Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/323030313a313261303a3a2f33322d3438203d3e203238323932.roa
File:                     323030313a313261303a3a2f33322d3438203d3e203238323932.roa (raw, json)
Hash identifier:          rRnH8syVVmzgSh0maPzjKVpb1MOMYVTRHpW+pSITaEc=
Subject key identifier:   C9:A7:5E:DC:87:90:65:3E:30:4C:26:23:6F:FC:00:CD:65:35:EB:09
Certificate issuer:       /CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
Certificate serial:       7B8ABAC8E048E8FF2E43120BD95DB9E24E6092CD
Authority key identifier: B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/323030313a313261303a3a2f33322d3438203d3e203238323932.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     28292
IP address blocks:        2001:12a0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl
                          rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:8a:ba:c8:e0:48:e8:ff:2e:43:12:0b:d9:5d:b9:e2:4e:60:92:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:61:a6:36:81:c3:15:b9:89:d3:1c:6c:26:74:
                    84:99:a7:16:88:51:fc:5d:f1:27:9d:5a:f2:5c:2b:
                    d7:b0:8a:9b:34:ea:19:ab:b9:51:ed:14:4b:38:33:
                    ae:61:bb:03:1f:a7:05:05:76:0d:7c:46:24:fe:e7:
                    83:ce:ef:05:92:3e:3e:c1:ec:b9:61:93:3f:ea:e0:
                    fd:07:d3:51:1e:73:fd:25:59:f8:ae:5f:eb:16:4a:
                    60:67:f3:0b:9c:e2:32:f5:91:43:31:7e:16:cd:64:
                    97:d2:1d:96:03:cf:7e:ac:b8:dc:99:68:1b:ac:3f:
                    c0:2e:b3:a7:62:c5:fc:11:44:f5:7b:c2:14:5b:58:
                    60:7b:61:aa:ad:15:14:04:b7:99:68:d0:03:af:b5:
                    a5:54:f5:88:ae:46:f8:32:1c:2b:b9:c3:5e:8a:a9:
                    f3:b8:01:85:32:e5:58:64:00:e3:87:e4:e7:fd:b6:
                    3e:44:62:32:df:0b:73:85:57:33:f1:93:01:87:64:
                    da:e1:de:4e:da:7a:79:f2:17:91:4b:d6:a4:05:a8:
                    66:16:1c:59:0c:f4:16:f5:8e:5e:a6:6a:d5:4b:03:
                    b0:08:2f:3c:24:4a:f0:38:26:52:82:57:1b:68:c3:
                    ad:72:23:d9:ac:6c:6f:fd:9e:89:63:7f:f4:79:32:
                    66:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A7:5E:DC:87:90:65:3E:30:4C:26:23:6F:FC:00:CD:65:35:EB:09
            X509v3 Authority Key Identifier:
                keyid:B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/323030313a313261303a3a2f33322d3438203d3e203238323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:71:fc:52:b4:d2:7a:26:f8:7b:3e:7a:f7:3c:83:89:be:05:
         c3:3a:49:29:e4:ae:db:26:8d:dd:c3:34:64:21:8e:5c:3c:62:
         4b:7d:cd:77:48:83:49:59:48:ca:6d:83:fa:e7:26:3b:6d:34:
         3e:31:10:af:1b:bb:4f:a1:3c:0c:ae:2f:14:4a:e9:fb:f9:e4:
         de:56:a1:25:02:9a:1d:73:65:7f:3e:49:cc:a3:af:42:d9:da:
         dd:e9:48:05:30:8a:87:4b:e7:76:ce:cc:6c:f6:fc:c7:b5:a7:
         b6:9c:28:4a:f3:0c:33:3e:6a:e9:21:cd:98:b5:c0:47:35:7a:
         7e:07:93:7d:d7:f3:e7:d2:de:a5:84:5b:60:e2:21:c1:33:29:
         7b:3f:52:f9:3e:a7:e8:e2:c5:b4:68:ac:1c:51:79:0a:fd:7f:
         64:96:10:97:d0:7e:35:e5:c8:a6:52:68:28:7c:23:33:9e:d0:
         cb:4d:56:4e:94:e9:ba:d8:2c:ec:e5:bb:24:0d:d9:d1:2a:74:
         a6:d1:61:af:18:99:b3:7b:f8:51:1d:cf:eb:e8:d0:58:60:68:
         11:83:2d:6b:66:19:3c:87:d4:08:f2:80:65:6f:c0:57:37:8d:
         4f:ea:88:b7:df:56:91:9d:5e:d8:d8:6b:b5:bb:55:22:f8:14:
         65:45:9d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:13 2024 by rpki-client on console-ams.rpki-client.org