Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a3a2f33322d3332203d3e203532363133.roa
File:                     323830343a6433633a3a2f33322d3332203d3e203532363133.roa (raw, json)
Hash identifier:          SuEXdpxpeUr3Fm1+duw/TVGFh85W3+U/9bSGMC7DY+Y=
Subject key identifier:   8F:AC:1F:DE:3D:F8:81:6E:15:67:3D:80:68:F0:EA:95:EE:A2:DF:E8
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       0AA96E7172D5A9530F212B8CD49E6DDEC2153103
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a3a2f33322d3332203d3e203532363133.roa
Signing time:             Thu 04 Apr 2024 09:18:14 +0000
ROA not before:           Thu 04 Apr 2024 09:13:14 +0000
ROA not after:            Thu 03 Apr 2025 09:18:14 +0000
asID:                     52613
IP address blocks:        2804:d3c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a9:6e:71:72:d5:a9:53:0f:21:2b:8c:d4:9e:6d:de:c2:15:31:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Apr  4 09:13:14 2024 GMT
            Not After : Apr  3 09:18:14 2025 GMT
        Subject: CN=8FAC1FDE3DF8816E15673D8068F0EA95EEA2DFE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:37:7d:6d:3f:e1:29:44:27:56:19:fb:c1:8c:
                    c1:9d:be:89:a6:e0:ab:01:00:41:9c:41:b9:71:2a:
                    ef:19:b9:c2:e6:6e:d5:70:14:35:11:40:fa:40:b8:
                    d4:e3:8c:85:cb:e7:e9:1c:f7:e4:82:25:25:56:32:
                    d0:4f:8d:73:85:90:30:dd:1d:e9:c0:2b:49:8a:66:
                    fc:c1:4b:85:6b:61:06:b3:bd:24:3a:50:e7:ce:a1:
                    81:c0:3e:6a:2c:8f:da:be:3f:35:ce:1f:0d:a8:99:
                    25:37:ba:71:f3:6b:ac:e6:3d:36:86:5a:c8:42:a4:
                    b1:62:27:f5:17:1a:44:3f:f9:27:35:b1:bd:31:af:
                    b3:ff:71:13:1a:a9:d0:bd:d1:b3:1e:ae:e7:37:c7:
                    26:56:92:1d:ad:a2:0b:f8:73:a8:31:f7:1d:fd:3d:
                    97:58:40:c0:5f:b2:a6:98:2a:1d:96:00:fd:66:c9:
                    46:46:90:b1:d0:3c:90:27:ef:3e:34:42:d9:49:4d:
                    82:33:6e:31:21:b1:0c:a3:ca:04:2b:47:21:b5:1b:
                    83:21:57:3e:eb:df:ea:55:ca:48:d8:65:45:a4:b2:
                    0d:98:7d:c0:60:92:8e:2a:f4:b9:d8:28:2f:71:2f:
                    4a:9b:8c:ef:27:1c:26:85:56:d2:7c:76:62:8b:1b:
                    de:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AC:1F:DE:3D:F8:81:6E:15:67:3D:80:68:F0:EA:95:EE:A2:DF:E8
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a3a2f33322d3332203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:c5:18:a8:2b:22:31:f1:3b:3a:8e:02:44:95:88:61:79:10:
         26:26:db:1e:07:55:7d:90:2c:f4:ec:d5:ea:7e:16:7d:8e:d0:
         ed:ed:92:2a:67:cc:db:34:8d:cb:c1:c1:eb:34:31:79:b3:eb:
         92:32:53:72:09:51:7b:06:ed:68:22:6d:4c:5b:72:44:04:b8:
         86:43:9e:b8:60:e4:a1:16:6c:36:4a:ae:ec:ed:d3:96:4a:6a:
         b5:c7:74:93:a6:b1:a3:59:51:a6:8e:bd:a3:d7:2e:49:5f:3d:
         65:a0:a2:f7:66:fa:ac:79:4a:83:a3:2d:86:ff:77:59:da:e9:
         30:01:1d:91:b3:21:c4:35:d4:3b:05:7b:cd:51:27:58:ef:74:
         94:73:08:ff:85:42:d0:67:21:21:ee:0d:32:51:14:4c:8e:7e:
         8b:02:ce:15:36:52:6a:67:1d:65:d0:bf:3a:5e:d4:83:4f:1a:
         24:6e:57:3d:74:64:f7:d5:eb:93:cb:f4:4a:1e:ce:fe:42:fe:
         04:a9:da:a7:ec:8f:96:84:dc:71:c1:51:6e:cb:42:cb:1d:4c:
         7e:44:90:74:3a:66:fc:7e:b2:a3:85:46:fd:22:71:af:53:fc:
         7b:77:71:37:8e:fb:2b:51:ab:ec:5c:cb:b4:0a:b1:b1:1b:5a:
         d3:e3:62:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:08 2024 by rpki-client on console-ams.rpki-client.org