Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/1/323830343a356663633a3a2f33322d3332203d3e20323639313234.roa
File:                     323830343a356663633a3a2f33322d3332203d3e20323639313234.roa (raw, json)
Hash identifier:          s6J9tXkWRkKZkmsqkAmViEHzue+ZK0KiYujkn/YEhIo=
Subject key identifier:   DF:57:CA:D8:08:5A:0C:22:E0:DC:CF:6B:4B:5F:AE:4D:2C:39:8B:3A
Certificate issuer:       /CN=56891D77A40DCA11B2F69E869F836BA9899D2D6B
Certificate serial:       7D7925939ADBC25008B06F847041AC8967F5185F
Authority key identifier: 56:89:1D:77:A4:0D:CA:11:B2:F6:9E:86:9F:83:6B:A9:89:9D:2D:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56891D77A40DCA11B2F69E869F836BA9899D2D6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/1/323830343a356663633a3a2f33322d3332203d3e20323639313234.roa
Signing time:             Thu 04 Apr 2024 09:47:18 +0000
ROA not before:           Thu 04 Apr 2024 09:42:18 +0000
ROA not after:            Thu 03 Apr 2025 09:47:18 +0000
asID:                     269124
IP address blocks:        2804:5fcc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/1/56891D77A40DCA11B2F69E869F836BA9899D2D6B.crl
                          rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/1/56891D77A40DCA11B2F69E869F836BA9899D2D6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56891D77A40DCA11B2F69E869F836BA9899D2D6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:79:25:93:9a:db:c2:50:08:b0:6f:84:70:41:ac:89:67:f5:18:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56891D77A40DCA11B2F69E869F836BA9899D2D6B
        Validity
            Not Before: Apr  4 09:42:18 2024 GMT
            Not After : Apr  3 09:47:18 2025 GMT
        Subject: CN=DF57CAD8085A0C22E0DCCF6B4B5FAE4D2C398B3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1e:f4:48:77:07:a6:0b:45:a4:02:39:0d:39:
                    27:11:db:45:25:97:87:2d:ef:ca:b7:22:72:31:97:
                    f0:d1:31:6c:01:31:d2:62:2c:bd:c5:17:67:9c:78:
                    2a:3a:82:70:99:1b:8f:3d:ea:dd:8a:43:fe:6d:71:
                    ab:1d:ca:38:62:6e:97:64:c8:25:3f:5c:ea:21:cd:
                    72:c0:cd:93:f9:a3:65:b8:95:8d:cb:c1:ca:e1:57:
                    f4:ea:41:69:2b:02:34:71:27:68:6c:7f:8f:00:f8:
                    4f:6f:1a:77:b0:0e:92:c0:ef:8b:e5:59:7c:0b:01:
                    06:1c:0c:42:54:8a:8a:eb:48:77:f9:c7:c1:50:d8:
                    29:ce:29:0b:1c:aa:94:50:ca:2f:39:45:66:2e:e5:
                    9b:ba:34:97:25:98:ac:8a:94:d9:63:4e:25:01:c7:
                    5b:77:cb:79:5a:09:83:2e:37:87:f4:b6:cf:3e:00:
                    3a:f1:a5:b3:5d:da:40:d5:e4:3b:85:1a:d7:3e:ec:
                    f3:bc:c4:32:d7:59:9a:d7:03:23:7b:1e:ed:ea:63:
                    38:ad:9d:4c:9c:b5:2a:77:18:43:8d:a9:30:7c:ea:
                    4d:72:68:06:3c:10:2d:7c:1d:09:45:39:53:5b:ee:
                    93:f3:1d:58:10:07:e3:ed:b6:7d:35:9f:4b:e5:f3:
                    bc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:57:CA:D8:08:5A:0C:22:E0:DC:CF:6B:4B:5F:AE:4D:2C:39:8B:3A
            X509v3 Authority Key Identifier:
                keyid:56:89:1D:77:A4:0D:CA:11:B2:F6:9E:86:9F:83:6B:A9:89:9D:2D:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/1/56891D77A40DCA11B2F69E869F836BA9899D2D6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56891D77A40DCA11B2F69E869F836BA9899D2D6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/1/323830343a356663633a3a2f33322d3332203d3e20323639313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:74:48:f7:82:90:66:00:c1:fa:0c:40:c9:99:d3:1a:47:b3:
         9e:1c:28:36:59:ad:4f:e7:b3:83:77:d7:89:5e:d8:45:da:71:
         4d:ee:0c:91:b8:fd:08:a2:69:94:fd:8f:4d:df:b4:d2:71:6f:
         c2:14:58:13:b2:cf:f6:bc:66:4e:fc:b7:a7:3a:06:72:ce:3c:
         38:41:14:2e:d0:96:67:d8:ee:c5:79:6d:80:ea:7f:2a:8b:ca:
         6b:51:a1:1d:36:ac:38:ef:bd:2c:c9:14:71:25:ba:0c:44:f4:
         32:9a:26:97:5d:4b:b4:51:ea:1a:bd:81:53:a5:f8:30:2e:0e:
         09:28:13:c6:df:ca:d3:54:d7:4d:fe:b1:fd:64:fd:11:20:2f:
         17:5c:80:05:13:3a:ad:f3:9b:1b:00:5a:70:48:ae:10:53:47:
         24:d6:59:c9:97:1b:49:ff:9a:6a:cf:b3:b1:66:f2:38:29:71:
         33:00:2b:9a:7a:bf:12:50:80:bd:93:e5:98:cb:37:c5:ca:e8:
         00:b0:27:a0:0a:1a:26:a1:94:1a:02:59:38:cd:4c:91:13:e4:
         c7:ab:4a:93:f0:14:e1:4a:c2:1c:2d:94:10:8a:19:35:b7:b2:
         c2:cc:88:5e:63:97:7a:f1:b2:b2:f4:92:14:ff:cb:26:d4:59:
         ec:7b:f7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:04 2024 by rpki-client on console-fra.rpki-client.org