Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/323830343a6231383a3a2f33322d313238203d3e203532393431.roa
File:                     323830343a6231383a3a2f33322d313238203d3e203532393431.roa (raw, json)
Hash identifier:          /U7C7N7KgeN++rSNDfi4NbiyjM1Ir1A4oQ5R3QnnoAI=
Subject key identifier:   54:F5:93:A7:04:58:74:65:EB:CB:7E:F4:20:ED:B0:5D:22:B0:E9:EF
Certificate issuer:       /CN=9D103AA204540DE0058FABD735474D7C4AE2DC8F
Certificate serial:       594886360CAE4893FBCF3250575190C711ED4868
Authority key identifier: 9D:10:3A:A2:04:54:0D:E0:05:8F:AB:D7:35:47:4D:7C:4A:E2:DC:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D103AA204540DE0058FABD735474D7C4AE2DC8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/323830343a6231383a3a2f33322d313238203d3e203532393431.roa
Signing time:             Fri 01 Nov 2024 19:12:14 +0000
ROA not before:           Fri 01 Nov 2024 19:07:14 +0000
ROA not after:            Fri 31 Oct 2025 19:12:14 +0000
asID:                     52941
IP address blocks:        2804:b18::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/9D103AA204540DE0058FABD735474D7C4AE2DC8F.crl
                          rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/9D103AA204540DE0058FABD735474D7C4AE2DC8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D103AA204540DE0058FABD735474D7C4AE2DC8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:48:86:36:0c:ae:48:93:fb:cf:32:50:57:51:90:c7:11:ed:48:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D103AA204540DE0058FABD735474D7C4AE2DC8F
        Validity
            Not Before: Nov  1 19:07:14 2024 GMT
            Not After : Oct 31 19:12:14 2025 GMT
        Subject: CN=54F593A704587465EBCB7EF420EDB05D22B0E9EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:aa:87:ba:e8:5e:82:f0:4b:2b:8b:71:d0:
                    58:90:b3:b3:3f:a2:9f:51:ec:b2:2b:e3:04:54:76:
                    59:8c:63:cb:e7:1b:9f:bd:e1:10:28:da:3f:44:94:
                    d2:98:8c:e3:c2:04:3e:99:f4:29:c6:75:d8:f7:fc:
                    d2:1a:c7:da:fd:c2:22:db:0f:83:58:b6:44:5a:cb:
                    a0:f6:4f:7f:f5:24:18:1f:df:dc:06:96:65:b2:dc:
                    50:77:f9:d7:d5:41:50:8e:1b:48:9e:12:e5:84:33:
                    1e:20:e3:d3:4b:af:b4:22:10:ed:3b:cc:7b:f1:4d:
                    15:dd:dc:36:76:3d:e9:02:49:03:89:8f:09:a6:cd:
                    77:15:a3:f9:81:43:76:83:c9:8b:f5:65:2f:c8:e6:
                    78:28:cd:25:ae:84:94:e3:10:4e:99:dd:bd:d0:96:
                    bd:c2:de:cd:61:3c:f3:60:28:fa:68:ec:12:8a:43:
                    c1:49:d0:bc:14:44:a2:49:01:d3:93:20:5f:87:8d:
                    07:94:19:8b:d9:a0:8b:04:83:92:aa:3a:7c:76:04:
                    91:a4:d6:cb:34:c3:dd:42:db:51:24:e0:5e:f3:fb:
                    75:2a:ed:e9:4b:ce:39:72:c0:f0:b4:d8:00:a9:05:
                    fa:5e:b4:11:21:29:4f:db:c4:e9:5d:d7:90:be:a8:
                    f5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F5:93:A7:04:58:74:65:EB:CB:7E:F4:20:ED:B0:5D:22:B0:E9:EF
            X509v3 Authority Key Identifier:
                keyid:9D:10:3A:A2:04:54:0D:E0:05:8F:AB:D7:35:47:4D:7C:4A:E2:DC:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/9D103AA204540DE0058FABD735474D7C4AE2DC8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D103AA204540DE0058FABD735474D7C4AE2DC8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/323830343a6231383a3a2f33322d313238203d3e203532393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b18::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:99:8c:b4:ab:bd:4a:b0:1e:06:ba:90:e4:66:6b:ed:72:6c:
         74:36:be:9d:05:1b:01:7d:77:42:ee:a7:13:b8:ee:2e:44:a0:
         e0:70:63:10:ce:68:45:4c:5c:fa:9f:0b:6d:a9:70:d8:ae:9a:
         d5:a1:09:11:b1:07:04:87:69:1d:40:ce:76:d4:82:6c:f0:21:
         86:68:8e:bf:5a:00:e6:0e:fe:6b:74:de:dc:4a:29:a0:34:4f:
         15:d2:cb:76:99:2f:d1:b5:65:82:5e:d6:40:6a:61:e6:71:26:
         5f:ff:6c:f1:3f:e7:86:32:b5:61:24:69:0e:be:46:12:b1:4e:
         df:71:97:a2:94:fd:10:fe:22:e2:bb:9f:13:0e:3f:6e:3b:7c:
         94:5f:e9:1c:33:2b:b6:70:e5:01:83:02:70:68:fa:50:40:c4:
         73:c3:b6:6a:3d:6a:43:01:91:90:9b:34:56:64:72:e2:7a:00:
         4a:3f:0c:e9:08:12:c8:a9:09:83:d6:f1:12:0e:2a:db:5e:63:
         26:10:12:62:3f:89:70:90:ca:e4:58:c7:e4:68:91:29:c2:62:
         9d:f3:bf:c6:45:a4:ae:ea:cc:d7:55:4d:75:7f:ca:fb:68:9d:
         66:dd:20:d3:74:8f:4e:95:fe:05:b4:68:3f:e7:da:19:2e:1f:
         9e:33:44:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:20 2024 by rpki-client on console-ams.rpki-client.org