Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/323830343a376139633a3a2f33322d3438203d3e203533313431.roa
File:                     323830343a376139633a3a2f33322d3438203d3e203533313431.roa (raw, json)
Hash identifier:          AYkGi+YgOWXfoAXTXIafaJFOe2TsbbpOwVXgyPLahe8=
Subject key identifier:   6F:48:82:14:C3:17:A9:55:9F:E3:01:9B:AA:70:97:46:4A:15:C5:22
Certificate issuer:       /CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
Certificate serial:       426865CF1A90D21558DB518F31B731CD592E1508
Authority key identifier: 7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/323830343a376139633a3a2f33322d3438203d3e203533313431.roa
Signing time:             Fri 17 May 2024 13:54:02 +0000
ROA not before:           Fri 17 May 2024 13:49:02 +0000
ROA not after:            Fri 16 May 2025 13:54:02 +0000
asID:                     53141
IP address blocks:        2804:7a9c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl
                          rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 18:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:68:65:cf:1a:90:d2:15:58:db:51:8f:31:b7:31:cd:59:2e:15:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
        Validity
            Not Before: May 17 13:49:02 2024 GMT
            Not After : May 16 13:54:02 2025 GMT
        Subject: CN=6F488214C317A9559FE3019BAA7097464A15C522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:76:6f:e5:67:e5:b0:41:d4:72:3d:7a:4d:24:
                    5d:c1:a3:e2:2e:ee:22:1d:3b:bc:4d:4c:ef:24:88:
                    9b:54:d0:80:a7:97:40:6a:08:21:04:64:75:4a:c5:
                    36:85:45:1b:c6:85:63:6b:82:06:8d:05:b2:16:2a:
                    8b:84:86:74:bf:13:d8:d0:db:d8:5e:20:c1:6d:f2:
                    e1:67:1b:d0:16:e7:a3:aa:5d:2c:b2:08:79:51:c2:
                    e3:ea:49:3c:7f:a1:16:ac:3f:f3:e4:e3:78:e0:3b:
                    14:4b:14:b5:0b:79:e4:50:37:44:66:32:49:f8:7d:
                    5f:aa:07:22:14:ac:2d:cc:cd:ed:11:5e:08:95:f1:
                    1a:f1:e9:ee:a2:6c:3f:93:1e:0b:0c:ff:15:22:fa:
                    5e:19:11:f2:35:2a:2b:33:cd:e1:22:ca:09:80:f2:
                    0a:7a:67:b2:89:c8:e7:b2:b4:0c:8c:48:e5:a3:2f:
                    87:68:3c:ea:ce:9c:19:86:ff:57:18:b5:63:f6:d4:
                    4c:d0:14:5d:b1:6e:6b:71:a0:ab:12:35:7b:15:c0:
                    19:b7:40:46:76:70:c7:22:21:fa:50:d2:85:08:79:
                    ec:18:ac:9a:b8:03:d5:f9:a9:7f:42:aa:fc:d6:dd:
                    a9:f1:50:09:b5:77:32:87:df:ee:f3:9f:39:47:a6:
                    56:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:48:82:14:C3:17:A9:55:9F:E3:01:9B:AA:70:97:46:4A:15:C5:22
            X509v3 Authority Key Identifier:
                keyid:7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/323830343a376139633a3a2f33322d3438203d3e203533313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:70:1a:b6:03:f7:a7:8b:48:4a:e4:7e:cf:ae:56:61:83:cc:
         ae:95:ed:59:c1:a1:37:c9:f2:28:b5:3c:e3:d2:a0:87:c8:62:
         0d:ad:1e:61:a2:06:a4:5e:5d:e6:1b:24:41:a0:2d:74:e1:b9:
         3b:78:00:fe:d0:1c:29:ee:03:f6:b8:d7:ab:7d:b7:a9:f9:5d:
         75:cf:98:00:3b:05:d0:d3:46:ba:ff:9f:bc:11:fc:b1:32:ea:
         a9:39:f2:45:f5:c4:a0:b8:68:88:89:88:58:46:1b:4a:9f:12:
         eb:96:44:a7:cb:18:10:1a:a9:c3:18:3a:b9:2b:e1:d0:02:48:
         a6:16:b7:53:02:d9:3d:6e:0c:52:19:78:45:88:c1:e1:80:96:
         51:1c:12:bd:31:ad:64:05:98:4b:12:41:cf:33:2c:a0:02:31:
         16:05:14:9f:7f:9e:0d:d6:1e:51:34:99:aa:7e:15:8d:ad:88:
         89:1e:0e:36:bb:1b:f5:b2:fa:14:c0:04:64:07:01:bf:83:05:
         b6:b2:45:71:ff:ed:0d:71:29:e1:15:19:5e:5e:26:ce:ac:94:
         ac:db:43:f0:0b:01:ed:27:39:e0:66:2f:e0:2e:62:ce:f6:a1:
         d7:a5:9a:89:b5:7c:77:31:da:4d:b1:e7:c8:94:6f:1c:bb:08:
         a5:7c:0b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 19:50:37 2024 by rpki-client on console-ams.rpki-client.org