Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/1/323830343a386336343a3a2f33322d3332203d3e203631363135.roa
File:                     323830343a386336343a3a2f33322d3332203d3e203631363135.roa (raw, json)
Hash identifier:          PaaNfL2mWgTS3QvCIMQOyskyFlFW7oy+k/UQfXriTzo=
Subject key identifier:   A7:B1:CC:C1:7D:10:52:E1:0C:98:D4:83:EB:82:4B:0A:54:E2:D5:BC
Certificate issuer:       /CN=252D6C06BE26C39AC59D0269A484BC7CDA2E17D0
Certificate serial:       3A9937AAC7B509C9E2912D1BB1A6C74F0C699381
Authority key identifier: 25:2D:6C:06:BE:26:C3:9A:C5:9D:02:69:A4:84:BC:7C:DA:2E:17:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252D6C06BE26C39AC59D0269A484BC7CDA2E17D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/1/323830343a386336343a3a2f33322d3332203d3e203631363135.roa
Signing time:             Wed 03 Apr 2024 18:31:55 +0000
ROA not before:           Wed 03 Apr 2024 18:26:55 +0000
ROA not after:            Wed 02 Apr 2025 18:31:55 +0000
asID:                     61615
IP address blocks:        2804:8c64::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/1/252D6C06BE26C39AC59D0269A484BC7CDA2E17D0.crl
                          rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/1/252D6C06BE26C39AC59D0269A484BC7CDA2E17D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252D6C06BE26C39AC59D0269A484BC7CDA2E17D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:99:37:aa:c7:b5:09:c9:e2:91:2d:1b:b1:a6:c7:4f:0c:69:93:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252D6C06BE26C39AC59D0269A484BC7CDA2E17D0
        Validity
            Not Before: Apr  3 18:26:55 2024 GMT
            Not After : Apr  2 18:31:55 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:17:8e:e2:ff:93:dc:c0:a0:ef:84:c1:d8:20:
                    e2:d6:d4:b6:63:0d:99:c8:23:bb:1d:75:9e:1f:87:
                    d8:21:50:3d:45:86:00:30:12:73:71:aa:28:93:82:
                    57:56:ae:64:12:7e:fb:46:2a:5e:70:48:09:d9:70:
                    f1:71:4a:fd:b7:3e:ed:74:42:5e:de:6c:cf:b2:4c:
                    57:cd:02:98:b8:1d:07:9c:e9:2b:3e:44:6f:23:99:
                    7d:76:78:ed:e4:14:8e:54:da:70:74:7f:e5:39:15:
                    b8:0b:80:fe:15:89:fb:f9:d1:ff:68:7b:53:48:1b:
                    5d:65:b8:ed:48:72:44:41:70:31:eb:14:9d:c9:bf:
                    03:2f:74:c1:c2:0b:8b:e5:73:70:27:98:0f:a5:14:
                    c0:3a:11:24:0a:a3:79:72:34:56:ed:7a:23:27:ad:
                    c4:44:61:7a:d3:79:33:af:70:50:76:b9:67:e5:fd:
                    5f:24:b3:38:fe:90:1b:2a:ed:79:80:7f:b9:ef:78:
                    a6:94:e7:df:d4:8f:44:9c:cf:10:b4:f8:78:bd:f7:
                    6d:7a:d2:0d:75:4a:20:c8:87:5f:84:6a:26:8f:52:
                    20:ad:d2:06:8a:07:92:83:7f:ad:3c:70:07:4a:25:
                    36:90:1a:4b:ba:a3:45:0a:11:b0:98:c0:e3:9d:c5:
                    e6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B1:CC:C1:7D:10:52:E1:0C:98:D4:83:EB:82:4B:0A:54:E2:D5:BC
            X509v3 Authority Key Identifier:
                keyid:25:2D:6C:06:BE:26:C3:9A:C5:9D:02:69:A4:84:BC:7C:DA:2E:17:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/1/252D6C06BE26C39AC59D0269A484BC7CDA2E17D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252D6C06BE26C39AC59D0269A484BC7CDA2E17D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/1/323830343a386336343a3a2f33322d3332203d3e203631363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c64::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:87:06:4c:03:4c:b5:9e:c0:7f:42:73:ef:6c:00:3a:df:a1:
         df:b5:d4:79:97:34:7d:29:7f:c1:64:28:02:f1:d6:58:6b:68:
         fd:a5:68:5c:bf:25:8f:62:87:fc:71:98:8b:82:d1:22:c0:bf:
         72:44:9f:7c:d0:1a:0c:64:22:4c:b4:dd:12:e9:7e:10:2e:a9:
         f7:2d:07:ea:81:86:65:5f:de:60:d7:ad:0b:87:9e:03:fe:46:
         fd:c1:7a:85:96:09:16:08:ed:09:13:44:c1:75:97:2d:bf:24:
         72:17:12:25:b4:d5:9f:f6:ca:5d:1e:24:ad:53:2b:9c:fd:46:
         9c:15:55:1e:fe:3f:dd:b3:e5:62:db:d8:b2:42:b8:1e:0f:71:
         df:7c:b5:9d:21:86:6d:0c:88:c0:e8:8d:a7:7e:58:f9:f5:0d:
         08:42:75:d0:40:7b:6d:7a:b3:fe:3f:95:94:bb:8f:08:dd:26:
         01:4b:2d:e7:74:8d:6e:14:90:5e:f7:d5:35:dd:95:a9:4c:db:
         61:f1:87:b3:6e:d6:f2:02:f7:f5:ba:59:be:af:ed:9b:95:5a:
         bb:b5:bd:14:84:62:f4:26:cd:93:2d:1f:c0:fb:3f:81:27:e8:
         cf:3a:60:68:cf:e0:71:fc:f0:c4:de:e0:1c:f4:38:cd:ef:c9:
         20:64:6b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:14 2024 by rpki-client on console-ams.rpki-client.org