Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3a2f33322d3332203d3e203532373732.roa
File:                     323830343a323539633a3a2f33322d3332203d3e203532373732.roa (raw, json)
Hash identifier:          3z2qh5grUiYNzTinBpLMoK+EMPbbRxp//UXhLGWk9XI=
Subject key identifier:   DC:D4:01:9B:36:AF:B0:DF:C2:F4:3C:4A:B7:D2:17:76:1E:6E:A4:60
Certificate issuer:       /CN=E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64
Certificate serial:       681AD18F4EF1F0D4AF9B5140884349C0987C69
Authority key identifier: E7:99:2D:D1:B2:52:5C:1F:90:08:B6:33:9B:9D:B3:ED:A6:E6:2E:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3a2f33322d3332203d3e203532373732.roa
Signing time:             Sat 31 Aug 2024 14:13:08 +0000
ROA not before:           Sat 31 Aug 2024 14:08:08 +0000
ROA not after:            Sat 30 Aug 2025 14:13:08 +0000
asID:                     52772
IP address blocks:        2804:259c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1a:d1:8f:4e:f1:f0:d4:af:9b:51:40:88:43:49:c0:98:7c:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64
        Validity
            Not Before: Aug 31 14:08:08 2024 GMT
            Not After : Aug 30 14:13:08 2025 GMT
        Subject: CN=DCD4019B36AFB0DFC2F43C4AB7D217761E6EA460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e6:5a:5e:14:5c:5b:78:e8:2b:f2:fb:01:15:
                    66:2c:61:2d:e6:3a:04:96:fc:a4:ea:c0:d8:cf:5d:
                    6a:89:10:9a:dc:fe:1d:63:6d:cb:cf:f2:d7:71:3d:
                    f5:51:8a:de:f7:b8:48:da:e1:38:d1:c8:87:1d:bd:
                    87:f9:bd:cc:4f:9a:5c:7d:09:3f:7c:b4:91:b4:3a:
                    93:5f:92:ec:3b:7a:d6:88:04:19:a3:ac:ac:ee:58:
                    cb:b2:65:33:f6:bb:37:65:cd:0f:20:a3:31:85:32:
                    94:4d:a6:bf:cb:a0:0d:48:f9:f2:5d:9d:a5:b7:57:
                    7c:11:40:6a:ba:eb:18:cf:d2:98:2e:a2:df:fc:58:
                    62:7d:44:b5:74:b1:34:87:ce:e2:4d:40:36:df:45:
                    dc:f2:ad:d9:63:0b:95:86:a3:5b:63:d4:70:45:fa:
                    5e:1b:c8:c7:75:3f:b2:59:07:39:a8:51:c3:55:fb:
                    3d:a1:48:d2:bb:7a:55:63:d7:ee:48:2a:c9:53:34:
                    ca:f9:8a:b1:97:df:cf:21:72:61:b3:37:3b:f0:b8:
                    51:fa:50:59:5e:de:15:d4:57:60:d4:61:d9:9d:0e:
                    bc:4d:ff:3d:8a:88:f4:26:27:08:8f:4d:3c:0b:3f:
                    95:cb:c1:e2:b7:27:e0:b5:eb:f5:30:54:85:e2:1a:
                    72:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D4:01:9B:36:AF:B0:DF:C2:F4:3C:4A:B7:D2:17:76:1E:6E:A4:60
            X509v3 Authority Key Identifier:
                keyid:E7:99:2D:D1:B2:52:5C:1F:90:08:B6:33:9B:9D:B3:ED:A6:E6:2E:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3a2f33322d3332203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:259c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:8f:1f:db:0b:d7:a4:b0:d0:21:15:8b:83:be:04:07:8e:9a:
         58:6e:ba:98:4f:ac:e4:a1:e2:7a:be:78:cc:80:2e:4a:1a:b1:
         5b:96:01:df:4a:b6:2f:f6:86:37:3d:da:12:21:f5:87:b9:a7:
         e2:e1:7c:e3:cb:b1:49:c7:78:77:e8:10:1b:a9:e0:32:8e:62:
         10:69:44:f5:96:de:5d:0d:23:ca:5c:09:4a:36:3b:92:a7:f9:
         f3:01:31:1d:80:c2:d7:2a:91:a0:4b:81:a7:8e:6d:6d:dc:65:
         d2:ea:7d:d7:6a:13:a1:16:1f:37:1e:22:4f:1a:c5:59:4a:de:
         ea:6d:a5:7c:4e:1b:90:20:d9:1f:92:fd:8c:15:e5:f4:ee:47:
         4f:d3:e5:78:5c:7b:c0:1b:8b:0d:66:81:6b:ca:4f:6e:1e:1c:
         bf:4e:cc:ff:08:ce:ee:c7:51:02:78:46:81:97:03:be:7b:bb:
         32:d6:2b:79:5a:03:c4:6f:f9:95:4c:0f:27:8b:02:a9:72:fa:
         6f:02:d8:22:ab:f4:16:cc:e1:40:89:31:3c:10:f1:91:a0:62:
         ad:f0:6d:43:22:52:63:b1:ad:0c:aa:5f:75:f9:83:98:7d:8b:
         33:24:c4:95:11:e2:56:bf:af:41:0a:be:f7:3d:b4:e5:13:6e:
         35:33:b0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:50 2024 by rpki-client on console-fra.rpki-client.org