Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/323830343a316335303a3a2f33322d3334203d3e203631363439.roa
File:                     323830343a316335303a3a2f33322d3334203d3e203631363439.roa (raw, json)
Hash identifier:          q4Nj3k4W9edspzzdLbIPnmcyXFt3P36Gcfwm8iQ2GSY=
Subject key identifier:   2B:74:8E:45:50:D7:9A:F9:FA:E2:98:45:FA:18:E5:E8:A6:12:CF:80
Certificate issuer:       /CN=39E00671823C7AB3E8086F0B9E90A44A52E8699C
Certificate serial:       145C37548A36B73525AF0462FE15CDA2D0CAF533
Authority key identifier: 39:E0:06:71:82:3C:7A:B3:E8:08:6F:0B:9E:90:A4:4A:52:E8:69:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/323830343a316335303a3a2f33322d3334203d3e203631363439.roa
Signing time:             Wed 03 Apr 2024 18:30:48 +0000
ROA not before:           Wed 03 Apr 2024 18:25:48 +0000
ROA not after:            Wed 02 Apr 2025 18:30:48 +0000
asID:                     61649
IP address blocks:        2804:1c50::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.crl
                          rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:5c:37:54:8a:36:b7:35:25:af:04:62:fe:15:cd:a2:d0:ca:f5:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39E00671823C7AB3E8086F0B9E90A44A52E8699C
        Validity
            Not Before: Apr  3 18:25:48 2024 GMT
            Not After : Apr  2 18:30:48 2025 GMT
        Subject: CN=2B748E4550D79AF9FAE29845FA18E5E8A612CF80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:38:51:30:28:e0:87:40:e9:03:65:b1:1a:
                    15:f5:d7:72:dc:5b:be:87:ef:b7:9f:14:aa:9e:52:
                    0f:e3:39:77:c5:05:95:3a:32:af:9c:5d:2d:b7:3f:
                    a3:92:b5:f0:47:34:c8:0a:c8:7b:cb:a6:f4:ac:86:
                    b6:1a:6e:62:7c:d0:2e:6f:0f:fe:91:74:dd:27:ea:
                    6a:16:9a:83:b8:d5:b7:63:ba:77:ed:ca:ee:38:43:
                    92:e4:2f:09:41:1c:92:c0:87:29:3b:aa:4e:ab:a3:
                    17:02:c4:4b:9b:62:7b:4a:c8:2e:fd:b3:79:6a:c3:
                    6d:2c:3c:d2:9c:32:da:ef:98:e3:f7:b5:21:e4:e2:
                    fc:37:ce:fb:cd:af:ac:ff:39:7c:d1:34:01:4c:d8:
                    d4:26:16:4a:05:5b:14:87:79:b1:72:54:db:8c:4f:
                    88:57:6c:b4:29:ae:16:c1:9c:d8:59:39:a8:4b:45:
                    2b:c9:5d:b6:96:d0:79:cb:6b:6a:f0:76:71:90:75:
                    64:db:6b:5c:e4:e8:51:bb:b2:7b:70:ec:34:02:38:
                    ac:3e:4b:ac:a6:d1:7b:0f:f5:1f:71:6b:8d:bb:4e:
                    e1:ee:f2:a9:36:33:96:48:8c:5a:6b:4a:fa:aa:75:
                    c6:d0:52:47:de:79:23:10:45:35:c9:cf:cc:ea:a7:
                    07:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:74:8E:45:50:D7:9A:F9:FA:E2:98:45:FA:18:E5:E8:A6:12:CF:80
            X509v3 Authority Key Identifier:
                keyid:39:E0:06:71:82:3C:7A:B3:E8:08:6F:0B:9E:90:A4:4A:52:E8:69:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/323830343a316335303a3a2f33322d3334203d3e203631363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:8c:f9:93:ed:92:25:b3:fe:6e:e0:c6:9e:90:a1:fa:04:84:
         78:66:80:d6:e6:1a:64:c3:c6:b1:84:e3:13:a8:bc:76:d1:da:
         c4:13:93:8e:88:af:ba:f9:62:cb:2a:b3:84:f4:ba:96:9d:4b:
         1a:d0:77:9c:15:1f:0f:b4:42:e6:e8:02:ff:ca:58:df:9c:2a:
         1a:f3:fe:62:d3:67:7c:ea:af:08:c4:1b:d6:9e:39:d7:e1:15:
         1c:ef:9f:b7:b1:0c:4b:8e:9f:49:f9:52:40:d9:9f:45:fa:04:
         bc:cc:6f:99:a5:c8:06:7f:98:78:11:32:7a:47:ce:8d:08:8a:
         76:c1:3a:f7:2c:7c:88:73:e0:40:50:a1:b4:d2:18:42:d1:ba:
         10:86:82:f9:35:e2:8b:34:e7:c5:75:a7:9e:93:81:e1:d0:02:
         fc:c4:b5:26:dc:da:76:65:41:d8:dd:78:80:6a:b3:e7:78:35:
         99:4b:ee:d4:b0:ec:71:15:bf:67:33:4b:56:e2:0f:c6:7a:f3:
         6a:37:bf:58:87:a9:a6:95:10:11:87:1b:78:06:02:c5:43:00:
         29:b8:d5:c0:16:a0:cd:88:65:17:52:00:db:97:42:15:c3:aa:
         f8:ee:2c:da:61:7b:92:91:a7:a8:75:6d:dd:d0:ef:c1:ce:a7:
         6e:79:5a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:52 2024 by rpki-client on console-fra.rpki-client.org