Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/323830343a3535343a3a2f33322d3438203d3e203533313433.roa
File:                     323830343a3535343a3a2f33322d3438203d3e203533313433.roa (raw, json)
Hash identifier:          f9MdFuI5hRRggl1GJcQY/ROSNlk97vyRXvOQPscxKB0=
Subject key identifier:   D6:4F:9C:0D:B2:AD:F5:52:58:52:E9:1C:88:D0:E3:B3:56:1E:5C:06
Certificate issuer:       /CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
Certificate serial:       06FBB794F9C8E691E63730675A1216D790A65E8F
Authority key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/323830343a3535343a3a2f33322d3438203d3e203533313433.roa
Signing time:             Mon 08 Jul 2024 19:43:08 +0000
ROA not before:           Mon 08 Jul 2024 19:38:08 +0000
ROA not after:            Mon 07 Jul 2025 19:43:08 +0000
asID:                     53143
IP address blocks:        2804:554::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 Nov 2024 21:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fb:b7:94:f9:c8:e6:91:e6:37:30:67:5a:12:16:d7:90:a6:5e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
        Validity
            Not Before: Jul  8 19:38:08 2024 GMT
            Not After : Jul  7 19:43:08 2025 GMT
        Subject: CN=D64F9C0DB2ADF5525852E91C88D0E3B3561E5C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:28:b1:a4:01:e3:1f:99:ce:7a:41:c9:68:6f:
                    b1:5a:ab:54:81:25:10:8c:6d:7b:6c:e2:9e:70:2b:
                    7b:8e:bd:77:fd:12:a4:b8:8f:67:ee:d3:da:a4:f5:
                    f8:0a:6f:c6:4a:87:3b:eb:11:0e:f3:4c:3c:17:7c:
                    58:c4:55:9b:70:e5:83:fb:c3:6f:e0:1a:d2:04:d4:
                    0e:05:b7:be:f8:31:2a:0b:4d:70:71:46:aa:94:64:
                    6e:77:e8:eb:f7:8a:cf:7b:9f:56:c3:0e:79:7f:98:
                    0b:3b:12:cf:84:ea:32:76:fa:42:dd:03:c9:90:14:
                    e6:27:ae:61:fb:93:4a:2b:2e:2d:71:8e:d3:39:34:
                    b6:d6:6c:e1:96:2e:06:df:54:24:d1:5a:47:e8:20:
                    b5:9a:8f:d8:46:ed:d4:9f:fc:39:ca:71:4f:72:5e:
                    96:a6:ae:7e:11:42:24:81:23:1a:f1:2a:2e:df:cc:
                    11:7f:1a:c4:70:71:cf:8b:14:fa:d2:08:42:67:89:
                    d6:c0:b1:c4:7f:df:a9:ef:bf:39:b6:a3:aa:12:3d:
                    9b:23:58:3c:bc:87:c2:a5:5a:a1:c0:cf:93:44:2c:
                    8a:09:58:c8:65:0f:4d:c9:23:64:d8:c4:ef:7c:9e:
                    ca:76:6c:1e:95:c1:69:81:f0:1d:a8:b4:73:b8:2d:
                    7d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4F:9C:0D:B2:AD:F5:52:58:52:E9:1C:88:D0:E3:B3:56:1E:5C:06
            X509v3 Authority Key Identifier:
                keyid:0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/323830343a3535343a3a2f33322d3438203d3e203533313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:554::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:19:d0:93:91:fe:7d:17:b2:b4:88:22:c0:d3:a5:28:33:8d:
         fb:c0:6f:b6:07:e8:ae:48:87:a3:9d:d7:8f:b6:93:d4:4d:99:
         46:81:46:5c:b2:ed:4c:c8:c4:60:42:4d:b9:20:43:e2:a9:75:
         7c:cd:98:fd:7d:d7:d5:0c:d9:cc:6a:47:71:d8:a1:b3:d8:40:
         54:d8:63:c4:ee:70:8f:7c:56:27:e2:b8:db:b8:0b:e7:7c:a5:
         fc:40:35:85:ee:03:3e:8b:79:18:c8:98:f8:ab:b1:43:75:a6:
         33:1c:5a:59:00:4d:c2:4d:29:9c:14:4c:28:5e:20:54:37:6e:
         67:45:e5:fd:9f:29:e9:d3:08:f1:80:01:28:06:9a:47:ed:f6:
         d0:92:9f:02:2f:23:74:5c:fe:f1:9b:ee:4f:3e:c3:ed:63:bc:
         02:09:d9:e1:ba:32:7c:54:47:c6:8f:5f:b9:a9:aa:e5:a1:b7:
         a9:f7:c1:2c:c8:da:bf:51:8d:4b:27:36:5d:55:c7:a7:1a:41:
         ca:71:d1:1a:b0:fe:26:a6:af:d4:58:89:44:e6:ab:b9:36:a2:
         49:6e:52:70:93:4a:53:60:8e:98:c2:fe:45:c9:10:ea:76:a8:
         01:f4:c1:de:9a:9e:54:72:ce:74:18:04:f2:2e:c4:5b:80:e7:
         2a:7f:ba:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 02:55:59 2024 by rpki-client on console-ams.rpki-client.org