Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a3a2f33322d3332203d3e20323731303031.roa
File:                     323830343a373463303a3a2f33322d3332203d3e20323731303031.roa (raw, json)
Hash identifier:          NolVbV45ZnsIe8MkYaF02/Xh9X45tP9VeTH5APIKeJE=
Subject key identifier:   BC:FF:09:C8:80:63:7B:B8:75:E9:91:EA:1E:D6:6A:2D:95:D9:11:E9
Certificate issuer:       /CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
Certificate serial:       5CB82FFBF5C7449AA92D2228A1C0A99126CAAB69
Authority key identifier: B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a3a2f33322d3332203d3e20323731303031.roa
Signing time:             Thu 04 Apr 2024 01:51:16 +0000
ROA not before:           Thu 04 Apr 2024 01:46:16 +0000
ROA not after:            Thu 03 Apr 2025 01:51:16 +0000
asID:                     271001
IP address blocks:        2804:74c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl
                          rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b8:2f:fb:f5:c7:44:9a:a9:2d:22:28:a1:c0:a9:91:26:ca:ab:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
        Validity
            Not Before: Apr  4 01:46:16 2024 GMT
            Not After : Apr  3 01:51:16 2025 GMT
        Subject: CN=BCFF09C880637BB875E991EA1ED66A2D95D911E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:70:e4:3e:8e:90:ca:7b:bf:d7:e8:b2:46:9d:
                    5c:54:13:5a:d4:ff:09:a1:f7:a7:1f:fe:13:7a:c3:
                    50:54:29:b5:64:91:0c:d2:db:56:25:29:77:da:54:
                    55:ec:65:c6:bd:45:64:ea:bc:88:06:f5:d6:55:29:
                    7d:ff:9e:7a:e9:54:e4:66:65:40:ef:ef:64:f4:36:
                    bf:69:47:e7:48:91:34:39:69:87:28:d3:3b:45:a6:
                    33:3e:dc:ca:e0:55:3a:54:87:4e:66:e4:c5:b8:a1:
                    d5:b0:24:93:92:11:38:61:3c:7a:a4:8a:5e:44:86:
                    09:b8:f2:fc:8c:07:87:fe:06:70:91:9e:46:aa:6e:
                    f7:93:04:69:e6:16:39:88:a6:32:41:41:61:d4:dc:
                    b2:46:a9:19:c4:1c:68:72:d1:66:e7:75:28:65:78:
                    b5:7e:f1:11:de:fc:db:c9:db:ec:d7:7f:0e:ec:54:
                    c3:22:40:02:34:1d:da:e3:6b:eb:ff:e3:99:81:1a:
                    6a:8c:d2:77:84:fa:15:09:7c:6c:fe:f4:c6:43:04:
                    48:84:72:1c:e9:93:9a:52:2c:19:cf:e4:b2:c0:93:
                    91:92:e9:69:f2:5a:1a:67:fe:32:ee:ed:b6:0f:73:
                    2a:bd:ab:55:18:35:56:9f:52:bf:31:b4:55:05:41:
                    7a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FF:09:C8:80:63:7B:B8:75:E9:91:EA:1E:D6:6A:2D:95:D9:11:E9
            X509v3 Authority Key Identifier:
                keyid:B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a3a2f33322d3332203d3e20323731303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:dc:37:df:cc:92:0d:b8:90:2b:11:c1:f0:63:8f:3b:d2:06:
         f0:a1:1f:f9:a2:9a:a2:d9:79:41:79:84:ad:20:f6:49:2d:ca:
         88:05:11:6b:31:7d:60:7b:ba:0d:3f:6d:af:8c:83:04:7b:26:
         87:8a:17:91:28:b9:b1:16:2b:fd:6f:cf:1a:b6:cd:db:d0:01:
         16:86:c2:0d:b2:61:ba:88:76:ff:74:35:06:62:82:61:d1:97:
         f4:f2:a8:86:34:72:a3:ab:06:04:2d:71:93:5a:05:1c:23:83:
         11:7c:0b:c6:4c:62:98:72:6d:de:b8:b8:d2:c3:d7:f7:6a:44:
         14:03:85:80:ca:e1:23:ac:39:d8:b3:a3:77:e8:6b:ca:1a:ee:
         54:54:45:f1:20:a7:e3:c5:55:68:3c:d2:78:0e:6f:f1:8e:1f:
         41:75:0f:bc:0a:2c:af:59:72:ba:61:3b:4c:5c:cd:7a:04:e6:
         a5:8c:c4:55:53:ec:63:a8:19:c9:14:bd:9b:52:2c:ba:d3:48:
         ed:da:d4:19:bf:b4:de:d0:31:cd:ec:86:57:16:8e:86:ba:fb:
         e5:ac:d9:64:64:8e:c0:f6:82:cb:c1:3c:e5:d6:6d:80:b5:4a:
         da:74:b0:2b:c4:ff:75:26:1d:90:44:e6:69:d7:5e:5e:42:32:
         06:5b:86:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:14 2024 by rpki-client on console-ams.rpki-client.org