Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AUHnvSowr4Y99MM7XBCV8oxfXAFc2US4dgRn4D12489u/0/323830343a313662343a3a2f33322d313238203d3e203631393131.roa
File:                     323830343a313662343a3a2f33322d313238203d3e203631393131.roa (raw, json)
Hash identifier:          pIwmDQZ4j8luZla5RaHHkTw5Srm3ZQSg2jYna/XtbnE=
Subject key identifier:   EA:95:54:FC:A7:30:3A:F2:A9:53:2B:1D:96:F6:40:C2:B9:18:94:0A
Certificate issuer:       /CN=F2CF77587AD66BB19A7D00BF39C0F6E64B6F745F
Certificate serial:       2C3B17D4906CA7C424BF79A6B4850F2BA5B18602
Authority key identifier: F2:CF:77:58:7A:D6:6B:B1:9A:7D:00:BF:39:C0:F6:E6:4B:6F:74:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2CF77587AD66BB19A7D00BF39C0F6E64B6F745F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AUHnvSowr4Y99MM7XBCV8oxfXAFc2US4dgRn4D12489u/0/323830343a313662343a3a2f33322d313238203d3e203631393131.roa
Signing time:             Wed 05 Jun 2024 14:57:05 +0000
ROA not before:           Wed 05 Jun 2024 14:52:05 +0000
ROA not after:            Wed 04 Jun 2025 14:57:05 +0000
asID:                     61911
IP address blocks:        2804:16b4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AUHnvSowr4Y99MM7XBCV8oxfXAFc2US4dgRn4D12489u/0/F2CF77587AD66BB19A7D00BF39C0F6E64B6F745F.crl
                          rsync://rpki-repo.registro.br/repo/AUHnvSowr4Y99MM7XBCV8oxfXAFc2US4dgRn4D12489u/0/F2CF77587AD66BB19A7D00BF39C0F6E64B6F745F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2CF77587AD66BB19A7D00BF39C0F6E64B6F745F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:3b:17:d4:90:6c:a7:c4:24:bf:79:a6:b4:85:0f:2b:a5:b1:86:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CF77587AD66BB19A7D00BF39C0F6E64B6F745F
        Validity
            Not Before: Jun  5 14:52:05 2024 GMT
            Not After : Jun  4 14:57:05 2025 GMT
        Subject: CN=EA9554FCA7303AF2A9532B1D96F640C2B918940A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f4:0c:11:c4:a3:5e:b6:02:35:ff:68:eb:5b:
                    97:e6:26:fb:dc:4b:56:5a:4a:ae:23:41:ff:09:41:
                    66:58:23:7b:e1:3a:16:48:32:cf:b2:47:d5:96:46:
                    c2:0f:43:92:b8:a9:80:35:c3:38:78:f4:75:18:a1:
                    75:18:da:1f:08:ee:b0:ae:b6:55:4a:33:99:75:27:
                    c8:62:56:08:be:5a:a3:84:0d:b3:7d:57:82:d0:62:
                    7a:cc:0e:36:8a:d9:b1:2b:ec:2b:72:80:ee:c5:7c:
                    4b:eb:5e:b1:6d:b5:97:40:a6:3d:2e:d4:d4:0c:43:
                    5d:4e:c2:bd:e4:01:96:20:f9:36:35:1a:e3:49:b4:
                    42:5c:74:e6:f3:3b:47:c7:fd:17:97:34:02:71:ef:
                    4d:04:a0:0e:97:5d:50:f5:a2:05:10:a3:62:29:f4:
                    70:dc:5f:51:23:c2:21:e0:66:8d:5e:6a:c1:f7:09:
                    1f:9f:8c:2c:93:db:e5:03:32:14:08:c9:23:e6:95:
                    e1:bd:c7:7c:40:6d:ba:60:ae:41:4c:1f:70:c1:41:
                    7f:68:12:16:b0:93:32:b2:63:b6:d9:f1:d1:33:dc:
                    ca:1c:7e:d5:a3:8c:dd:be:b7:fc:0f:c5:49:92:6d:
                    88:5c:b0:33:fb:b4:bc:20:27:f7:da:00:b8:92:18:
                    7d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:95:54:FC:A7:30:3A:F2:A9:53:2B:1D:96:F6:40:C2:B9:18:94:0A
            X509v3 Authority Key Identifier:
                keyid:F2:CF:77:58:7A:D6:6B:B1:9A:7D:00:BF:39:C0:F6:E6:4B:6F:74:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AUHnvSowr4Y99MM7XBCV8oxfXAFc2US4dgRn4D12489u/0/F2CF77587AD66BB19A7D00BF39C0F6E64B6F745F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2CF77587AD66BB19A7D00BF39C0F6E64B6F745F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AUHnvSowr4Y99MM7XBCV8oxfXAFc2US4dgRn4D12489u/0/323830343a313662343a3a2f33322d313238203d3e203631393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:8e:65:86:b4:e7:22:c1:84:de:f4:2b:99:49:46:e1:ad:d1:
         62:69:b3:c6:81:6e:84:3b:c0:c5:92:6b:c3:53:37:6f:e1:36:
         a3:75:96:7f:0e:52:fb:74:a0:13:a2:e8:d3:b4:2f:24:82:e6:
         5b:20:d0:01:39:10:3d:a7:96:64:55:74:6d:a5:e2:83:41:37:
         99:d3:91:9c:1e:8d:84:55:1b:29:9b:4d:ef:7c:27:f9:d7:40:
         14:46:5f:74:27:80:ea:ac:5e:08:6b:9c:7c:82:04:8c:a9:a6:
         85:2a:1f:72:c3:6b:74:1b:a6:ee:9c:ee:f3:47:17:21:c8:fe:
         2b:b1:00:00:80:53:54:56:df:07:9e:99:1e:88:62:cf:72:dc:
         8a:b7:d1:aa:69:69:40:08:ca:27:47:14:44:82:05:bb:e2:aa:
         37:68:f2:01:2f:92:d9:ea:fb:a7:84:f4:94:1a:b7:84:52:6e:
         2e:16:c5:51:28:cb:73:de:54:76:a7:7d:2f:40:c8:56:c5:1e:
         5f:ad:bb:69:71:04:db:9f:29:ae:a9:ea:73:89:3f:14:3b:e2:
         11:b7:ed:be:a4:40:4e:52:c4:bc:27:6c:47:e5:57:9c:8f:95:
         ed:4e:9f:fe:ce:37:ad:83:fe:15:1c:65:a4:d1:1c:42:b1:b0:
         4e:1e:91:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:06 2024 by rpki-client on console-fra.rpki-client.org