Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/323830343a3562633a3a2f33322d3438203d3e203238363538.roa
File:                     323830343a3562633a3a2f33322d3438203d3e203238363538.roa (raw, json)
Hash identifier:          qU+MLKX3zSNrODn7G4UYjGrrFen2PZ5J7UEDW66HIqg=
Subject key identifier:   E7:1A:07:41:15:65:5F:8E:6C:C5:D3:5A:24:C0:74:20:D8:73:63:EF
Certificate issuer:       /CN=59D97368930A28A43621D32020C3E70B26E79708
Certificate serial:       74514771C59584DBAEB76FA762179B25F932D2A6
Authority key identifier: 59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/323830343a3562633a3a2f33322d3438203d3e203238363538.roa
Signing time:             Thu 04 Apr 2024 09:18:02 +0000
ROA not before:           Thu 04 Apr 2024 09:13:02 +0000
ROA not after:            Thu 03 Apr 2025 09:18:02 +0000
asID:                     28658
IP address blocks:        2804:5bc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:51:47:71:c5:95:84:db:ae:b7:6f:a7:62:17:9b:25:f9:32:d2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D97368930A28A43621D32020C3E70B26E79708
        Validity
            Not Before: Apr  4 09:13:02 2024 GMT
            Not After : Apr  3 09:18:02 2025 GMT
        Subject: CN=E71A074115655F8E6CC5D35A24C07420D87363EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ce:d3:be:ae:9e:1c:31:ed:c8:eb:66:18:b9:
                    31:2c:b9:2b:e9:8f:80:fc:b5:c3:97:bd:1c:80:9a:
                    33:38:ba:fd:88:d3:e6:ee:17:b4:8a:0d:e2:13:cb:
                    16:7b:b7:35:b5:a9:96:08:b3:b6:df:2c:51:c9:52:
                    b6:db:e9:6d:1c:27:81:0f:64:e4:d6:05:5e:fa:1b:
                    39:74:f7:0c:be:ab:d4:18:dc:03:1c:9d:7d:67:fe:
                    b8:4f:f9:58:5a:10:29:bf:9e:74:18:0a:78:bf:5d:
                    ae:bf:41:af:02:98:77:de:2b:53:7d:cd:89:f6:4c:
                    f8:1c:1e:01:3a:ce:ad:d2:52:66:23:be:da:27:89:
                    ec:4a:cb:66:5f:82:5f:c6:e7:de:7f:b7:0f:4f:19:
                    35:37:62:c5:77:61:06:6b:cc:fd:a7:85:84:db:9b:
                    77:54:ce:00:64:0c:da:00:f9:07:62:dd:89:07:5c:
                    04:d2:a7:22:b2:ed:a1:af:d9:15:d2:d1:3a:3e:34:
                    a4:2b:e6:4a:94:5a:d9:00:bd:95:4b:b5:87:3f:b7:
                    c4:f8:68:85:de:f0:71:89:da:2e:19:3a:0a:4a:16:
                    39:50:cb:d4:db:e4:04:d1:35:d5:e4:0e:db:c1:e2:
                    4d:d9:60:4f:ae:01:d4:a6:e6:00:c7:fc:e5:62:44:
                    04:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1A:07:41:15:65:5F:8E:6C:C5:D3:5A:24:C0:74:20:D8:73:63:EF
            X509v3 Authority Key Identifier:
                keyid:59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/323830343a3562633a3a2f33322d3438203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:e9:9f:40:ce:93:c4:b8:f3:44:88:9c:e3:38:5c:1e:a0:7b:
         7a:97:c1:71:ac:c4:98:c3:13:68:68:be:f7:e9:65:5a:a7:76:
         43:1a:4a:be:89:07:4d:9e:12:ad:bb:6b:e1:38:0a:c4:a7:40:
         e1:c1:29:00:6d:6f:6c:56:2d:12:f2:36:8a:70:9a:0b:47:6d:
         c0:13:af:1c:be:7f:77:95:14:40:54:0d:ae:01:5c:a2:f4:c5:
         5f:ac:1e:62:ed:86:07:8f:79:46:1d:c5:07:90:57:16:b8:fc:
         cd:3c:b6:93:8e:9e:11:1c:2b:d9:bd:7f:a6:74:d9:ca:5d:a4:
         e0:1f:cf:38:2f:11:96:d3:b4:ba:df:46:97:3f:91:a5:16:fb:
         c0:af:7a:ed:3b:79:f5:85:6f:74:b2:d5:56:9d:c9:62:a3:fb:
         40:f0:17:aa:b4:df:c1:11:b0:30:33:f8:04:d8:8f:d3:8e:20:
         c4:16:d9:86:8c:ba:c5:4c:6e:a9:17:e5:7a:05:c3:ee:6b:f6:
         b7:43:d0:1e:e5:25:6f:9d:a9:4a:95:f0:0b:c7:2a:94:ef:47:
         a2:2c:51:34:a7:68:fb:15:ea:1d:12:60:56:fd:5b:e9:07:06:
         d8:d5:e4:c2:8b:04:e5:2f:1e:ba:d3:a8:fa:c3:42:38:a3:e9:
         32:1a:86:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:11 2024 by rpki-client on console-ams.rpki-client.org