Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/1/323830343a336333303a3a2f33322d313238203d3e20323636313935.roa
File:                     323830343a336333303a3a2f33322d313238203d3e20323636313935.roa (raw, json)
Hash identifier:          ECZrtkyTwoi5IeGDbyPVqyaYh6oIgYdDyjVlifTU3lk=
Subject key identifier:   E7:70:CE:CE:29:7D:D2:B5:EF:46:62:CE:FF:6F:C2:D8:C6:46:D7:00
Certificate issuer:       /CN=554F31049EE1172449D30E9D16346BBA2B90EA1B
Certificate serial:       691A9CA516967F1ADF9B002EE1923DEAC8BC4EE2
Authority key identifier: 55:4F:31:04:9E:E1:17:24:49:D3:0E:9D:16:34:6B:BA:2B:90:EA:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/1/323830343a336333303a3a2f33322d313238203d3e20323636313935.roa
Signing time:             Thu 04 Apr 2024 04:02:14 +0000
ROA not before:           Thu 04 Apr 2024 03:57:14 +0000
ROA not after:            Thu 03 Apr 2025 04:02:14 +0000
asID:                     266195
IP address blocks:        2804:3c30::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.crl
                          rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:44:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:1a:9c:a5:16:96:7f:1a:df:9b:00:2e:e1:92:3d:ea:c8:bc:4e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=554F31049EE1172449D30E9D16346BBA2B90EA1B
        Validity
            Not Before: Apr  4 03:57:14 2024 GMT
            Not After : Apr  3 04:02:14 2025 GMT
        Subject: CN=E770CECE297DD2B5EF4662CEFF6FC2D8C646D700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5d:5b:5e:82:7d:b8:90:32:23:70:fb:0b:52:
                    b5:d5:08:37:ec:bb:51:87:b1:46:d8:25:d0:ba:85:
                    2b:6e:45:02:94:c0:c9:c0:a3:42:71:16:27:d7:cf:
                    b3:4e:df:af:55:0e:e5:91:d1:42:4f:68:97:89:a0:
                    8c:34:77:d6:5e:35:8f:49:c6:61:2c:cc:ee:63:53:
                    15:8c:65:8b:1e:51:b0:65:92:95:b3:af:bf:e7:72:
                    50:cd:97:1a:1c:52:31:af:a5:0b:4c:17:1c:91:8f:
                    0a:f4:62:b8:c4:57:fa:b3:63:17:90:16:5f:70:e6:
                    2f:76:74:68:b1:e1:e1:20:9c:11:b8:95:32:fb:52:
                    14:db:ba:20:97:d2:a9:70:c5:ac:5a:a7:fe:4d:a1:
                    bb:f5:e4:c0:bb:ad:3b:bf:6b:08:60:89:db:d0:7a:
                    8e:8a:1b:38:d1:0d:88:08:c7:cd:1c:d7:33:ce:35:
                    d3:15:10:75:df:42:a1:e8:62:25:a4:3e:e4:fc:e4:
                    53:62:02:5d:a9:80:1a:d3:77:49:fc:80:8b:f2:ec:
                    7c:64:b6:12:0c:4b:0e:7f:88:1c:42:0d:31:03:71:
                    09:26:1e:39:6c:9f:e8:2a:7d:e6:fa:a0:99:0c:95:
                    cc:6d:ae:08:eb:59:86:2b:56:db:03:02:c9:bd:d7:
                    fe:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:70:CE:CE:29:7D:D2:B5:EF:46:62:CE:FF:6F:C2:D8:C6:46:D7:00
            X509v3 Authority Key Identifier:
                keyid:55:4F:31:04:9E:E1:17:24:49:D3:0E:9D:16:34:6B:BA:2B:90:EA:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/1/323830343a336333303a3a2f33322d313238203d3e20323636313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c30::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:8f:ee:3a:ae:e7:e3:eb:27:cc:64:75:ca:9e:3d:48:0d:11:
         da:6f:84:28:fb:3a:40:f7:70:40:74:b8:0c:45:0f:09:44:29:
         a4:15:22:ea:23:cb:b7:ac:b4:dd:eb:ac:66:0b:4d:bd:65:95:
         e0:77:06:4b:99:cf:a5:b8:e0:2c:c0:a7:24:3a:f5:04:7a:d8:
         25:bc:98:d0:da:f6:3e:3c:fa:cb:7c:a3:3a:c0:30:5e:cc:8f:
         72:3f:31:dd:b7:a9:49:e0:72:7e:b5:29:35:d4:9d:ae:69:d1:
         fa:3d:aa:8f:b0:7c:64:5c:c7:6d:13:07:6d:23:9d:25:9e:04:
         c6:28:47:35:c0:c8:8a:b2:1c:bb:c6:08:25:64:9f:8e:8a:1c:
         b9:50:5f:b0:8a:10:64:cf:ff:a1:44:18:29:7f:52:e3:b5:45:
         82:61:60:35:1e:1c:be:12:20:cd:3d:fd:ac:35:07:70:65:a1:
         49:25:4a:ce:f8:70:97:53:a8:55:8d:f8:28:b4:05:3f:22:98:
         41:8c:9a:f4:a4:d9:09:4e:d0:e6:2e:ea:e8:5a:07:95:b7:0a:
         a6:12:31:3d:68:c1:4f:82:26:13:0c:e7:77:bc:10:8a:5a:23:
         32:db:72:3a:2e:26:55:b8:70:e9:51:a6:a0:ac:ee:0d:a4:44:
         4b:cd:ad:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:48 2024 by rpki-client on console-ams.rpki-client.org