Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a6534633a363030303a3a2f33382d3338203d3e203533313733.roa
File:                     323830343a6534633a363030303a3a2f33382d3338203d3e203533313733.roa (raw, json)
Hash identifier:          R5RrO2o5ONqvG1tuvNdZVDxyoROTbwKkmEjLcWO4flw=
Subject key identifier:   0B:14:44:39:2E:F1:33:9F:70:B1:1A:5C:ED:3E:7E:9E:7A:28:3C:3B
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       7AA71FBBBA186B48E51DD850F01356891EB65E2E
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a6534633a363030303a3a2f33382d3338203d3e203533313733.roa
Signing time:             Thu 04 Apr 2024 02:26:13 +0000
ROA not before:           Thu 04 Apr 2024 02:21:13 +0000
ROA not after:            Thu 03 Apr 2025 02:26:13 +0000
asID:                     53173
IP address blocks:        2804:e4c:6000::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a7:1f:bb:ba:18:6b:48:e5:1d:d8:50:f0:13:56:89:1e:b6:5e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:13 2024 GMT
            Not After : Apr  3 02:26:13 2025 GMT
        Subject: CN=0B1444392EF1339F70B11A5CED3E7E9E7A283C3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:1f:3e:16:d1:6a:0c:0a:87:16:a8:1b:59:82:
                    3e:4c:81:9e:95:56:ef:c1:a5:0c:bf:98:22:3e:7f:
                    58:74:67:e8:9f:d0:ef:9c:57:85:e3:6e:30:77:08:
                    cd:b3:7b:44:b0:53:c4:01:95:3e:b2:43:c2:16:0b:
                    90:e4:5d:ca:d7:a7:42:5b:2a:78:35:b9:d7:5c:70:
                    1b:0a:fb:f0:11:3e:73:86:5e:5f:f0:0b:5a:f7:1c:
                    9a:82:7e:77:f6:89:ac:f8:13:55:9f:28:6b:63:0c:
                    3b:9f:17:0e:60:a6:c1:ed:32:01:25:d8:11:97:29:
                    d9:55:a2:fd:b4:ab:54:f2:59:b6:fe:e1:3b:d5:6f:
                    e4:7a:9d:a1:4d:ed:fc:43:6a:f8:98:53:69:b7:aa:
                    75:c1:83:78:9b:1f:78:4a:da:f3:59:1e:46:e0:1c:
                    71:9d:74:1e:d1:24:97:40:9f:45:d6:5f:50:d6:02:
                    9f:b3:24:22:6e:38:f9:de:50:37:41:6d:23:74:f9:
                    0e:51:ab:d7:b7:fc:f1:ed:4b:3c:bf:89:3d:52:73:
                    31:c3:a1:00:31:c8:ef:96:99:db:ac:21:ed:96:a8:
                    8a:a0:7d:1d:76:d4:d7:13:88:59:ed:8a:34:f3:25:
                    e7:b7:de:53:c7:d5:cc:07:5f:49:15:1d:68:18:b7:
                    60:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:14:44:39:2E:F1:33:9F:70:B1:1A:5C:ED:3E:7E:9E:7A:28:3C:3B
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a6534633a363030303a3a2f33382d3338203d3e203533313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e4c:6000::/38

    Signature Algorithm: sha256WithRSAEncryption
         1d:fc:5a:44:83:f9:4e:8d:37:51:3c:dc:b0:18:d6:c5:d3:b1:
         50:e9:d7:eb:4b:5b:a5:69:24:42:3a:1d:2f:de:00:f9:3c:e7:
         79:97:d1:17:95:1b:a8:a7:72:e7:f7:e8:d9:bc:f1:8d:ff:a8:
         ef:81:ae:e5:99:6d:6a:ee:ce:4f:82:48:29:d9:b5:dc:9d:19:
         8a:57:f6:f7:99:c3:e8:60:8f:43:dd:75:97:b0:95:21:8d:d5:
         de:7c:d6:7d:49:52:c8:83:c4:74:76:ef:d3:ff:aa:1c:53:11:
         c3:11:cc:8a:fd:7d:e5:cc:75:9d:1b:fe:e4:52:5f:c4:5b:6b:
         a2:c8:77:db:3e:36:35:8d:a5:94:8a:51:c1:58:fb:0e:6b:69:
         76:6f:f0:8c:e2:40:ec:12:f6:d5:7f:70:32:eb:d0:24:f6:44:
         9a:c4:f7:b7:26:ae:66:5d:70:a5:75:62:55:3f:e6:c9:2b:fb:
         66:9e:c7:c2:11:63:aa:b5:7f:9d:3a:cd:2d:e0:a9:25:6c:72:
         7d:7b:3a:15:75:3a:95:0d:1e:1a:08:1e:6e:1b:fb:16:79:02:
         4b:88:aa:45:ef:aa:f7:19:fa:84:3f:96:56:b6:bd:29:fb:66:
         c6:28:ec:f1:ac:f8:06:b2:db:c4:8e:94:ce:bc:18:b5:ec:8e:
         12:70:88:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:42 2024 by rpki-client on console-ams.rpki-client.org