Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/323830343a353964343a3a2f33322d3332203d3e20323638373238.roa
File:                     323830343a353964343a3a2f33322d3332203d3e20323638373238.roa (raw, json)
Hash identifier:          ZP4y1zbGv5p5zbAK6NznsPslSxL5/xMczqw6DsSX8j0=
Subject key identifier:   72:52:B3:32:2B:FD:A5:52:66:EF:CC:C7:55:C4:3F:AD:85:12:E1:1C
Certificate issuer:       /CN=753001312ACD66ED6C7129E4CADC553A57EDE77F
Certificate serial:       054E7AA0F6C420EE5420F23977A4679BAA73E683
Authority key identifier: 75:30:01:31:2A:CD:66:ED:6C:71:29:E4:CA:DC:55:3A:57:ED:E7:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/753001312ACD66ED6C7129E4CADC553A57EDE77F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/323830343a353964343a3a2f33322d3332203d3e20323638373238.roa
Signing time:             Fri 23 Aug 2024 20:03:05 +0000
ROA not before:           Fri 23 Aug 2024 19:58:05 +0000
ROA not after:            Fri 22 Aug 2025 20:03:05 +0000
asID:                     268728
IP address blocks:        2804:59d4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/753001312ACD66ED6C7129E4CADC553A57EDE77F.crl
                          rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/753001312ACD66ED6C7129E4CADC553A57EDE77F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/753001312ACD66ED6C7129E4CADC553A57EDE77F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 Nov 2024 12:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:4e:7a:a0:f6:c4:20:ee:54:20:f2:39:77:a4:67:9b:aa:73:e6:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=753001312ACD66ED6C7129E4CADC553A57EDE77F
        Validity
            Not Before: Aug 23 19:58:05 2024 GMT
            Not After : Aug 22 20:03:05 2025 GMT
        Subject: CN=7252B3322BFDA55266EFCCC755C43FAD8512E11C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9b:62:c4:ef:dc:7f:a2:3b:92:1f:1e:f5:3b:
                    76:77:8a:f5:da:73:2f:53:89:57:b4:7c:1d:1e:8a:
                    81:3e:05:25:18:56:fc:1e:33:93:f9:fc:ca:ed:af:
                    60:f9:83:fe:66:2b:56:f2:b6:ec:a9:ec:ad:bf:58:
                    10:73:78:14:6d:ae:ad:98:7f:78:c4:7e:34:c5:a6:
                    0f:d9:1c:35:21:59:76:8b:77:3e:d7:6c:9d:22:71:
                    59:52:b2:17:54:03:8f:69:f9:a3:43:19:60:16:9c:
                    f0:a3:4b:6f:4c:b3:bd:00:68:f8:44:b6:0b:05:d0:
                    e8:e4:e9:e3:21:a5:2f:71:55:28:2d:e6:3c:15:21:
                    d6:9d:3a:95:55:88:59:3f:ab:f4:ff:0d:81:1f:08:
                    7a:83:8e:3a:13:3f:03:23:6c:d5:1b:bb:ba:ed:fa:
                    89:ba:a9:7e:c9:9f:3a:4e:75:c0:57:d8:45:42:39:
                    05:54:dd:af:77:ee:65:9f:79:0e:18:8d:ef:86:0e:
                    7b:69:5d:de:81:05:66:44:d2:9f:26:a5:e6:d9:8e:
                    2e:a9:5f:04:38:e5:7b:c7:21:5f:98:6a:4e:4f:a6:
                    6f:63:1e:96:e6:04:92:45:1d:82:45:1f:0f:05:0b:
                    d0:df:e7:56:a5:a6:ff:28:d6:22:7e:55:40:aa:bc:
                    13:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:52:B3:32:2B:FD:A5:52:66:EF:CC:C7:55:C4:3F:AD:85:12:E1:1C
            X509v3 Authority Key Identifier:
                keyid:75:30:01:31:2A:CD:66:ED:6C:71:29:E4:CA:DC:55:3A:57:ED:E7:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/753001312ACD66ED6C7129E4CADC553A57EDE77F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/753001312ACD66ED6C7129E4CADC553A57EDE77F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/323830343a353964343a3a2f33322d3332203d3e20323638373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:d3:d5:b4:4d:f7:de:23:e0:aa:96:4a:5f:1f:c2:8e:3e:a1:
         1c:ea:c2:02:58:64:04:70:84:50:79:d3:f8:e8:36:21:e2:17:
         b8:21:86:d0:91:2a:5f:9a:45:3d:2c:b9:20:b6:ce:53:5a:d0:
         21:2e:55:3c:7b:b6:59:28:7b:29:4c:8a:94:dc:ca:95:c3:47:
         71:e2:92:59:e3:33:8c:5a:86:40:b3:44:f6:18:14:6c:0f:f1:
         6e:77:e1:1f:57:c7:5d:a7:87:dd:49:75:72:ad:23:70:64:c9:
         ba:40:4a:56:58:90:b6:09:e9:2f:6d:2b:6d:e8:83:00:60:3f:
         cb:3b:a8:a5:c2:ee:d8:dd:7f:ea:bf:0b:69:b7:59:bd:98:0a:
         7b:55:65:f0:c4:4c:55:2f:4d:16:09:14:23:fd:a6:ed:14:b1:
         8c:b1:ee:c1:d4:96:b9:a0:cd:5c:02:70:7c:36:e5:77:c5:b2:
         5d:a1:32:0e:06:94:a9:d7:85:7d:e9:82:17:12:1b:b3:eb:07:
         ab:64:b0:3c:82:9f:c8:b4:c3:7f:c9:76:3e:c4:60:05:e3:29:
         9a:9e:70:30:b3:d0:80:79:e0:f1:b3:f4:51:9e:0b:d3:78:65:
         0a:64:1e:ad:db:0f:93:81:f3:da:79:09:49:24:04:1b:73:0e:
         1c:a4:8f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 13:59:09 2024 by rpki-client on console-ams.rpki-client.org