Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/323830343a373533343a3a2f33322d3332203d3e20323731303331.roa
File:                     323830343a373533343a3a2f33322d3332203d3e20323731303331.roa (raw, json)
Hash identifier:          ClaFTqtpS5AzS5yJk2VtGizCMRkM8tMtm4OCHhppxHo=
Subject key identifier:   48:79:33:95:BB:05:96:19:2D:4D:95:32:75:01:51:D3:D5:7F:85:46
Certificate issuer:       /CN=E116A9492035CFBB15FA99D51C520F4FAD579530
Certificate serial:       4B85549BDA139805B4739B4B4614493A18A9C47F
Authority key identifier: E1:16:A9:49:20:35:CF:BB:15:FA:99:D5:1C:52:0F:4F:AD:57:95:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E116A9492035CFBB15FA99D51C520F4FAD579530.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/323830343a373533343a3a2f33322d3332203d3e20323731303331.roa
Signing time:             Wed 03 Apr 2024 20:04:32 +0000
ROA not before:           Wed 03 Apr 2024 19:59:32 +0000
ROA not after:            Wed 02 Apr 2025 20:04:32 +0000
asID:                     271031
IP address blocks:        2804:7534::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/E116A9492035CFBB15FA99D51C520F4FAD579530.crl
                          rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/E116A9492035CFBB15FA99D51C520F4FAD579530.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E116A9492035CFBB15FA99D51C520F4FAD579530.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:85:54:9b:da:13:98:05:b4:73:9b:4b:46:14:49:3a:18:a9:c4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E116A9492035CFBB15FA99D51C520F4FAD579530
        Validity
            Not Before: Apr  3 19:59:32 2024 GMT
            Not After : Apr  2 20:04:32 2025 GMT
        Subject: CN=48793395BB0596192D4D9532750151D3D57F8546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:13:a9:80:d0:e5:cc:c4:95:f0:b5:36:c8:7a:
                    70:0e:1b:cb:a1:b9:49:cf:22:02:c0:ab:91:2a:10:
                    8e:07:02:be:46:c5:44:df:b7:28:65:c5:a2:4c:c1:
                    d6:00:f8:ce:fe:c0:ae:1d:9f:31:ff:26:53:14:a8:
                    fb:38:03:83:bc:af:c4:55:9c:b5:49:ec:79:3a:8f:
                    35:e5:cd:de:20:43:6f:1c:1e:34:65:7f:76:a9:36:
                    d9:5c:30:9d:c6:5f:da:ff:8e:b3:4c:c8:43:7b:00:
                    5c:d8:62:3b:66:f8:2b:ee:62:1d:f6:07:3a:7f:87:
                    c5:84:49:7d:ae:ff:3e:ec:9b:c4:ab:03:b0:f1:62:
                    1c:af:44:c8:67:68:b0:30:e0:a5:5f:14:dc:77:84:
                    00:99:6c:2b:d6:60:61:f0:d9:fd:ae:19:5c:9b:87:
                    ad:0d:11:d9:93:b2:3a:fa:24:4e:55:9d:f1:a7:3f:
                    3f:7d:c4:2b:97:f7:10:d3:f8:43:c5:7f:b2:cb:e8:
                    83:45:e3:a6:9d:32:ce:09:0e:31:9e:8a:62:9b:74:
                    f5:fe:b0:ac:12:9a:1e:a6:3d:56:97:dc:5d:8a:13:
                    c4:e6:a9:53:52:b0:a5:eb:68:33:6c:92:0e:0c:bd:
                    50:81:75:62:37:1b:90:93:a0:2a:05:b8:ba:8b:dc:
                    2a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:79:33:95:BB:05:96:19:2D:4D:95:32:75:01:51:D3:D5:7F:85:46
            X509v3 Authority Key Identifier:
                keyid:E1:16:A9:49:20:35:CF:BB:15:FA:99:D5:1C:52:0F:4F:AD:57:95:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/E116A9492035CFBB15FA99D51C520F4FAD579530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E116A9492035CFBB15FA99D51C520F4FAD579530.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/323830343a373533343a3a2f33322d3332203d3e20323731303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7534::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:e5:04:ce:47:5f:4a:1a:67:29:26:2a:46:86:ac:d2:c7:b3:
         2b:11:1e:12:6a:0e:66:14:c8:11:fe:21:0f:46:4e:33:da:63:
         f8:a3:6d:65:c0:e1:ee:8f:29:b9:93:97:06:10:41:87:7b:6f:
         2b:ab:9f:9c:70:4b:60:a1:57:96:50:3a:6c:f9:09:3f:2b:b1:
         5c:c7:0b:4a:86:9b:80:6b:ff:8c:7d:dd:cf:18:0e:fd:19:13:
         45:2b:3b:0b:34:be:e9:2f:01:59:5d:a7:67:ff:34:01:77:f1:
         14:a0:3f:e3:3e:84:ae:8a:c0:fc:90:e0:4e:59:a6:68:09:a5:
         fe:30:5a:29:93:35:cb:09:be:e1:ae:11:c1:8e:59:69:69:15:
         fb:fb:7e:02:c4:4f:a0:2b:c4:22:9b:31:30:28:f2:89:02:c8:
         6a:dd:64:73:60:fd:f4:ad:bf:19:3a:c9:16:1f:a1:6d:b2:d7:
         d1:e1:fe:bf:4f:73:5f:2a:86:ca:2d:c5:1e:55:cd:74:fe:63:
         72:3f:0b:05:a3:01:7a:c4:b4:37:2c:a2:b0:b1:35:1f:f5:e5:
         d5:c6:42:8b:cd:f5:c9:00:85:7b:90:00:c9:b6:7c:91:45:82:
         07:92:d5:7b:af:c9:b7:41:72:b1:23:5c:52:2a:31:76:be:95:
         00:12:94:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:07 2024 by rpki-client on console-fra.rpki-client.org