Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/1/323830343a323631343a3a2f33322d3334203d3e203532363539.roa
File:                     323830343a323631343a3a2f33322d3334203d3e203532363539.roa (raw, json)
Hash identifier:          EGP9lk6AQPHS0byhrbbgGNUQrizgE4EpiZveqMZhj5E=
Subject key identifier:   EA:15:EF:9F:13:D2:41:E9:44:38:BF:57:47:4D:FC:34:CB:05:61:98
Certificate issuer:       /CN=F587850376B78E012ED02AD104B6287373707975
Certificate serial:       3AC8796A274D5FAEF3B42CED12214FB29A5A7A81
Authority key identifier: F5:87:85:03:76:B7:8E:01:2E:D0:2A:D1:04:B6:28:73:73:70:79:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F587850376B78E012ED02AD104B6287373707975.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/1/323830343a323631343a3a2f33322d3334203d3e203532363539.roa
Signing time:             Thu 04 Apr 2024 23:33:10 +0000
ROA not before:           Thu 04 Apr 2024 23:28:10 +0000
ROA not after:            Thu 03 Apr 2025 23:33:10 +0000
asID:                     52659
IP address blocks:        2804:2614::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/1/F587850376B78E012ED02AD104B6287373707975.crl
                          rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/1/F587850376B78E012ED02AD104B6287373707975.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F587850376B78E012ED02AD104B6287373707975.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:11:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c8:79:6a:27:4d:5f:ae:f3:b4:2c:ed:12:21:4f:b2:9a:5a:7a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F587850376B78E012ED02AD104B6287373707975
        Validity
            Not Before: Apr  4 23:28:10 2024 GMT
            Not After : Apr  3 23:33:10 2025 GMT
        Subject: CN=EA15EF9F13D241E94438BF57474DFC34CB056198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:89:f8:91:e0:73:84:1e:7f:5a:d7:45:43:6b:
                    15:3b:71:76:d7:ed:28:b0:a8:83:fc:b2:03:68:75:
                    3c:9f:11:25:ec:1f:a7:3d:5b:52:c8:3e:30:c6:04:
                    a8:5c:00:1c:2c:eb:27:fa:73:50:68:b9:22:39:d6:
                    2b:ee:0d:70:2f:ee:3b:57:26:a1:7c:95:32:10:90:
                    1a:2f:45:cc:04:63:81:a0:72:cc:61:7d:69:19:86:
                    1f:aa:bf:ca:b5:f3:0c:59:bf:dd:cc:b9:b6:63:ac:
                    7e:6f:3a:3d:51:d3:db:94:a2:9f:f2:eb:06:2c:96:
                    e2:c9:b4:29:04:0a:23:94:05:90:4e:1a:4c:f5:82:
                    de:9e:5c:17:10:65:10:09:a9:a4:b4:26:dc:a1:e8:
                    81:f7:52:4f:1d:7f:cd:25:95:85:c1:63:d7:68:67:
                    63:69:44:d5:96:81:8a:96:25:eb:64:05:2c:25:fe:
                    11:9c:a9:21:cb:b2:fe:09:fe:60:b1:b4:f5:e0:30:
                    d3:44:3e:c7:74:58:44:db:51:52:90:af:ec:81:78:
                    ff:21:46:67:5f:b3:95:77:11:26:a3:53:af:b7:a8:
                    cd:d4:ea:4c:f8:cc:7f:36:36:29:3f:31:b2:e6:00:
                    27:d5:7c:f3:53:7f:5e:36:d2:95:e9:1c:6d:5d:66:
                    b7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:15:EF:9F:13:D2:41:E9:44:38:BF:57:47:4D:FC:34:CB:05:61:98
            X509v3 Authority Key Identifier:
                keyid:F5:87:85:03:76:B7:8E:01:2E:D0:2A:D1:04:B6:28:73:73:70:79:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/1/F587850376B78E012ED02AD104B6287373707975.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F587850376B78E012ED02AD104B6287373707975.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/1/323830343a323631343a3a2f33322d3334203d3e203532363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2614::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:17:3d:a8:ef:b5:42:c8:9f:30:e2:28:de:39:ed:0f:1c:dc:
         bb:f8:5b:02:d4:dd:c8:cc:5e:ca:44:86:cf:f9:df:5d:f9:48:
         83:04:e2:b6:31:8b:90:e4:10:b3:94:de:bd:59:f9:6c:31:3d:
         ef:bc:75:1e:60:68:20:e0:41:4b:d5:43:ee:92:e7:5a:4d:24:
         79:6c:46:42:43:0f:95:af:7f:11:f1:1c:25:33:35:63:6d:1d:
         4e:a9:33:55:d6:59:6d:86:cb:e1:19:e8:20:48:2a:5f:fb:c5:
         c7:09:88:bf:f0:4f:7a:6f:cc:1c:b0:aa:00:64:60:9e:0f:29:
         04:83:83:1e:48:95:64:7c:95:b0:fa:32:07:35:89:57:2b:98:
         31:98:5a:51:01:e1:00:bc:89:78:93:83:98:5e:a9:bf:a8:fb:
         76:ee:c5:03:d5:ee:c0:3b:d4:a7:04:eb:05:34:78:f1:5d:58:
         69:c5:a5:86:fb:66:d4:2e:d8:61:10:09:db:30:db:91:c6:37:
         43:71:e3:b4:a7:6f:40:cd:0a:d3:c0:9d:5b:12:d8:07:e3:fd:
         07:1d:78:ce:b2:3d:60:e4:9f:8c:56:3a:be:48:54:b7:4f:fc:
         c4:4a:97:2b:e9:b6:a0:86:db:5f:50:41:c9:54:03:ff:ef:23:
         a1:54:ac:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:22 2024 by rpki-client on console-ams.rpki-client.org