Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/323830343a383030383a3a2f33322d3438203d3e20323731373235.roa
File:                     323830343a383030383a3a2f33322d3438203d3e20323731373235.roa (raw, json)
Hash identifier:          e76JcbJdzkPY920A1fp9VPOds8kuDW6t/XXEhtVDbkU=
Subject key identifier:   94:71:B9:EC:58:85:9D:67:14:47:43:A7:4C:59:84:A4:D8:5A:44:3E
Certificate issuer:       /CN=254C729A5155256E1BAF89E48E06C4EBA96761EA
Certificate serial:       646200C751A6714AC2218BF5E25B9A7045CED54D
Authority key identifier: 25:4C:72:9A:51:55:25:6E:1B:AF:89:E4:8E:06:C4:EB:A9:67:61:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/254C729A5155256E1BAF89E48E06C4EBA96761EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/323830343a383030383a3a2f33322d3438203d3e20323731373235.roa
Signing time:             Fri 26 Apr 2024 13:28:10 +0000
ROA not before:           Fri 26 Apr 2024 13:23:10 +0000
ROA not after:            Fri 25 Apr 2025 13:28:10 +0000
asID:                     271725
IP address blocks:        2804:8008::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.crl
                          rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/254C729A5155256E1BAF89E48E06C4EBA96761EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:62:00:c7:51:a6:71:4a:c2:21:8b:f5:e2:5b:9a:70:45:ce:d5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=254C729A5155256E1BAF89E48E06C4EBA96761EA
        Validity
            Not Before: Apr 26 13:23:10 2024 GMT
            Not After : Apr 25 13:28:10 2025 GMT
        Subject: CN=9471B9EC58859D67144743A74C5984A4D85A443E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1f:0b:fe:be:d0:3e:07:36:99:23:cf:ab:73:
                    55:7d:eb:bd:99:ca:31:b7:b7:21:9d:d3:b7:eb:7e:
                    69:fc:15:5a:f7:6f:72:dd:fe:72:8b:9d:e0:63:f6:
                    b5:97:f5:f1:4e:eb:7a:be:2e:b6:99:64:75:7f:d4:
                    d2:20:d7:ac:cf:21:ec:6d:74:35:46:bb:92:32:66:
                    bd:f5:ee:a7:35:41:2d:9d:b2:1d:7a:77:9c:cc:bb:
                    16:f5:2e:90:c3:c6:be:ea:bf:4b:6a:3e:43:c5:60:
                    a7:a6:9c:77:04:57:c5:92:e8:ac:5c:cf:74:62:1e:
                    da:d6:68:74:cb:12:1c:98:d0:32:31:f8:4b:7a:9f:
                    e0:6a:28:75:ef:2d:01:c5:1a:b8:89:69:89:d8:b1:
                    a3:d0:20:b7:67:38:cb:3e:1a:36:20:a9:38:23:e3:
                    ec:5e:09:e2:ea:98:e1:22:d0:66:9c:58:c9:1a:e6:
                    de:4a:8c:27:37:5d:be:d7:b5:a8:23:4a:1e:07:a0:
                    5f:b4:e4:13:f7:55:67:f9:7a:40:71:dc:33:b2:26:
                    18:c0:17:6d:42:90:c7:15:74:52:f8:3c:db:ab:40:
                    b9:c6:90:39:07:c3:73:4d:2d:5e:3c:b0:f3:20:2b:
                    72:ab:52:b9:9f:cc:bc:d2:6a:54:8e:73:dc:4f:39:
                    2e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:71:B9:EC:58:85:9D:67:14:47:43:A7:4C:59:84:A4:D8:5A:44:3E
            X509v3 Authority Key Identifier:
                keyid:25:4C:72:9A:51:55:25:6E:1B:AF:89:E4:8E:06:C4:EB:A9:67:61:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/254C729A5155256E1BAF89E48E06C4EBA96761EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/323830343a383030383a3a2f33322d3438203d3e20323731373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8008::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:92:6a:39:72:9b:49:55:3a:8b:53:23:e7:1b:51:76:f2:d3:
         6a:97:8d:39:2a:58:ff:c0:07:8b:81:3e:bc:7d:6e:d7:02:80:
         69:33:ad:c0:cd:ab:c9:8f:5e:7c:66:14:4e:e4:d0:e3:39:ee:
         db:77:3f:22:e7:b7:be:df:f2:87:fe:ce:7b:41:9c:4e:c1:0d:
         15:f0:c9:43:f1:9a:b5:25:e0:e6:ae:97:48:6b:7e:08:bb:a6:
         92:b4:7b:51:c4:62:a3:93:2f:b5:8f:6b:ea:a6:fa:64:7e:5d:
         bc:eb:70:16:29:b3:c8:8f:4f:0a:10:63:c3:1d:a2:d4:59:74:
         4a:44:64:0b:33:97:0b:c6:8d:26:0c:fe:0a:15:d1:dd:5e:75:
         a8:06:96:c0:13:f4:72:05:ef:5c:5d:0e:a0:4c:1b:d0:fd:b3:
         fa:56:86:bd:2e:35:30:bd:2f:ba:64:8a:92:60:78:35:cf:e5:
         58:f7:37:2d:bc:d1:0a:0b:47:33:8e:7c:17:7b:41:a6:e2:21:
         c6:4c:ca:65:74:fc:36:c0:d0:c2:ad:a4:a9:34:72:e2:5a:4e:
         a4:54:61:c6:2a:b6:9b:7f:d5:17:40:20:75:06:6b:c0:d5:ac:
         46:b1:4f:71:35:7e:e0:c8:c1:7c:14:6a:ee:dc:3f:fc:2b:70:
         24:b3:26:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:16 2024 by rpki-client on console-ams.rpki-client.org