Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/323830343a333264633a3a2f33322d3438203d3e20323632333232.roa
File:                     323830343a333264633a3a2f33322d3438203d3e20323632333232.roa (raw, json)
Hash identifier:          TIUZCTl8ZiVNzopGGryGdWxroqZpayoTvPin1fi3PX4=
Subject key identifier:   54:9F:FA:F4:A0:CD:7A:12:3B:38:E5:C9:15:5D:33:DD:95:B9:F5:E0
Certificate issuer:       /CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
Certificate serial:       734189D36BC16BDD2017E2CE20EE9D9F374C7CA9
Authority key identifier: 2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/323830343a333264633a3a2f33322d3438203d3e20323632333232.roa
Signing time:             Thu 04 Apr 2024 20:11:10 +0000
ROA not before:           Thu 04 Apr 2024 20:06:10 +0000
ROA not after:            Thu 03 Apr 2025 20:11:10 +0000
asID:                     262322
IP address blocks:        2804:32dc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl
                          rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:41:89:d3:6b:c1:6b:dd:20:17:e2:ce:20:ee:9d:9f:37:4c:7c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
        Validity
            Not Before: Apr  4 20:06:10 2024 GMT
            Not After : Apr  3 20:11:10 2025 GMT
        Subject: CN=549FFAF4A0CD7A123B38E5C9155D33DD95B9F5E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:a0:e0:fe:e0:e4:f4:ab:97:f9:24:63:20:
                    2e:fa:14:be:4b:f0:30:53:ac:54:aa:62:70:c0:b3:
                    47:61:95:ca:4f:a3:35:d7:b0:c3:52:18:5e:cd:ee:
                    f1:a6:7e:74:6b:56:48:31:89:21:42:6e:89:81:b2:
                    dd:33:ca:1d:8c:81:65:8b:a3:1e:95:ab:5a:eb:f2:
                    5f:7d:ce:73:49:ba:23:02:cc:29:0f:02:bb:53:63:
                    76:0b:8d:cc:44:34:80:fa:9a:98:a5:e7:22:7a:b1:
                    37:dc:43:bd:1d:7d:43:57:3d:62:ef:7c:7a:ff:a3:
                    bf:a6:74:bb:b8:f6:1a:83:84:b6:b7:ac:30:eb:36:
                    f3:29:d5:9e:27:31:54:75:22:b2:e9:31:49:f9:54:
                    f7:16:36:3e:b7:40:df:ce:d7:17:13:1f:8b:97:56:
                    a9:57:2a:68:33:61:48:59:2b:da:3b:21:37:71:c3:
                    aa:e6:60:f0:f9:70:f3:4d:a6:06:ae:7f:45:8a:48:
                    c3:b6:29:37:e6:0e:c3:ce:99:a7:c1:ed:ed:4b:95:
                    56:a9:a2:47:ce:08:b6:50:f2:98:57:f9:43:70:0c:
                    72:03:9b:7f:d6:f3:0b:ef:d2:32:5a:9b:6e:ff:24:
                    19:ad:bb:ea:ca:43:44:d6:3b:d9:57:ee:06:30:b9:
                    ac:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9F:FA:F4:A0:CD:7A:12:3B:38:E5:C9:15:5D:33:DD:95:B9:F5:E0
            X509v3 Authority Key Identifier:
                keyid:2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/323830343a333264633a3a2f33322d3438203d3e20323632333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:b2:75:4b:3b:43:1a:59:59:ff:ad:40:63:f2:22:3b:89:7c:
         d5:9b:18:d6:21:09:91:4e:2e:59:3e:42:83:71:09:75:d3:2b:
         c3:c7:2c:b2:01:d3:f8:49:a4:ac:45:1e:69:c1:7e:b4:be:8d:
         96:ef:0d:fc:0a:fd:0b:45:1d:54:5e:b6:bd:f2:76:34:6d:43:
         24:88:29:d1:0d:02:06:db:00:50:f1:bf:b4:42:64:b1:7a:0f:
         6b:8a:24:c5:e6:bd:23:11:95:8e:4f:85:04:a4:ba:93:3a:a1:
         2d:8b:6b:fc:1f:cd:31:e5:c7:9e:90:38:5c:3a:eb:25:f3:25:
         0c:2a:20:31:75:2b:b7:58:81:dd:d6:03:6f:81:c8:0d:1e:3c:
         c8:d3:ea:87:86:ca:70:cf:ef:d4:81:84:1c:12:1e:6c:3d:2b:
         6e:7d:e5:3d:84:e9:1f:d2:8d:24:7b:9e:f2:f0:4b:5f:4a:77:
         ac:a4:28:2b:7d:f2:5f:a2:99:94:a9:ca:a9:3a:b6:ab:44:4c:
         93:81:84:ef:de:2f:2a:25:03:81:3f:39:2f:d9:a2:44:e7:8f:
         7b:19:2c:03:7a:aa:fe:1b:9a:9f:d3:ec:02:4e:35:5f:81:fb:
         b2:e2:01:cf:5f:09:a1:13:7a:a5:22:d2:ac:6b:66:0c:b4:8b:
         03:c2:ca:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:33 2024 by rpki-client on console-fra.rpki-client.org