a3a2f33322d313238203d3e203631373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:b4:62:44:10:3c:e9:7a:a6:c0:ee:32:d4:59:87:67:d6:54:
         4a:9c:d6:3e:65:ab:32:1a:cd:26:aa:47:eb:5d:c0:4a:f5:ce:
         fe:a1:af:2f:e5:1b:bd:7f:76:8c:46:8d:a9:36:eb:e6:40:44:
         27:29:9c:25:9d:5b:04:6a:53:58:bf:2f:dd:bc:d5:0f:2d:33:
         96:ef:bb:6e:72:68:cc:b6:45:75:5c:24:22:6d:46:1c:45:41:
         ca:60:5a:61:88:62:b1:3f:3b:a2:c8:8b:3e:24:ad:30:3b:2e:
         fd:71:9a:05:c5:21:68:89:c1:cd:ad:2e:5f:72:75:c1:dd:f1:
         52:12:92:76:cb:df:d8:e4:3c:07:b7:6f:7f:67:42:d2:c8:d3:
         a8:87:79:ca:54:f7:50:fb:33:0e:57:1a:27:9f:7c:74:b6:da:
         01:4e:19:11:20:d5:f4:bd:06:04:75:f9:62:b0:3d:f1:28:53:
         27:f2:0c:7d:e1:92:6d:7f:7c:57:26:d9:7d:aa:56:d3:a9:75:
         61:63:22:1c:bb:c5:43:a0:8c:a0:69:a3:39:34:78:d0:7a:2e:
         f6:84:f0:89:41:4a:a6:e2:a8:bd:07:e7:d6:1c:4e:2a:b3:54:
         37:60:cd:56:05:ff:5b:c0:ef:90:48:fd:77:0d:f2:f1:ef:9d:
         e4:f4:aa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 21:26:24 2024 by rpki-client on console-fra.rpki-client.org