Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/1/323830343a316565633a3a2f33322d3336203d3e20323634343535.roa
File:                     323830343a316565633a3a2f33322d3336203d3e20323634343535.roa (raw, json)
Hash identifier:          +alki7WZoGEmQn2tzhIC7ux+pGHB447pgXoQLNB0Qx0=
Subject key identifier:   C4:55:FD:24:E9:BB:92:94:F6:03:BC:29:16:1C:AB:F6:7E:3A:56:2B
Certificate issuer:       /CN=6978D60B1B16174093F2F0F0E30A137CA94DE3A4
Certificate serial:       34CC39EAC566AF7AD1AE839AB4B2BD26299688AA
Authority key identifier: 69:78:D6:0B:1B:16:17:40:93:F2:F0:F0:E3:0A:13:7C:A9:4D:E3:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6978D60B1B16174093F2F0F0E30A137CA94DE3A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/1/323830343a316565633a3a2f33322d3336203d3e20323634343535.roa
Signing time:             Thu 04 Apr 2024 10:47:31 +0000
ROA not before:           Thu 04 Apr 2024 10:42:31 +0000
ROA not after:            Thu 03 Apr 2025 10:47:31 +0000
asID:                     264455
IP address blocks:        2804:1eec::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/1/6978D60B1B16174093F2F0F0E30A137CA94DE3A4.crl
                          rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/1/6978D60B1B16174093F2F0F0E30A137CA94DE3A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6978D60B1B16174093F2F0F0E30A137CA94DE3A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:cc:39:ea:c5:66:af:7a:d1:ae:83:9a:b4:b2:bd:26:29:96:88:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6978D60B1B16174093F2F0F0E30A137CA94DE3A4
        Validity
            Not Before: Apr  4 10:42:31 2024 GMT
            Not After : Apr  3 10:47:31 2025 GMT
        Subject: CN=C455FD24E9BB9294F603BC29161CABF67E3A562B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fd:10:1c:53:6e:26:4d:c2:29:44:39:80:68:
                    6f:d8:a5:6f:a4:2e:a0:21:7c:27:83:ac:68:bc:64:
                    6e:fe:24:e3:91:8d:8a:9a:ed:b8:88:f4:1c:ce:ad:
                    af:9f:e1:9a:e1:34:17:d3:9c:91:c2:14:45:b2:46:
                    d5:4e:3c:0e:68:34:10:0c:ca:24:e8:d3:dd:38:e5:
                    ab:2c:b1:ad:d0:a3:cb:30:bf:97:31:89:ec:35:e5:
                    a9:66:16:60:ba:7c:f6:5c:98:3f:10:ec:1d:fc:73:
                    1e:88:ac:08:2b:79:b3:36:28:4c:7e:eb:74:0b:d0:
                    99:c5:79:75:01:6f:5e:54:62:ad:76:41:fe:ee:72:
                    4a:66:83:e4:ec:e8:4a:47:5b:42:7a:3c:17:9b:e3:
                    51:27:f9:50:d5:f7:f2:ba:21:9c:c0:f9:c1:3a:d3:
                    b2:48:15:ad:13:17:96:1e:49:ee:2e:c1:59:af:74:
                    d0:bd:7e:a0:0b:ca:a6:7d:ea:bb:87:e3:e5:99:2e:
                    93:e1:de:35:7e:d2:07:41:ce:c9:83:64:16:25:6f:
                    dc:53:82:c8:8d:3a:3a:dc:53:4d:b7:0f:8b:69:e5:
                    0d:63:bf:f7:73:06:b5:cc:e5:94:bd:6e:c3:da:b9:
                    67:02:33:de:19:60:72:13:c4:84:5e:0d:8a:f2:64:
                    c3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:55:FD:24:E9:BB:92:94:F6:03:BC:29:16:1C:AB:F6:7E:3A:56:2B
            X509v3 Authority Key Identifier:
                keyid:69:78:D6:0B:1B:16:17:40:93:F2:F0:F0:E3:0A:13:7C:A9:4D:E3:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/1/6978D60B1B16174093F2F0F0E30A137CA94DE3A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6978D60B1B16174093F2F0F0E30A137CA94DE3A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/1/323830343a316565633a3a2f33322d3336203d3e20323634343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1eec::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:e7:bd:15:74:ad:a0:10:4b:ed:15:03:b3:4d:2d:16:a9:6e:
         85:1b:92:a3:8c:62:e0:fe:a9:fc:e5:44:1c:c8:06:34:44:6d:
         69:20:32:03:a2:8c:95:d9:84:ca:e0:15:b7:7f:b1:3a:99:b1:
         f0:cf:ef:93:14:d3:06:fa:75:19:5a:e5:1c:b5:9c:9f:38:1d:
         8f:f7:7b:a6:ec:c8:ca:89:14:c7:d2:aa:77:f1:b4:2d:0a:eb:
         d3:ad:26:bf:21:43:20:57:25:32:c2:08:30:e2:bc:44:e5:f3:
         95:06:d5:76:e0:e0:48:d6:3d:52:2c:0e:04:04:25:87:35:d3:
         8a:cd:c0:c0:9f:98:c8:4c:e8:80:2e:ee:c8:18:cd:0e:41:98:
         8e:6f:f6:6c:90:69:50:a7:f9:39:dd:85:10:62:71:00:cd:8f:
         31:30:3b:5f:ba:01:b5:15:be:31:66:58:2b:95:53:6a:79:49:
         a1:b3:2f:ea:6c:61:91:f7:7d:46:4a:0f:e2:95:1e:18:3a:ca:
         b9:3c:ca:7e:f9:b3:4a:e2:f2:be:f3:01:fc:b1:59:89:0f:7c:
         79:61:a0:30:4c:3e:41:12:9f:f5:b6:0d:9e:33:ff:4b:bf:7d:
         a2:20:fc:ed:8b:26:2f:ac:ec:ce:f7:93:cf:f5:ff:04:4b:c4:
         fa:c5:cd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:01 2024 by rpki-client on console-ams.rpki-client.org