Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/323830343a3736383a3a2f33322d3332203d3e203532393737.roa
File:                     323830343a3736383a3a2f33322d3332203d3e203532393737.roa (raw, json)
Hash identifier:          vuiW9vZTl61Na6Xp/2BcvQsoZtCjxZqpu6ZuYVKFepw=
Subject key identifier:   7C:E5:C5:28:BC:DD:C5:BD:94:E7:00:F0:10:12:E8:A5:0A:D0:64:4B
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       16D9176AED070966C2B7307F13BF3ABC32414FE7
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/323830343a3736383a3a2f33322d3332203d3e203532393737.roa
Signing time:             Wed 03 Apr 2024 18:30:49 +0000
ROA not before:           Wed 03 Apr 2024 18:25:49 +0000
ROA not after:            Wed 02 Apr 2025 18:30:49 +0000
asID:                     52977
IP address blocks:        2804:768::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d9:17:6a:ed:07:09:66:c2:b7:30:7f:13:bf:3a:bc:32:41:4f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Apr  3 18:25:49 2024 GMT
            Not After : Apr  2 18:30:49 2025 GMT
        Subject: CN=7CE5C528BCDDC5BD94E700F01012E8A50AD0644B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:59:13:7c:4b:14:41:15:6e:a8:d1:95:55:94:
                    51:8b:17:71:0a:58:02:93:f3:0d:6e:fc:41:94:9e:
                    c0:a9:98:83:dd:e6:bd:70:ae:55:57:f1:3f:41:78:
                    fc:47:cb:e7:2c:5b:7c:20:50:d1:73:46:f3:49:65:
                    31:87:56:ca:16:da:41:42:f6:30:46:db:e3:24:49:
                    d6:bd:25:c5:ce:bd:9a:78:fd:bd:0e:97:e2:d6:54:
                    e6:46:7f:87:d2:d7:7c:0a:8c:1b:2d:b1:92:a9:48:
                    5d:a3:05:27:7c:4a:d5:10:dc:7d:10:29:58:b4:d9:
                    4d:99:40:8a:c5:02:29:c2:0c:06:64:4c:1d:35:16:
                    1d:1c:92:1f:f5:a7:7c:ea:a5:b9:2b:61:7e:e6:51:
                    72:b8:5d:3c:e3:88:72:fb:8c:9f:fc:97:e5:62:fe:
                    29:31:00:4a:6b:b4:0c:07:c1:d4:88:a2:52:86:be:
                    02:7d:b8:9b:f3:2e:71:f1:f8:64:6d:cd:6c:f7:92:
                    a4:86:de:bc:6a:a7:db:e1:cb:39:b9:12:86:72:af:
                    d9:ae:bb:19:de:1e:e0:76:39:23:f1:2e:a9:42:a9:
                    dc:c6:b1:03:2a:1e:8e:49:46:72:ed:b1:bf:2f:e7:
                    13:22:50:ad:68:a9:8b:a0:63:69:1a:5b:b4:23:cf:
                    56:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E5:C5:28:BC:DD:C5:BD:94:E7:00:F0:10:12:E8:A5:0A:D0:64:4B
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/323830343a3736383a3a2f33322d3332203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:768::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:dd:28:81:97:eb:13:9e:07:63:90:45:49:be:eb:7b:19:dc:
         81:87:d4:5c:5e:0f:00:f0:c4:ca:60:f6:82:8c:81:c5:72:32:
         91:6e:b6:9b:68:1d:c0:52:dd:0c:55:43:3e:f1:01:ba:cc:95:
         9b:df:f3:00:94:a9:89:8c:a0:68:ae:79:ad:6e:d0:81:9f:94:
         83:7a:0a:00:bb:86:58:75:2b:2f:37:05:f2:47:57:51:98:31:
         48:0a:9d:87:5e:00:38:29:e3:64:18:a2:8a:5e:b5:2a:48:fc:
         b9:d6:d4:bb:f3:50:ff:67:49:03:f8:ab:71:88:41:14:d3:49:
         40:1c:4e:08:0d:9f:ef:14:2c:e0:7b:85:a6:a2:b8:b2:11:df:
         57:72:6b:93:60:12:71:17:c6:b5:87:f9:89:4c:c7:22:fd:d7:
         4f:0a:62:61:39:f0:33:72:76:7c:e0:03:19:9c:13:3c:dd:c9:
         ce:46:c9:ba:ea:26:09:39:16:a9:fa:96:c1:dc:39:04:a0:f6:
         31:f1:07:3e:eb:cb:0d:fe:94:9d:50:97:93:cd:33:72:d1:56:
         a6:d3:6c:4a:6c:9a:eb:4e:1a:a8:0f:18:fa:c4:78:b7:2a:02:
         29:4e:a0:b3:fa:9e:83:7c:f0:af:1d:88:82:d6:a7:e7:de:a0:
         2a:a8:6e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org