Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/1/323830343a3135303a3a2f33302d3438203d3e203130393534.roa
File:                     323830343a3135303a3a2f33302d3438203d3e203130393534.roa (raw, json)
Hash identifier:          shraGG4drGpk0nQ87PyWGKEtZO7JpuE5/cu6c0RWm40=
Subject key identifier:   FD:74:95:A9:3D:6A:E8:30:97:39:F4:58:14:9E:11:EE:A5:92:F7:52
Certificate issuer:       /CN=A53BAC0561132599AF29A68050BD1EAB5939EAC5
Certificate serial:       471F86EBD5930C7B7C9727234CB213AA5927D51D
Authority key identifier: A5:3B:AC:05:61:13:25:99:AF:29:A6:80:50:BD:1E:AB:59:39:EA:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A53BAC0561132599AF29A68050BD1EAB5939EAC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/1/323830343a3135303a3a2f33302d3438203d3e203130393534.roa
Signing time:             Thu 04 Apr 2024 13:51:10 +0000
ROA not before:           Thu 04 Apr 2024 13:46:10 +0000
ROA not after:            Thu 03 Apr 2025 13:51:10 +0000
asID:                     10954
IP address blocks:        2804:150::/30 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/1/A53BAC0561132599AF29A68050BD1EAB5939EAC5.crl
                          rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/1/A53BAC0561132599AF29A68050BD1EAB5939EAC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A53BAC0561132599AF29A68050BD1EAB5939EAC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1f:86:eb:d5:93:0c:7b:7c:97:27:23:4c:b2:13:aa:59:27:d5:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A53BAC0561132599AF29A68050BD1EAB5939EAC5
        Validity
            Not Before: Apr  4 13:46:10 2024 GMT
            Not After : Apr  3 13:51:10 2025 GMT
        Subject: CN=FD7495A93D6AE8309739F458149E11EEA592F752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f0:22:69:f4:a6:72:10:40:2f:ca:ea:db:06:
                    a9:bf:44:3e:8b:74:12:14:88:ed:67:b5:f4:00:25:
                    08:35:ce:a2:9a:86:a9:18:05:d1:2d:e2:8e:fc:b4:
                    0a:09:00:92:45:05:32:18:71:24:02:b3:75:57:9f:
                    a8:17:ca:14:8a:c9:5e:0e:80:00:08:87:b3:98:80:
                    53:d6:96:d3:b8:f0:89:c4:5b:b8:46:60:f7:2f:ad:
                    d9:86:ec:ac:40:e5:8a:e7:7d:43:97:6e:f6:98:03:
                    d6:8c:9b:c3:fa:f0:ed:0e:8e:ab:8d:5e:71:ac:ec:
                    49:3e:11:40:ec:f6:ed:ff:f3:3c:4c:12:e1:a1:91:
                    78:13:b4:c5:06:d8:27:c3:e9:ee:63:08:66:ba:8d:
                    83:d5:0d:9b:96:50:f0:b9:18:64:b2:66:d0:2b:b1:
                    c4:90:c1:02:1e:dd:89:9c:8a:1c:fe:a7:d8:41:42:
                    b0:81:5e:c8:7a:ca:7b:a7:89:77:2b:b6:29:19:10:
                    7d:ee:34:98:81:37:2d:a4:2d:ca:6e:89:ee:35:3c:
                    46:bc:5c:8e:fa:7b:24:fd:95:ab:71:13:2c:df:ce:
                    74:af:3f:2c:2b:eb:5d:eb:8e:98:83:f2:1a:77:ff:
                    2d:d0:00:4d:e1:e3:a6:20:12:de:60:13:f4:93:45:
                    3c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:74:95:A9:3D:6A:E8:30:97:39:F4:58:14:9E:11:EE:A5:92:F7:52
            X509v3 Authority Key Identifier:
                keyid:A5:3B:AC:05:61:13:25:99:AF:29:A6:80:50:BD:1E:AB:59:39:EA:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/1/A53BAC0561132599AF29A68050BD1EAB5939EAC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A53BAC0561132599AF29A68050BD1EAB5939EAC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/1/323830343a3135303a3a2f33302d3438203d3e203130393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:150::/30

    Signature Algorithm: sha256WithRSAEncryption
         2a:e5:8d:c8:61:ae:14:8a:1d:39:5b:56:12:98:9f:6f:2b:c6:
         61:b0:13:76:d6:f4:3a:dd:29:ee:d2:6b:21:f2:38:8b:0a:64:
         4e:e2:b3:c9:37:71:8e:e1:93:0e:9b:36:64:7d:db:eb:dd:72:
         9c:6e:89:1f:90:ee:80:e5:0a:4c:9b:fd:37:9e:60:89:28:2b:
         c3:49:1f:85:c9:6f:fe:4b:e6:b2:25:aa:47:57:d7:eb:4d:3a:
         eb:88:27:2b:8d:b5:5e:07:91:60:09:63:9c:0f:6e:f0:d1:bb:
         db:95:b4:4a:73:96:11:4c:48:57:bc:f7:e3:e0:67:e1:df:da:
         ff:7c:71:0e:7d:8b:0f:1e:24:9b:68:55:0b:8b:91:46:c2:37:
         48:90:6e:4f:3f:f7:7f:c2:a5:0a:2c:ed:86:fc:45:a2:70:f1:
         3f:f4:fc:07:b3:92:b2:0f:63:0a:8b:55:8a:40:0c:b8:af:57:
         c1:34:eb:3e:ae:a5:e0:ea:6f:2b:52:f4:46:d2:b4:dd:f7:c4:
         48:86:77:a8:42:11:d9:2e:64:f8:db:c8:b0:88:b7:b2:43:e4:
         22:66:87:54:7c:d0:95:12:fd:e0:26:63:b7:10:86:0f:60:03:
         ff:a2:4e:18:0f:1a:6f:6c:c2:a3:90:fd:dd:64:93:7b:fe:a7:
         fc:5d:2d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:18 2024 by rpki-client on console-ams.rpki-client.org