Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/323830343a333138383a3a2f33322d3332203d3e20323635303232.roa
File:                     323830343a333138383a3a2f33322d3332203d3e20323635303232.roa (raw, json)
Hash identifier:          H9oWTgvDMfeslNC7s6VPeygYe6GBhEFrOO3Pn2E9zUU=
Subject key identifier:   DB:0A:62:CE:1D:4B:87:83:FC:61:D1:BD:CD:81:E0:1F:53:79:5C:6F
Certificate issuer:       /CN=75730747EE0CCC4C66AB50829F21FF172F57999D
Certificate serial:       48FC8709B3A9533864E64A160CE22B60A21BF316
Authority key identifier: 75:73:07:47:EE:0C:CC:4C:66:AB:50:82:9F:21:FF:17:2F:57:99:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75730747EE0CCC4C66AB50829F21FF172F57999D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/323830343a333138383a3a2f33322d3332203d3e20323635303232.roa
Signing time:             Thu 04 Apr 2024 05:48:28 +0000
ROA not before:           Thu 04 Apr 2024 05:43:28 +0000
ROA not after:            Thu 03 Apr 2025 05:48:28 +0000
asID:                     265022
IP address blocks:        2804:3188::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/75730747EE0CCC4C66AB50829F21FF172F57999D.crl
                          rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/75730747EE0CCC4C66AB50829F21FF172F57999D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75730747EE0CCC4C66AB50829F21FF172F57999D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:fc:87:09:b3:a9:53:38:64:e6:4a:16:0c:e2:2b:60:a2:1b:f3:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75730747EE0CCC4C66AB50829F21FF172F57999D
        Validity
            Not Before: Apr  4 05:43:28 2024 GMT
            Not After : Apr  3 05:48:28 2025 GMT
        Subject: CN=DB0A62CE1D4B8783FC61D1BDCD81E01F53795C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2b:6f:c5:39:66:be:8e:99:bb:8e:37:ab:d7:
                    7b:67:a8:aa:33:99:df:f4:70:24:d0:98:b1:ed:73:
                    d0:24:fe:c2:f1:ac:27:de:f0:a5:c7:a5:c9:ea:84:
                    98:78:cd:18:4c:8f:02:30:e2:a5:6b:5e:39:1c:38:
                    42:50:41:eb:02:42:9f:5d:19:81:0b:93:d6:c5:24:
                    70:d1:85:ff:a9:d0:4d:55:66:1b:77:67:78:a2:e9:
                    83:fa:3d:5f:a6:a4:6c:5e:7e:e7:ac:86:e5:ad:25:
                    41:d1:f2:38:99:e8:51:46:bf:cb:c1:3d:46:89:3b:
                    88:28:8d:b7:b5:1c:b3:21:fc:c8:d8:0b:23:07:1f:
                    c9:d1:b7:4e:71:76:40:39:b6:5d:cd:6b:42:0a:09:
                    9d:d7:d4:11:69:98:95:4e:2a:56:0b:28:0e:52:5a:
                    a7:60:44:e4:c7:55:5d:88:ec:d7:19:55:1f:86:b9:
                    69:ef:bc:83:54:27:b7:80:45:39:ff:f6:fe:80:00:
                    5f:96:4f:4c:e9:81:43:26:ad:82:d9:75:01:d0:98:
                    e8:ff:7d:0e:64:1f:68:6b:ad:6b:eb:05:fe:19:fa:
                    ae:8b:6e:65:91:59:67:9d:ee:d3:ee:a7:6f:f9:30:
                    68:81:c1:f4:27:4a:12:4c:cf:63:43:ca:ac:5f:a6:
                    e4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0A:62:CE:1D:4B:87:83:FC:61:D1:BD:CD:81:E0:1F:53:79:5C:6F
            X509v3 Authority Key Identifier:
                keyid:75:73:07:47:EE:0C:CC:4C:66:AB:50:82:9F:21:FF:17:2F:57:99:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/75730747EE0CCC4C66AB50829F21FF172F57999D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75730747EE0CCC4C66AB50829F21FF172F57999D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/323830343a333138383a3a2f33322d3332203d3e20323635303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3188::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:b8:b4:28:e5:11:43:35:01:cb:69:72:11:7b:51:29:ae:77:
         ac:35:4b:7a:e0:9f:95:f2:ad:2a:ec:d3:ef:26:6e:68:4c:df:
         a1:12:0b:80:ab:e8:f2:92:53:ad:78:b0:89:7c:61:94:52:d3:
         ad:ae:69:dd:82:25:31:8a:0d:df:bf:06:23:6a:3a:df:7e:b0:
         10:f2:3e:3e:83:1e:7f:6d:54:22:9c:16:84:fe:f2:ea:ce:c1:
         27:3e:fd:45:69:fb:a3:50:f7:12:f3:b9:bb:d7:87:8d:a6:60:
         6a:b3:64:94:4b:4b:62:fb:bc:6c:2c:9a:1d:7e:b1:7b:6b:02:
         de:7a:b4:5f:be:00:8b:e3:3d:8c:f2:ae:c8:84:ac:85:95:69:
         df:44:86:1a:33:00:2a:74:4e:e2:e3:49:cd:34:a3:46:71:21:
         5d:73:8b:0d:62:35:79:23:be:29:23:25:79:31:3a:97:40:27:
         12:fa:01:05:be:79:e7:70:d9:65:c3:54:e0:b4:f2:79:bc:32:
         30:03:e6:5d:5d:10:12:22:e0:64:49:e9:61:f4:ed:d6:74:fd:
         7b:63:dc:cc:30:db:d2:25:32:70:c0:d2:64:6c:52:cd:36:b5:
         55:3d:a2:93:98:4f:a9:4a:97:69:bf:7d:cc:65:34:77:e3:24:
         dc:39:e3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:02 2024 by rpki-client on console-fra.rpki-client.org