Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/323830343a3162383a3a2f33322d313238203d3e20323632373634.roa
File:                     323830343a3162383a3a2f33322d313238203d3e20323632373634.roa (raw, json)
Hash identifier:          JdwrFQfHMRVFiXQssCDOwxqKos43ChlUND56W6K4Kdk=
Subject key identifier:   5A:CE:20:E7:74:32:85:94:AB:2A:6A:21:54:93:1D:9E:71:B9:E6:58
Certificate issuer:       /CN=725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5
Certificate serial:       753EB1241E7D1D84170AC157E211AB21FFE2D043
Authority key identifier: 72:5C:FB:34:4D:3B:C8:D4:D1:28:A6:DE:8A:52:7D:9D:1E:3C:70:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/323830343a3162383a3a2f33322d313238203d3e20323632373634.roa
Signing time:             Wed 29 May 2024 13:41:02 +0000
ROA not before:           Wed 29 May 2024 13:36:02 +0000
ROA not after:            Wed 28 May 2025 13:41:02 +0000
asID:                     262764
IP address blocks:        2804:1b8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.crl
                          rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3e:b1:24:1e:7d:1d:84:17:0a:c1:57:e2:11:ab:21:ff:e2:d0:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5
        Validity
            Not Before: May 29 13:36:02 2024 GMT
            Not After : May 28 13:41:02 2025 GMT
        Subject: CN=5ACE20E774328594AB2A6A2154931D9E71B9E658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:78:71:96:24:80:e0:c9:11:11:5d:63:03:ee:
                    ee:aa:dc:6e:d9:01:47:c7:82:15:ae:00:24:c9:5b:
                    54:33:36:09:02:51:59:a2:62:d0:f9:85:7e:c5:9b:
                    71:83:8f:f3:95:e0:37:4b:e2:7f:ad:3a:ed:07:4b:
                    2b:0b:ef:6f:5d:35:2f:df:68:94:28:4a:ee:4f:6e:
                    ce:13:09:a4:b8:bd:5e:08:db:15:d8:b9:4c:b6:3d:
                    06:7c:06:ce:b8:29:b8:7b:86:bc:34:0b:51:28:c5:
                    58:26:1c:73:a0:1e:bd:89:fa:51:66:b2:56:59:93:
                    06:d0:9f:86:80:87:95:87:65:4e:05:53:13:24:4c:
                    2a:27:a0:88:e1:9f:8e:5c:9a:37:31:52:5f:cb:be:
                    81:0f:43:64:db:df:ba:6a:56:e6:8d:51:ca:65:d9:
                    b6:a7:cb:12:cb:73:49:9d:88:f8:88:4d:f6:10:f8:
                    6a:89:0d:4b:bc:48:cf:93:ae:62:8d:b9:69:93:83:
                    01:8d:2f:b5:1e:45:2b:aa:74:3c:4e:5c:70:13:b4:
                    8a:a0:8b:35:9a:19:fb:f4:62:d5:f7:a6:31:fc:7c:
                    d5:67:d2:c7:69:73:6d:f7:1c:85:af:46:8e:0e:7a:
                    77:48:df:d7:27:7d:ff:ba:ab:eb:03:d2:37:50:22:
                    f2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CE:20:E7:74:32:85:94:AB:2A:6A:21:54:93:1D:9E:71:B9:E6:58
            X509v3 Authority Key Identifier:
                keyid:72:5C:FB:34:4D:3B:C8:D4:D1:28:A6:DE:8A:52:7D:9D:1E:3C:70:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/323830343a3162383a3a2f33322d313238203d3e20323632373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:82:be:0b:9a:e6:90:3a:86:55:2f:00:04:bb:16:a8:a1:bd:
         90:51:fc:36:0c:52:5e:46:66:a3:43:c8:cf:00:c8:00:bd:14:
         21:c2:be:b9:ed:1e:7d:e5:a5:6e:5f:20:49:b2:e6:b6:79:5d:
         4b:5e:2c:70:f7:02:84:d7:3d:14:db:be:45:17:b4:2f:ef:ce:
         82:43:50:c4:40:15:bc:97:2d:1b:8d:71:63:72:3f:a5:ff:bf:
         f8:a6:3d:dd:5c:c7:1d:91:28:8d:d3:d4:d1:ce:0c:bd:5a:76:
         85:e9:2b:6f:ea:74:63:c4:14:9f:43:01:a2:1a:dd:d5:f0:7c:
         26:ba:ec:91:67:70:b9:70:f5:e7:0d:66:ce:05:cd:a9:2c:cf:
         5a:39:71:8b:b3:62:58:ba:9c:69:5c:7c:41:5f:e4:37:2f:26:
         3c:6b:63:d9:77:69:22:f7:86:68:08:a8:5f:c5:f2:2a:5c:af:
         66:11:3b:93:a1:41:4e:20:12:20:4a:68:76:8d:69:4e:bf:48:
         d0:8d:cd:2c:ad:3d:fe:b8:cd:09:a9:b5:ef:3c:f8:bc:76:ad:
         71:65:2f:ee:d4:12:aa:07:fc:e2:fd:20:c1:db:ca:60:0f:a9:
         73:f8:bb:ab:77:7c:f1:3f:4e:a7:de:39:3e:c8:4e:94:38:a9:
         91:d3:77:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:16:53 2024 by rpki-client on console-ams.rpki-client.org