Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/323830343a316231343a3a2f33322d3438203d3e203631373037.roa
File:                     323830343a316231343a3a2f33322d3438203d3e203631373037.roa (raw, json)
Hash identifier:          AAZzjnPpRe0tZ/nNgwcKipvp2fzsRTzHAwdcSCOmQv8=
Subject key identifier:   D4:88:E4:37:92:41:BD:8C:D6:FA:F3:C7:6A:10:37:65:A8:2C:84:91
Certificate issuer:       /CN=7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759
Certificate serial:       61693932CD69B7EE24F6E64C45A473FA524C77AB
Authority key identifier: 77:42:14:3B:D1:4B:1F:B2:C8:2A:2C:E2:FD:5A:FA:E2:8B:CC:87:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/323830343a316231343a3a2f33322d3438203d3e203631373037.roa
Signing time:             Fri 16 Aug 2024 16:24:21 +0000
ROA not before:           Fri 16 Aug 2024 16:19:21 +0000
ROA not after:            Fri 15 Aug 2025 16:24:21 +0000
asID:                     61707
IP address blocks:        2804:1b14::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.crl
                          rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:69:39:32:cd:69:b7:ee:24:f6:e6:4c:45:a4:73:fa:52:4c:77:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759
        Validity
            Not Before: Aug 16 16:19:21 2024 GMT
            Not After : Aug 15 16:24:21 2025 GMT
        Subject: CN=D488E4379241BD8CD6FAF3C76A103765A82C8491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:aa:0e:05:96:37:a4:64:68:9d:fe:82:a3:
                    00:2f:50:41:fc:4f:ff:aa:86:4a:1a:e7:5b:ea:18:
                    8a:63:4e:fc:79:e0:dc:74:17:bb:86:f0:69:8c:25:
                    41:fd:4b:c8:ec:c9:58:aa:dc:d8:30:1b:d9:63:72:
                    7d:e1:d9:80:f1:71:bc:b4:eb:a3:59:e3:8c:8c:6d:
                    7b:e9:38:16:2f:8d:89:49:ec:cf:bb:bb:d3:82:c9:
                    24:38:f5:cb:da:53:da:5d:3c:82:ac:12:83:c1:93:
                    a2:4f:ea:99:cb:b6:99:bc:8f:39:43:c2:15:0f:51:
                    85:d4:50:3d:26:9e:f1:5f:63:f1:31:75:f2:e8:00:
                    dd:c0:79:cc:35:ee:da:6a:0c:27:97:6f:e4:b3:43:
                    08:ed:b8:99:6d:d1:19:8c:bd:64:18:e5:31:7b:a3:
                    7c:8d:cd:9b:ea:74:db:1c:09:a7:81:3b:70:32:85:
                    2a:c4:27:d1:d8:e7:75:fb:3a:b7:2a:85:11:cc:fd:
                    0d:fe:7d:f3:2d:e3:13:7b:ab:ad:23:24:d3:2b:65:
                    80:1f:93:03:99:a9:44:23:a7:a1:51:89:0a:53:62:
                    1d:fa:90:5a:b9:e1:03:48:67:12:cc:e0:93:73:a5:
                    a0:a8:1f:a8:77:98:9f:9b:0d:6d:7c:66:91:b2:69:
                    c0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:88:E4:37:92:41:BD:8C:D6:FA:F3:C7:6A:10:37:65:A8:2C:84:91
            X509v3 Authority Key Identifier:
                keyid:77:42:14:3B:D1:4B:1F:B2:C8:2A:2C:E2:FD:5A:FA:E2:8B:CC:87:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/323830343a316231343a3a2f33322d3438203d3e203631373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b14::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:e7:53:fe:8b:45:07:da:bd:27:e4:80:95:d8:10:ff:30:80:
         27:d1:77:4f:16:21:3d:b0:4d:74:78:56:07:8a:eb:0a:59:dd:
         29:39:93:6e:45:cf:18:0f:4d:6d:cd:87:50:0f:0c:48:c5:96:
         b1:b7:d6:74:6e:c6:6e:7a:8e:63:f3:fd:0f:da:72:bc:fe:9b:
         c7:07:21:89:f5:f3:8a:07:33:45:16:47:4d:92:21:de:22:61:
         ab:af:52:d9:aa:92:ca:f7:e4:96:8f:d0:ec:41:13:26:c8:1a:
         13:f3:55:f9:d1:d8:dd:77:2b:6f:0b:f1:d1:ae:15:0f:d0:38:
         91:0f:70:2d:ec:ec:d7:83:0a:64:88:a6:26:14:62:90:ca:11:
         72:e1:b8:6d:74:4e:71:77:c1:94:c6:2d:38:b6:16:63:40:a8:
         27:19:fe:47:dd:af:6f:0b:9c:06:fc:52:59:c3:7e:b4:83:75:
         52:a9:1c:91:34:01:5f:a4:d4:79:89:58:02:b8:82:e3:75:ba:
         60:50:53:59:26:a7:c3:84:8c:58:52:df:0e:89:49:ff:49:9d:
         66:82:82:ed:1d:eb:7b:8f:9e:75:3f:01:74:78:b6:71:c9:02:
         98:4f:96:38:9a:29:91:90:84:c8:6b:44:d9:4c:76:14:98:2b:
         7e:73:21:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:19 2024 by rpki-client on console-ams.rpki-client.org