Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/323830343a376434633a3a2f33322d3438203d3e20323731353532.roa
File:                     323830343a376434633a3a2f33322d3438203d3e20323731353532.roa (raw, json)
Hash identifier:          sBhzL7YdRrbmpEtoMD/Z44F9diRT5F5A/F7Gyt8V5FA=
Subject key identifier:   C5:FD:4E:40:EE:C3:6A:5C:FB:03:CB:4E:FC:3E:24:89:B3:C8:F3:0A
Certificate issuer:       /CN=4333D3D2A76F86E2359EBAC6DFD3C5330E31B5A1
Certificate serial:       0112FB9A00F6D23B4D651E5CC263BA094CA4C6DC
Authority key identifier: 43:33:D3:D2:A7:6F:86:E2:35:9E:BA:C6:DF:D3:C5:33:0E:31:B5:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4333D3D2A76F86E2359EBAC6DFD3C5330E31B5A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/323830343a376434633a3a2f33322d3438203d3e20323731353532.roa
Signing time:             Wed 06 Nov 2024 18:27:32 +0000
ROA not before:           Wed 06 Nov 2024 18:22:32 +0000
ROA not after:            Wed 05 Nov 2025 18:27:32 +0000
asID:                     271552
IP address blocks:        2804:7d4c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/4333D3D2A76F86E2359EBAC6DFD3C5330E31B5A1.crl
                          rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/4333D3D2A76F86E2359EBAC6DFD3C5330E31B5A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4333D3D2A76F86E2359EBAC6DFD3C5330E31B5A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:12:fb:9a:00:f6:d2:3b:4d:65:1e:5c:c2:63:ba:09:4c:a4:c6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4333D3D2A76F86E2359EBAC6DFD3C5330E31B5A1
        Validity
            Not Before: Nov  6 18:22:32 2024 GMT
            Not After : Nov  5 18:27:32 2025 GMT
        Subject: CN=C5FD4E40EEC36A5CFB03CB4EFC3E2489B3C8F30A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:04:bd:9e:fa:8c:2c:41:96:b1:4c:f9:59:64:
                    d0:d0:f0:d5:a7:51:e4:63:67:1b:62:d2:c2:95:37:
                    22:bf:a9:08:45:7f:0e:09:a0:cf:b7:e0:67:42:7a:
                    70:82:80:7d:36:02:38:01:51:be:49:1b:19:35:de:
                    ad:1a:ac:0a:cf:f9:b3:95:ec:ac:e9:b2:5b:01:28:
                    69:ca:d6:a0:aa:e3:29:b0:88:20:b6:e5:4a:3d:90:
                    80:41:c6:f1:2b:2e:eb:b0:32:54:34:ee:b3:11:21:
                    0e:ea:4a:2e:69:bd:09:e9:47:6b:36:84:57:be:58:
                    a5:e2:cf:11:0d:15:7b:49:df:16:cf:b5:7e:2a:28:
                    cc:aa:25:f2:66:05:85:d0:3a:51:0a:8b:24:ce:84:
                    6d:43:33:74:1c:41:46:57:08:56:87:cd:ae:47:1c:
                    dc:d0:cf:08:ce:9f:5f:32:08:8a:b0:a3:4d:69:d0:
                    78:5d:52:dc:3e:bf:81:be:15:3c:8d:b3:fd:60:bf:
                    a0:fd:15:2e:61:95:08:f7:c9:ec:da:af:28:5a:db:
                    2f:f2:ca:14:ef:a0:c7:21:54:0a:09:0c:8c:56:89:
                    81:ca:a2:0e:e2:8a:87:5e:0d:1d:17:75:35:3e:6d:
                    2e:ca:f2:c3:34:ba:08:68:b9:98:a1:bc:5d:26:1b:
                    c2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FD:4E:40:EE:C3:6A:5C:FB:03:CB:4E:FC:3E:24:89:B3:C8:F3:0A
            X509v3 Authority Key Identifier:
                keyid:43:33:D3:D2:A7:6F:86:E2:35:9E:BA:C6:DF:D3:C5:33:0E:31:B5:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/4333D3D2A76F86E2359EBAC6DFD3C5330E31B5A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4333D3D2A76F86E2359EBAC6DFD3C5330E31B5A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/323830343a376434633a3a2f33322d3438203d3e20323731353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:28:6d:79:b5:f9:33:31:5e:9a:0b:2a:6f:3d:45:a5:c8:fc:
         8f:2f:a8:0a:36:c8:b3:73:76:e3:d5:c1:69:52:f3:58:75:93:
         7d:55:c1:d1:ff:79:52:68:6d:55:47:7b:fa:93:12:43:31:00:
         c9:a9:db:ca:76:f5:59:dc:f8:f7:50:a6:48:d8:0a:5c:d9:f0:
         08:57:0e:b0:ee:76:97:78:78:11:37:1f:2a:a3:d3:59:a4:dd:
         9b:f9:98:e7:87:60:4d:0e:f3:8d:9c:cb:b6:e9:51:a5:f1:cc:
         61:cf:af:90:99:4f:9c:3e:e4:0b:be:ec:f5:0a:d2:5e:c0:bb:
         81:e9:23:24:f7:32:26:ec:0b:a7:97:3f:57:34:40:9d:4d:da:
         ea:a2:65:35:87:52:c6:cc:50:4f:b1:4d:b5:14:d6:44:a6:51:
         bc:8f:2b:04:3d:6d:48:e8:e0:2a:ae:1d:79:bd:0a:98:52:80:
         1d:59:c4:a5:ab:69:34:e2:7d:ab:f1:3d:de:ea:74:1f:83:8f:
         e2:1e:5e:4c:48:57:1f:f9:48:17:53:65:5d:9a:50:45:a8:b9:
         fb:41:1b:bd:ce:f2:33:da:23:ae:8e:bc:32:c8:6a:ad:59:e3:
         82:33:1d:ff:f7:20:e2:0a:a3:a6:fd:4a:48:cf:53:71:79:c1:
         5f:7b:f7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:20 2024 by rpki-client on console-fra.rpki-client.org