Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/323830343a373762303a3a2f33322d3634203d3e203532363339.roa
File:                     323830343a373762303a3a2f33322d3634203d3e203532363339.roa (raw, json)
Hash identifier:          QchoV7jIBIOMvOamJR/9SehzSaCHT+qSfPL9jBM8s1M=
Subject key identifier:   6E:81:B8:3F:57:A4:EC:A0:BC:CA:E8:F6:32:B7:03:AE:7D:32:22:CF
Certificate issuer:       /CN=BF45F5442049793490E484E18AD1516C8FDC8087
Certificate serial:       1123788F5290D25BF5378D6A369613BBDCFC1215
Authority key identifier: BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/323830343a373762303a3a2f33322d3634203d3e203532363339.roa
Signing time:             Wed 03 Apr 2024 23:28:27 +0000
ROA not before:           Wed 03 Apr 2024 23:23:27 +0000
ROA not after:            Wed 02 Apr 2025 23:28:27 +0000
asID:                     52639
IP address blocks:        2804:77b0::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl
                          rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:23:78:8f:52:90:d2:5b:f5:37:8d:6a:36:96:13:bb:dc:fc:12:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF45F5442049793490E484E18AD1516C8FDC8087
        Validity
            Not Before: Apr  3 23:23:27 2024 GMT
            Not After : Apr  2 23:28:27 2025 GMT
        Subject: CN=6E81B83F57A4ECA0BCCAE8F632B703AE7D3222CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a1:d2:85:9e:3e:1a:07:e9:74:55:06:91:d5:
                    00:1b:10:19:8a:75:7b:94:e7:6d:1a:27:3f:f3:67:
                    1d:6c:ec:88:ca:af:6c:41:55:aa:67:4b:10:0a:7d:
                    2d:2b:d6:32:73:45:3b:a0:df:02:f0:a5:27:25:e6:
                    ba:f4:2c:d5:89:e0:60:4e:92:0b:a7:8f:03:68:99:
                    fc:e6:99:fc:fc:ff:35:20:19:b2:a6:fe:f4:bd:19:
                    eb:38:61:6e:32:a6:51:ab:a4:6d:28:ce:ab:80:32:
                    86:a6:6a:2a:55:1a:56:ea:e9:1b:50:c7:b9:8e:f4:
                    13:22:ff:2a:f4:01:4a:80:b5:ae:0e:ce:00:fc:8c:
                    78:01:b5:13:48:d3:8a:d7:eb:f2:29:55:36:b3:fc:
                    d8:96:5a:8c:e6:11:e2:d8:0e:68:e3:fa:5b:ca:d4:
                    ca:9a:7c:64:28:cf:4c:7c:7b:c9:1c:e4:74:53:64:
                    83:bd:7c:56:75:0d:50:55:87:03:cb:45:ec:66:02:
                    a4:9d:fe:76:b1:b8:a6:b1:e7:19:32:a5:2f:4f:68:
                    0b:25:71:cd:2c:b3:2e:c8:80:50:76:8c:7d:0b:d4:
                    de:31:75:79:ed:b7:38:aa:ae:e3:a9:62:df:6a:ea:
                    a4:30:1d:96:b9:6d:ef:b6:18:3d:1a:a0:6d:f5:da:
                    29:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:81:B8:3F:57:A4:EC:A0:BC:CA:E8:F6:32:B7:03:AE:7D:32:22:CF
            X509v3 Authority Key Identifier:
                keyid:BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/323830343a373762303a3a2f33322d3634203d3e203532363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:cf:ab:ae:3a:13:7a:de:3f:6f:22:e1:28:1e:58:63:02:23:
         58:c7:0b:2c:1a:9a:80:b6:e5:f4:e6:06:e1:0f:aa:b3:99:17:
         fb:3a:7d:3a:4a:3c:56:a6:09:56:ac:20:10:96:c6:de:27:bf:
         fb:79:66:51:19:6b:a6:23:9a:84:b6:34:23:b1:a8:0c:6c:c9:
         c1:7d:92:57:80:49:b5:c9:f4:a0:4a:2c:94:f4:c5:9d:29:ab:
         f1:e8:bd:87:63:57:22:6a:d8:31:00:b9:cb:c1:05:f0:37:01:
         bc:ea:6e:e4:a5:90:c9:6d:98:26:56:19:78:23:51:10:2f:5f:
         72:d8:86:8f:01:69:09:79:70:d9:3d:45:80:d3:a7:f5:55:c5:
         63:15:58:25:8a:83:39:0b:15:fe:6f:ef:c8:2c:6a:12:b6:d3:
         c1:2f:ff:26:35:62:21:44:7b:9e:47:78:30:72:68:01:7c:3f:
         07:87:bf:1f:73:a2:4d:38:37:28:1b:8a:c2:ba:82:da:cf:9d:
         4b:4b:90:2f:86:ad:8c:fa:cc:d6:3f:9a:8e:ad:b2:bf:8b:b2:
         bc:23:c0:79:d6:5b:ff:11:f0:dd:c7:a8:26:ff:26:62:a6:6b:
         ed:d9:eb:89:76:8a:f9:e9:83:19:c7:b4:74:10:ae:77:ee:6f:
         99:e2:a7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:27 2024 by rpki-client on console-ams.rpki-client.org