Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/323830343a6431303a3a2f33322d3332203d3e203532353933.roa
File:                     323830343a6431303a3a2f33322d3332203d3e203532353933.roa (raw, json)
Hash identifier:          5tEJUWcBpgajZe4LK+2N3ALAJsIaYRH9LcBup6aBUCY=
Subject key identifier:   32:3C:FF:C1:B2:57:BC:2B:50:4D:D4:DD:19:32:36:57:B3:38:F2:E0
Certificate issuer:       /CN=71F86B10A77D1BB0176438DDC470DFE2D19A6F14
Certificate serial:       482258C8F2D19141AD098F10B84A3DBE19E95468
Authority key identifier: 71:F8:6B:10:A7:7D:1B:B0:17:64:38:DD:C4:70:DF:E2:D1:9A:6F:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/323830343a6431303a3a2f33322d3332203d3e203532353933.roa
Signing time:             Wed 03 Apr 2024 22:00:33 +0000
ROA not before:           Wed 03 Apr 2024 21:55:33 +0000
ROA not after:            Wed 02 Apr 2025 22:00:33 +0000
asID:                     52593
IP address blocks:        2804:d10::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.crl
                          rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:06:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:22:58:c8:f2:d1:91:41:ad:09:8f:10:b8:4a:3d:be:19:e9:54:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F86B10A77D1BB0176438DDC470DFE2D19A6F14
        Validity
            Not Before: Apr  3 21:55:33 2024 GMT
            Not After : Apr  2 22:00:33 2025 GMT
        Subject: CN=323CFFC1B257BC2B504DD4DD19323657B338F2E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:52:3e:6b:d6:36:f4:0f:ad:20:92:06:9e:
                    37:e9:7d:bc:ad:64:5a:a9:67:18:bf:4f:f8:b2:5d:
                    45:1c:a4:20:c4:f5:09:b4:95:f2:c6:68:ab:a1:ce:
                    41:a9:36:61:7b:cf:12:4d:2d:62:9c:cd:6b:e3:5a:
                    fb:8c:5e:cf:5e:c5:80:f2:11:53:e5:bd:b5:b6:fe:
                    45:31:97:c9:f3:b5:c7:c2:28:ba:dc:63:4d:19:55:
                    89:44:7c:fb:00:aa:99:12:0c:cf:51:2f:90:e8:86:
                    1d:c1:b3:1f:d9:50:25:04:bd:38:1d:9e:76:c3:47:
                    5f:67:7a:98:e6:37:44:c4:1c:80:cf:58:44:c4:a4:
                    ef:a7:ea:94:00:9a:76:42:b3:9f:bd:80:71:b1:9e:
                    0a:25:84:1e:8c:43:01:a3:df:cb:1c:09:eb:0c:86:
                    04:42:8d:3d:96:54:15:d5:31:7a:85:a4:6a:c6:55:
                    ab:3c:8d:59:0c:ac:46:51:34:c1:a3:1b:e9:72:9c:
                    77:d1:d5:c3:16:10:82:ee:60:79:fd:05:ef:cc:79:
                    97:1c:02:4d:ff:1f:76:4e:79:2c:ee:3b:e8:2c:4e:
                    c1:0f:3e:f9:1d:82:0a:19:af:33:56:86:17:9e:42:
                    d3:e8:1a:90:c8:8d:cc:2f:1d:d8:1e:82:b6:c8:b3:
                    f0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3C:FF:C1:B2:57:BC:2B:50:4D:D4:DD:19:32:36:57:B3:38:F2:E0
            X509v3 Authority Key Identifier:
                keyid:71:F8:6B:10:A7:7D:1B:B0:17:64:38:DD:C4:70:DF:E2:D1:9A:6F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/323830343a6431303a3a2f33322d3332203d3e203532353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:90:1f:8f:8f:c9:a0:e4:96:ac:bf:ed:3f:48:61:c1:a1:23:
         5f:bb:75:ed:9e:ad:c3:8e:1c:42:d7:50:ec:76:c5:a0:88:13:
         9b:7a:8f:31:87:70:33:05:e2:8d:95:5a:aa:e9:10:8f:2f:9a:
         2e:58:a1:df:62:a8:2d:b2:ed:3a:da:94:4f:86:9a:ee:a4:7f:
         15:21:1d:0b:b3:98:5f:12:eb:12:1c:8d:3a:bb:81:0b:d4:da:
         98:9e:9f:96:c5:46:52:b5:03:73:63:f4:e3:c8:11:aa:2c:96:
         9a:89:16:57:ef:e3:23:ff:8e:64:be:a0:ba:77:d6:53:93:dc:
         04:ae:8c:8a:39:33:0b:f0:3b:22:65:29:fc:6c:c2:a4:f0:98:
         45:46:29:98:07:20:ad:63:1b:f9:09:a0:01:71:de:26:90:77:
         6a:10:fd:b2:37:6f:e8:d2:73:de:79:00:fc:89:66:a2:4e:e5:
         53:d1:9f:f2:7a:15:92:13:cd:18:09:ed:02:c8:50:31:e2:d0:
         4d:e0:e1:86:89:ac:c5:76:c2:aa:67:46:ff:b9:75:cf:eb:8f:
         dc:a7:00:76:97:8d:62:f0:d5:19:69:1a:f6:ac:40:60:59:ae:
         54:02:6c:dc:07:f9:46:10:76:e0:a6:15:5d:d5:fd:0e:d6:0c:
         d8:b2:a5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:39 2024 by rpki-client on console-fra.rpki-client.org