Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/323830343a363531343a3a2f33322d313238203d3e20323639343637.roa
File:                     323830343a363531343a3a2f33322d313238203d3e20323639343637.roa (raw, json)
Hash identifier:          uCb2LzEONL7pMAFRxDrUi6bRoixvjZfQDG3ykP0ZqmI=
Subject key identifier:   E5:E1:7A:5D:C9:15:2F:30:D9:90:7A:59:8B:11:D9:64:67:04:06:23
Certificate issuer:       /CN=04AD1F05D68B9B203EF5342540FC9B754E8F2B50
Certificate serial:       2032440EA009D92FBDB478970F6BD392800E0863
Authority key identifier: 04:AD:1F:05:D6:8B:9B:20:3E:F5:34:25:40:FC:9B:75:4E:8F:2B:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/323830343a363531343a3a2f33322d313238203d3e20323639343637.roa
Signing time:             Fri 19 Jul 2024 13:20:33 +0000
ROA not before:           Fri 19 Jul 2024 13:15:33 +0000
ROA not after:            Fri 18 Jul 2025 13:20:33 +0000
asID:                     269467
IP address blocks:        2804:6514::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.crl
                          rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:32:44:0e:a0:09:d9:2f:bd:b4:78:97:0f:6b:d3:92:80:0e:08:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04AD1F05D68B9B203EF5342540FC9B754E8F2B50
        Validity
            Not Before: Jul 19 13:15:33 2024 GMT
            Not After : Jul 18 13:20:33 2025 GMT
        Subject: CN=E5E17A5DC9152F30D9907A598B11D96467040623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:51:cc:56:7f:96:7d:74:fc:18:47:4d:c8:2f:
                    38:ca:f4:3f:20:b2:c5:7e:e4:95:5f:f5:81:ac:92:
                    ef:34:82:44:f6:fc:cd:26:41:11:d4:c9:d4:6d:6e:
                    1c:fa:ec:a6:5e:a4:30:59:04:ed:00:f4:78:b3:e4:
                    56:67:4f:09:3f:6d:71:1c:fb:62:86:65:f8:6d:dd:
                    84:68:3f:86:fc:c3:1f:e7:8c:67:39:4e:73:17:ba:
                    8b:28:fa:b2:4d:29:eb:57:b1:26:65:67:fe:71:f9:
                    60:ca:5c:5b:8e:1e:d2:a1:eb:a6:2a:d0:27:a5:e5:
                    26:9f:25:a7:86:22:c4:64:de:f3:84:ef:78:43:d0:
                    e4:34:13:29:e5:5f:86:82:30:6e:26:49:e9:e9:73:
                    94:c1:f1:51:b1:fb:33:03:bc:95:02:d5:e6:da:88:
                    d7:3f:b5:40:d3:9c:2f:17:67:a4:c6:93:f7:40:da:
                    bb:16:a0:9b:e2:94:a6:4b:69:43:f2:99:52:01:16:
                    17:f3:9a:73:40:03:40:a5:e6:59:71:ce:d2:07:a3:
                    5f:b3:b9:16:a4:e5:c2:a9:92:4a:e8:e4:b7:58:40:
                    3a:23:df:b1:06:22:67:f7:5e:c9:54:ea:27:e5:4a:
                    78:37:41:c2:ff:fe:53:25:a2:d1:c7:eb:eb:69:8d:
                    7c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E1:7A:5D:C9:15:2F:30:D9:90:7A:59:8B:11:D9:64:67:04:06:23
            X509v3 Authority Key Identifier:
                keyid:04:AD:1F:05:D6:8B:9B:20:3E:F5:34:25:40:FC:9B:75:4E:8F:2B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/323830343a363531343a3a2f33322d313238203d3e20323639343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6514::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:7d:66:0c:ac:62:f8:70:d8:2b:2d:92:67:ce:68:80:d4:f8:
         47:a3:96:32:86:4b:20:04:99:84:57:e1:a5:30:6d:8d:4c:f6:
         07:29:50:ef:74:ed:5b:c8:6d:67:35:8b:ee:93:28:75:81:91:
         1a:24:38:05:0e:3e:ce:e3:01:bf:c5:aa:8d:43:19:64:1e:30:
         74:4d:a1:97:c8:25:9c:54:43:86:ff:68:b5:87:d8:dd:78:5b:
         aa:44:0d:3c:ee:16:91:ab:9d:25:71:2d:8a:dd:b2:eb:97:e1:
         6c:04:db:bf:56:e4:18:39:2a:41:4e:d7:20:1d:c9:88:3c:dc:
         b2:0c:67:92:ab:45:69:ff:29:58:b4:08:a9:4c:ae:da:28:7d:
         88:d7:fe:7e:05:4c:3f:25:e7:09:67:1e:09:a3:74:a3:b7:76:
         63:35:e2:6f:eb:e3:e1:42:45:f4:8f:c9:07:11:27:84:10:f2:
         ce:1b:60:86:e9:a2:a3:31:ee:59:d4:c9:20:ff:08:c6:01:2c:
         80:8b:4d:12:25:53:ce:9b:fd:b3:c9:2a:6f:1c:3e:50:16:47:
         ac:fe:00:5c:d4:e1:d2:1d:2d:7c:c7:0a:8f:03:7f:ce:47:65:
         49:e5:e7:4e:23:95:63:86:5e:dd:e8:2e:d5:c7:52:eb:bf:06:
         24:66:63:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:39 2024 by rpki-client on console-fra.rpki-client.org