Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7t8KUzAgHwZ1GvcayLVfyqSZ3BMMnAuq2sn1A8CLJ4Se/1/323830343a343062633a3a2f33322d3438203d3e20323635393738.roa
File:                     323830343a343062633a3a2f33322d3438203d3e20323635393738.roa (raw, json)
Hash identifier:          SwwOa0DjlvSu9dyfE0KL2tYrAKZYOsBRmq0TVRt6+Z0=
Subject key identifier:   53:70:37:FE:39:E5:61:47:66:6A:ED:9A:5B:20:78:30:B5:B9:80:E1
Certificate issuer:       /CN=A74B721511D28F530DF02712140284D2F079E9F4
Certificate serial:       5D397E6025FBC0F3CA9B7D4627D2A14B4B292817
Authority key identifier: A7:4B:72:15:11:D2:8F:53:0D:F0:27:12:14:02:84:D2:F0:79:E9:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A74B721511D28F530DF02712140284D2F079E9F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7t8KUzAgHwZ1GvcayLVfyqSZ3BMMnAuq2sn1A8CLJ4Se/1/323830343a343062633a3a2f33322d3438203d3e20323635393738.roa
Signing time:             Wed 03 Apr 2024 20:50:13 +0000
ROA not before:           Wed 03 Apr 2024 20:45:13 +0000
ROA not after:            Wed 02 Apr 2025 20:50:13 +0000
asID:                     265978
IP address blocks:        2804:40bc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7t8KUzAgHwZ1GvcayLVfyqSZ3BMMnAuq2sn1A8CLJ4Se/1/A74B721511D28F530DF02712140284D2F079E9F4.crl
                          rsync://rpki-repo.registro.br/repo/7t8KUzAgHwZ1GvcayLVfyqSZ3BMMnAuq2sn1A8CLJ4Se/1/A74B721511D28F530DF02712140284D2F079E9F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A74B721511D28F530DF02712140284D2F079E9F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:39:7e:60:25:fb:c0:f3:ca:9b:7d:46:27:d2:a1:4b:4b:29:28:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A74B721511D28F530DF02712140284D2F079E9F4
        Validity
            Not Before: Apr  3 20:45:13 2024 GMT
            Not After : Apr  2 20:50:13 2025 GMT
        Subject: CN=537037FE39E56147666AED9A5B207830B5B980E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:15:e3:5f:77:58:61:8a:cc:12:ce:09:69:18:
                    c3:f4:d3:20:3c:3c:b3:3d:62:0c:27:22:69:39:2c:
                    44:fd:65:d6:3a:73:63:38:ff:c4:97:da:ad:4e:f3:
                    e6:62:7d:60:df:61:a9:6f:a5:14:e3:8a:96:9f:96:
                    0e:52:9a:c2:a8:84:24:6b:d3:f4:fa:64:d8:15:6c:
                    da:f5:10:92:26:75:67:4e:fe:2e:b6:64:1d:20:c4:
                    31:22:84:05:06:df:38:65:8c:8f:65:bd:56:07:9c:
                    7c:18:09:e1:e6:00:8b:b8:6e:5e:c8:90:89:95:ef:
                    fe:6f:4b:3a:b4:52:be:ab:eb:bf:b3:b0:2d:6f:f2:
                    c2:ef:79:bd:28:21:4e:b7:c8:0f:96:45:37:75:5c:
                    ab:79:12:f4:84:a8:aa:07:d7:f7:23:58:37:2d:2d:
                    fe:d4:a5:8b:5c:92:c1:bd:7f:ad:b4:45:a2:33:05:
                    a9:8a:d2:8e:cf:a5:7f:94:95:a5:82:63:ac:f7:b3:
                    c8:1f:06:03:41:0c:22:8b:92:46:90:cb:03:e5:3e:
                    8a:1a:71:2c:f7:84:5e:4d:36:30:7b:8f:e3:a2:ad:
                    1e:9e:43:3c:62:1e:af:1b:90:75:7f:ee:14:ca:22:
                    d1:16:b1:c7:bc:30:80:d1:ce:43:08:c9:c1:25:2d:
                    3a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:70:37:FE:39:E5:61:47:66:6A:ED:9A:5B:20:78:30:B5:B9:80:E1
            X509v3 Authority Key Identifier:
                keyid:A7:4B:72:15:11:D2:8F:53:0D:F0:27:12:14:02:84:D2:F0:79:E9:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7t8KUzAgHwZ1GvcayLVfyqSZ3BMMnAuq2sn1A8CLJ4Se/1/A74B721511D28F530DF02712140284D2F079E9F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A74B721511D28F530DF02712140284D2F079E9F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7t8KUzAgHwZ1GvcayLVfyqSZ3BMMnAuq2sn1A8CLJ4Se/1/323830343a343062633a3a2f33322d3438203d3e20323635393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:69:7c:21:50:18:02:d0:a0:1e:2f:86:af:b8:11:56:c2:af:
         9a:59:d0:4d:7b:5e:b2:cb:2a:48:8f:de:97:c5:54:c3:49:0a:
         7d:d4:53:a2:a5:0d:91:9e:43:76:34:36:2e:b8:74:0f:d4:fb:
         a6:97:21:13:07:46:48:96:f7:77:9c:7b:3a:cb:7a:96:0c:13:
         c9:d9:f8:c9:bc:a4:d8:47:16:88:dc:db:12:d2:1a:d2:5d:db:
         d1:c4:9f:3a:82:86:fb:21:17:09:be:e4:f2:1f:75:c8:c7:52:
         38:17:86:21:27:fe:31:ef:fb:f5:bc:c4:28:d1:24:0a:b9:ac:
         2f:c4:ea:d4:24:96:78:9c:44:17:97:39:e1:bb:8f:40:5c:dd:
         65:eb:5d:b4:5d:d0:dc:0c:e1:57:da:18:ca:b1:fd:c7:44:20:
         c7:5a:6b:a4:f5:7c:43:36:2f:ce:f2:f0:01:dd:6e:20:38:c3:
         ae:a8:c2:0d:8b:3b:4f:9f:bc:c9:97:63:82:90:e2:d4:6e:66:
         64:2e:c8:27:7c:70:4c:0a:7e:0b:06:24:35:f6:f5:09:45:22:
         e9:b5:01:26:c7:37:35:8b:81:ef:e9:bf:fc:fc:4e:27:b6:91:
         c4:d9:91:26:8f:ed:66:95:19:07:c0:d9:da:24:ea:8f:2f:5c:
         e5:3a:b9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:03 2024 by rpki-client on console-ams.rpki-client.org