Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/323830343a333534633a383630303a3a2f34302d3430203d3e203533303138.roa
File:                     323830343a333534633a383630303a3a2f34302d3430203d3e203533303138.roa (raw, json)
Hash identifier:          ejV7J6ZtRA+r0HFIt+OnlGxZZPVwObkzfn6waZmB/tI=
Subject key identifier:   48:D0:CB:D3:2A:26:7E:A3:04:02:0F:02:E0:9A:37:2C:40:19:10:75
Certificate issuer:       /CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
Certificate serial:       14F3933C9A0E61B6FD52570FFB7FD671E1B1EE1D
Authority key identifier: A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/323830343a333534633a383630303a3a2f34302d3430203d3e203533303138.roa
Signing time:             Thu 04 Apr 2024 14:11:54 +0000
ROA not before:           Thu 04 Apr 2024 14:06:54 +0000
ROA not after:            Thu 03 Apr 2025 14:11:54 +0000
asID:                     53018
IP address blocks:        2804:354c:8600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:33:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:f3:93:3c:9a:0e:61:b6:fd:52:57:0f:fb:7f:d6:71:e1:b1:ee:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
        Validity
            Not Before: Apr  4 14:06:54 2024 GMT
            Not After : Apr  3 14:11:54 2025 GMT
        Subject: CN=48D0CBD32A267EA304020F02E09A372C40191075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:de:c7:ac:67:51:64:0b:b8:6f:ce:0e:22:ac:
                    2a:67:8d:6d:cb:0e:cf:3d:8b:62:16:e2:18:4c:6f:
                    6b:00:93:e3:86:a0:96:6d:7b:ec:27:0d:6c:7c:40:
                    6a:b8:66:0e:34:ad:03:a1:f7:1d:5a:1a:7f:89:eb:
                    2e:cc:b3:3a:6a:ae:a6:47:45:a2:cc:bd:86:d0:4c:
                    1b:d0:03:50:f5:9c:70:20:c0:b5:da:48:03:14:02:
                    2d:22:fe:d5:41:94:1c:7b:0c:a3:88:ee:f0:25:1c:
                    2e:24:fa:3c:14:f1:22:ba:70:be:52:52:ba:5a:80:
                    e7:0e:02:e6:6d:fb:d9:31:c0:bf:72:34:61:74:79:
                    95:5f:58:81:53:e8:66:a1:03:d3:60:0e:4b:26:6d:
                    f1:e1:83:95:28:ac:8f:d6:79:3e:71:63:d8:02:83:
                    0b:88:7f:94:a6:5b:40:fe:06:5e:50:46:29:2a:1a:
                    f5:b5:37:31:80:9c:cf:5e:09:cc:d5:2f:84:6f:45:
                    49:9f:f9:b9:be:fa:47:ce:48:44:f4:f9:c7:1f:00:
                    a5:6a:6f:92:be:c3:0f:83:f9:b8:fc:4a:7e:89:d1:
                    6d:16:0f:51:9a:9c:8a:76:b7:41:63:48:c2:43:1f:
                    ad:52:ea:d8:f6:df:84:60:04:bb:74:58:57:74:ca:
                    1d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D0:CB:D3:2A:26:7E:A3:04:02:0F:02:E0:9A:37:2C:40:19:10:75
            X509v3 Authority Key Identifier:
                keyid:A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/323830343a333534633a383630303a3a2f34302d3430203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:354c:8600::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:51:ec:7e:2a:c5:b3:43:4c:80:2c:24:8b:52:a1:91:40:9b:
         78:ef:01:d2:c7:bd:74:cd:5b:9d:b2:db:be:e4:97:e1:f9:3b:
         e5:3a:a0:f2:f5:f6:c4:e6:9c:db:85:89:c9:ab:92:2a:0b:bb:
         69:77:4b:17:d3:e1:e7:cd:b7:69:68:ee:87:5c:81:be:a7:c5:
         2b:5d:bf:3f:af:bb:98:32:e3:d0:2e:33:e8:83:ad:81:26:a8:
         5e:70:bc:bd:ff:47:7f:29:31:cb:c5:d9:26:6a:2a:25:30:c2:
         07:15:e6:d7:52:fc:ab:0b:b7:d1:f6:e0:23:5c:76:ee:36:48:
         c9:fc:7f:ae:03:e2:bb:98:5d:27:ec:04:e9:3a:18:bc:8b:26:
         90:0d:dd:29:80:52:ec:f8:cb:65:88:23:03:bc:fa:6d:36:c3:
         ee:da:9a:2e:15:f8:b0:81:5d:30:6b:72:0d:4c:f3:b2:a0:04:
         ab:ec:40:94:b9:80:b8:39:ed:10:86:ec:ab:37:90:e3:0e:ab:
         65:98:98:08:c9:cd:58:75:2d:e3:dc:2d:97:f5:3c:4b:ac:09:
         23:15:0e:7a:5e:d2:72:72:c9:52:22:8f:aa:2a:d7:02:1f:33:
         64:02:78:3e:f3:cf:78:e0:22:ce:0f:6a:92:00:52:89:42:3d:
         bc:24:16:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:58 2024 by rpki-client on console-ams.rpki-client.org