Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/323830343a333534633a3a2f33322d3335203d3e203533303138.roa
File:                     323830343a333534633a3a2f33322d3335203d3e203533303138.roa (raw, json)
Hash identifier:          Hmz2+VGXfWm6vLGLIbiAcdQuhYtv8AVlByK3zeVMy1Q=
Subject key identifier:   77:DD:B2:04:11:B0:3B:A9:62:89:09:2C:74:B2:07:E8:98:D9:C5:C0
Certificate issuer:       /CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
Certificate serial:       57C74646B503EF859AE64E7C17EE28E6068EA762
Authority key identifier: A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/323830343a333534633a3a2f33322d3335203d3e203533303138.roa
Signing time:             Thu 04 Apr 2024 14:11:55 +0000
ROA not before:           Thu 04 Apr 2024 14:06:55 +0000
ROA not after:            Thu 03 Apr 2025 14:11:55 +0000
asID:                     53018
IP address blocks:        2804:354c::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:33:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c7:46:46:b5:03:ef:85:9a:e6:4e:7c:17:ee:28:e6:06:8e:a7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
        Validity
            Not Before: Apr  4 14:06:55 2024 GMT
            Not After : Apr  3 14:11:55 2025 GMT
        Subject: CN=77DDB20411B03BA96289092C74B207E898D9C5C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:f6:7f:28:d1:12:1c:14:4c:b1:af:a5:fd:
                    8b:7a:3d:12:72:d6:9c:86:ab:6a:8a:a9:24:21:6e:
                    56:cf:03:5f:ed:83:db:05:ec:2e:01:98:67:c4:c0:
                    2c:ff:4b:d6:a1:fc:f5:ed:4c:7c:66:1c:ee:12:57:
                    0a:5c:ee:f9:3b:fd:d9:5b:f3:bf:45:80:80:00:00:
                    d1:be:41:74:f6:03:63:95:00:52:3d:4d:b4:ba:7d:
                    05:1c:dc:cf:a1:35:f9:0d:d7:4b:88:34:73:5b:3a:
                    99:9d:26:c2:1d:5b:b0:d2:ed:3f:02:34:b7:23:2b:
                    8c:2b:18:82:c9:3e:70:5f:c9:12:b3:33:cc:bb:cf:
                    76:03:8c:a6:7c:4c:26:26:f8:91:04:22:f8:d0:bf:
                    e4:9f:0b:23:70:9d:8c:7a:14:ff:80:a4:51:fc:05:
                    ba:bf:43:fd:10:a1:dc:ca:6f:69:48:c2:dc:11:09:
                    9d:c6:d5:63:a6:68:8a:76:85:89:95:39:9c:b3:26:
                    10:35:d3:b7:0b:20:62:d3:0d:ee:c7:82:0d:26:e5:
                    5d:8b:02:1e:73:b8:44:3a:bc:46:eb:69:9b:b3:4d:
                    2d:4d:cb:f8:fe:fe:0a:9a:c7:bc:53:9d:c2:ed:78:
                    2b:61:ba:0b:7c:b7:b9:71:8d:63:ec:0e:04:ab:fb:
                    f0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DD:B2:04:11:B0:3B:A9:62:89:09:2C:74:B2:07:E8:98:D9:C5:C0
            X509v3 Authority Key Identifier:
                keyid:A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/323830343a333534633a3a2f33322d3335203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:354c::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:b2:00:ce:10:f9:57:75:dd:c9:a5:0a:aa:9f:08:73:92:7a:
         e0:59:10:f1:32:17:84:55:3d:cf:83:5c:52:c7:60:fb:28:8e:
         f4:66:25:52:a1:1d:96:58:5c:e8:b1:bc:a8:df:38:e6:7c:91:
         ed:6c:8e:e8:4b:18:39:a7:40:47:a4:20:81:aa:df:fc:e9:00:
         c9:a8:08:73:8d:e3:e3:02:ab:00:66:65:73:03:bf:39:51:f3:
         e0:5e:40:5b:7f:b6:60:11:53:8b:ec:6d:19:82:bb:81:bd:ea:
         4f:c3:19:6c:89:1f:79:35:d1:2f:f7:b8:f7:1a:92:83:78:0c:
         96:d5:e3:7f:ac:3b:ed:4d:31:5d:fa:52:08:8f:f0:bf:db:1b:
         2c:7a:e1:ee:f8:47:a6:97:bc:f0:e6:09:ad:dc:0a:b2:67:da:
         00:a4:d2:89:eb:85:b8:19:09:c2:9f:8a:56:52:50:ee:8b:c7:
         1a:b7:c8:12:c6:19:6f:bc:3d:79:85:ec:80:f6:dc:17:92:14:
         4f:73:cd:3d:3b:da:72:9f:a1:2f:35:91:4a:db:f2:d7:2d:9c:
         12:1b:1e:e3:e2:87:35:da:73:42:f4:63:a4:93:15:49:26:ce:
         47:62:46:bb:a2:84:6f:9d:0b:02:84:a4:0b:00:2c:61:3f:bc:
         64:b0:92:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:38 2024 by rpki-client on console-fra.rpki-client.org