Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VVYFA48J55KpbNCXG7XAGcM1FZ5Gy2CzCsdzrZwoQFu/0/323830343a323330303a3a2f33322d3438203d3e20323634313336.roa
File:                     323830343a323330303a3a2f33322d3438203d3e20323634313336.roa (raw, json)
Hash identifier:          Nkr1TiENj2NPCktKzTKxIEMUcqFyLBIIIWNA4r/miA0=
Subject key identifier:   DC:13:2D:AE:48:14:74:1E:FB:8A:62:7D:17:0F:71:07:13:DB:E3:09
Certificate issuer:       /CN=74AA35543A2DF00F88699C66FC46817694838CFA
Certificate serial:       6786BA79C5063B105788978B5A34C827D9C0EEC6
Authority key identifier: 74:AA:35:54:3A:2D:F0:0F:88:69:9C:66:FC:46:81:76:94:83:8C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74AA35543A2DF00F88699C66FC46817694838CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VVYFA48J55KpbNCXG7XAGcM1FZ5Gy2CzCsdzrZwoQFu/0/323830343a323330303a3a2f33322d3438203d3e20323634313336.roa
Signing time:             Wed 21 Aug 2024 14:19:40 +0000
ROA not before:           Wed 21 Aug 2024 14:14:40 +0000
ROA not after:            Wed 20 Aug 2025 14:19:40 +0000
asID:                     264136
IP address blocks:        2804:2300::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VVYFA48J55KpbNCXG7XAGcM1FZ5Gy2CzCsdzrZwoQFu/0/74AA35543A2DF00F88699C66FC46817694838CFA.crl
                          rsync://rpki-repo.registro.br/repo/9VVYFA48J55KpbNCXG7XAGcM1FZ5Gy2CzCsdzrZwoQFu/0/74AA35543A2DF00F88699C66FC46817694838CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74AA35543A2DF00F88699C66FC46817694838CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:86:ba:79:c5:06:3b:10:57:88:97:8b:5a:34:c8:27:d9:c0:ee:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74AA35543A2DF00F88699C66FC46817694838CFA
        Validity
            Not Before: Aug 21 14:14:40 2024 GMT
            Not After : Aug 20 14:19:40 2025 GMT
        Subject: CN=DC132DAE4814741EFB8A627D170F710713DBE309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cf:7c:c9:9c:79:7f:35:39:32:84:97:db:3a:
                    db:07:87:ab:e0:b5:e1:1b:d3:fe:01:cc:cb:39:98:
                    43:2d:1c:49:1b:75:40:8a:2e:82:3e:c8:e3:66:89:
                    4e:d1:34:86:b8:bd:3e:60:e0:9c:54:59:13:9e:7f:
                    66:7a:ed:7c:c3:9f:ec:56:9b:3d:5c:7c:90:38:0d:
                    0b:3e:a0:99:7b:8a:36:af:2c:8e:15:ed:b1:cf:5d:
                    f8:9d:55:39:cb:1c:a0:e5:4e:b1:05:fb:69:96:0c:
                    b8:e5:02:e3:1a:75:47:1c:27:e5:cd:d9:03:fe:a1:
                    a4:41:d7:f5:c4:97:18:44:4c:b3:d9:0e:7c:27:bf:
                    00:06:44:6e:5e:bb:7f:4f:6e:92:19:81:da:d6:ea:
                    a0:6e:47:47:d5:1e:90:35:10:68:ce:4a:1d:f9:51:
                    36:5c:25:c5:53:1a:ae:fc:4b:6b:86:10:67:64:ac:
                    53:73:c8:d7:eb:5f:4d:6b:b7:2d:e8:64:e6:2d:a3:
                    12:14:72:b1:86:92:da:2a:3a:0c:af:03:29:36:ac:
                    b8:c6:e9:fd:6d:d1:ea:49:94:13:9f:47:b0:14:0e:
                    67:dc:43:07:04:ac:a9:de:1f:51:2c:ce:82:98:4d:
                    4b:32:4c:02:5e:05:12:0b:45:1c:db:21:33:19:c1:
                    e5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:13:2D:AE:48:14:74:1E:FB:8A:62:7D:17:0F:71:07:13:DB:E3:09
            X509v3 Authority Key Identifier:
                keyid:74:AA:35:54:3A:2D:F0:0F:88:69:9C:66:FC:46:81:76:94:83:8C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VVYFA48J55KpbNCXG7XAGcM1FZ5Gy2CzCsdzrZwoQFu/0/74AA35543A2DF00F88699C66FC46817694838CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74AA35543A2DF00F88699C66FC46817694838CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VVYFA48J55KpbNCXG7XAGcM1FZ5Gy2CzCsdzrZwoQFu/0/323830343a323330303a3a2f33322d3438203d3e20323634313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2300::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:30:a5:34:69:23:60:98:2c:26:f3:a5:50:07:98:c2:f0:99:
         16:fa:96:9b:b1:87:1e:1c:e5:72:fe:78:5a:10:fb:65:97:c6:
         6c:5d:71:33:3e:a2:fd:ec:32:57:28:ef:37:ea:d4:68:73:ea:
         d7:92:e8:12:ec:39:a5:1e:fe:0f:0c:07:01:38:56:a8:52:37:
         08:1d:f4:b5:d5:3d:2f:c2:90:c8:32:87:8e:54:bf:ba:7a:52:
         51:b0:26:bd:7b:36:f7:94:04:c3:ea:4a:01:67:fb:26:55:b3:
         c0:9a:35:6c:bb:67:0f:1f:85:cf:c2:b8:4a:9c:1e:6c:a0:fc:
         df:84:41:71:4d:7c:0f:c5:cf:ba:38:ca:3d:ed:c2:c8:d2:df:
         eb:c2:0a:03:f9:dd:34:e1:78:60:19:4a:08:bc:49:a5:64:50:
         3e:40:86:22:81:cb:6e:a4:a0:fb:eb:44:78:fb:91:0f:b6:fd:
         c7:38:49:43:b7:26:a2:f0:43:5c:89:db:ec:ca:e7:0e:f1:3f:
         9c:e0:a1:dc:f6:e6:b6:45:e0:44:0e:fb:c8:7c:38:e9:db:68:
         25:67:c8:c5:07:b4:be:0c:e7:6a:3d:30:36:97:ec:5a:c8:7b:
         b4:82:39:25:14:ed:39:79:b7:14:8c:7d:99:14:11:35:b8:34:
         71:c1:6d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:49 2024 by rpki-client on console-ams.rpki-client.org