Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3330303a3a2f34322d3432203d3e2032363534313837.roa
File:                     323830343a326330303a3330303a3a2f34322d3432203d3e2032363534313837.roa (raw, json)
Hash identifier:          2iPCFf4q+37o3md8wRNWmVKHDbME4KDh3v9Vv/HAIRQ=
Subject key identifier:   E3:AD:57:23:D7:2E:33:D6:C8:41:58:BF:3E:47:31:C8:18:C2:C8:83
Certificate issuer:       /CN=81175370221E26181F39FB407E63064DEB20E6EE
Certificate serial:       5F79F33B99A7921107205E8A5863687A8B710C44
Authority key identifier: 81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3330303a3a2f34322d3432203d3e2032363534313837.roa
Signing time:             Thu 03 Aug 2023 19:00:00 +0000
ROA not before:           Thu 03 Aug 2023 18:55:00 +0000
ROA not after:            Thu 01 Aug 2024 19:00:00 +0000
asID:                     2654187
IP address blocks:        2804:2c00:300::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/81175370221E26181F39FB407E63064DEB20E6EE.crl
                          rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/81175370221E26181F39FB407E63064DEB20E6EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Mar 2024 04:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:79:f3:3b:99:a7:92:11:07:20:5e:8a:58:63:68:7a:8b:71:0c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81175370221E26181F39FB407E63064DEB20E6EE
        Validity
            Not Before: Aug  3 18:55:00 2023 GMT
            Not After : Aug  1 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ac:99:d4:04:52:91:5a:0d:cb:f7:03:c3:eb:
                    54:47:85:56:41:8d:81:f1:fb:89:07:05:d8:96:e9:
                    3f:d5:e3:80:ca:01:70:65:9f:05:e0:4b:19:b3:6a:
                    3d:83:f9:7a:2c:a9:cd:dd:b9:cb:73:72:05:81:84:
                    53:02:a5:64:1e:56:f9:1c:97:f3:b9:c9:85:41:7a:
                    eb:76:c2:89:3a:f4:aa:d0:6f:6c:d4:b8:ec:c6:24:
                    54:91:aa:91:f0:dc:5d:d2:b3:31:56:54:45:6a:53:
                    3f:5a:fa:00:19:84:5e:7d:f3:2e:4f:32:1e:8d:f4:
                    8b:8a:cb:19:01:31:9a:ef:29:8c:29:07:b5:4d:20:
                    9d:18:71:2a:0e:82:d5:70:33:8d:09:97:e3:5f:55:
                    94:55:5d:2d:c6:c9:d0:16:ed:11:33:81:2c:70:e3:
                    d1:12:12:01:13:fc:3c:3c:95:04:9a:aa:d3:a0:34:
                    98:8a:64:d2:e6:b8:51:9f:33:ac:e5:d4:07:bc:a9:
                    8b:bf:14:31:c7:57:29:65:c6:55:95:c9:e5:e3:61:
                    f1:61:4a:fb:c9:39:16:d1:48:44:d7:34:d2:83:b1:
                    00:d3:c7:44:99:5a:7f:ad:20:ca:d2:f6:05:ae:61:
                    17:94:90:b5:a1:d7:37:c2:96:dd:47:65:81:13:2e:
                    17:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AD:57:23:D7:2E:33:D6:C8:41:58:BF:3E:47:31:C8:18:C2:C8:83
            X509v3 Authority Key Identifier:
                keyid:81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/81175370221E26181F39FB407E63064DEB20E6EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3330303a3a2f34322d3432203d3e2032363534313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c00:300::/42

    Signature Algorithm: sha256WithRSAEncryption
         27:da:9d:49:4c:d1:06:12:92:16:56:cb:10:55:7f:b2:a0:5c:
         76:3a:b8:19:76:fc:0c:8a:99:57:57:e5:d4:53:f4:da:67:d0:
         56:98:81:60:c2:dd:5b:be:e5:cd:80:8d:1e:67:f3:8b:a3:91:
         f5:6b:a5:04:71:2b:ab:30:3d:b1:43:6d:aa:4f:d4:58:f2:b7:
         09:f8:a4:c4:5f:07:5d:8c:41:30:29:2a:91:46:01:d3:8c:24:
         72:7c:a6:c3:ee:3d:8b:0d:3f:e1:3a:ea:9e:b9:8f:13:bd:51:
         f8:60:9b:de:85:ec:55:69:6d:4e:31:36:af:80:19:67:16:16:
         5f:c5:ae:59:22:b1:59:56:41:f6:a3:be:bd:86:58:0a:bf:5d:
         f8:0d:ac:12:f6:4a:7e:13:6b:14:8c:6c:4e:5e:c7:24:63:35:
         44:fd:08:42:3f:a0:78:c0:4f:d9:21:cc:f5:ed:8e:3d:d1:e3:
         41:aa:d7:db:5f:38:87:75:a8:ef:3b:45:93:11:46:bb:3d:d9:
         ac:81:f4:3e:55:d8:a9:0f:4f:44:2c:74:91:0b:01:e9:e9:c7:
         03:9f:f6:5d:84:59:17:13:33:63:ff:57:6b:4d:6e:6d:0b:49:
         fb:7e:57:87:70:f7:39:f2:3b:b4:84:1f:4f:5c:6e:17:39:69:
         13:19:82:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 05:42:55 2024 by rpki-client on console-ams.rpki-client.org