Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a3a2f33322d3332203d3e20323637393931.roa
File:                     323830343a353635343a3a2f33322d3332203d3e20323637393931.roa (raw, json)
Hash identifier:          oGHAx+ybJv3doHymQkZCXMuBVV246XFPwoVFWlFo2eM=
Subject key identifier:   14:0C:62:1D:74:FA:A2:50:3D:CE:84:BB:2F:97:7E:03:94:E8:B9:FB
Certificate issuer:       /CN=1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F
Certificate serial:       7CD9637A332732D741DC4E0DE2FC8AAE54078F60
Authority key identifier: 1F:73:8F:23:C0:91:FA:9E:A9:5E:B9:9A:0B:6D:76:AC:F2:55:3D:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a3a2f33322d3332203d3e20323637393931.roa
Signing time:             Tue 29 Oct 2024 21:13:13 +0000
ROA not before:           Tue 29 Oct 2024 21:08:13 +0000
ROA not after:            Tue 28 Oct 2025 21:13:13 +0000
asID:                     267991
IP address blocks:        2804:5654::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 20:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d9:63:7a:33:27:32:d7:41:dc:4e:0d:e2:fc:8a:ae:54:07:8f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F
        Validity
            Not Before: Oct 29 21:08:13 2024 GMT
            Not After : Oct 28 21:13:13 2025 GMT
        Subject: CN=140C621D74FAA2503DCE84BB2F977E0394E8B9FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:60:34:a9:13:3c:05:16:32:a1:34:4e:46:4c:
                    52:50:43:6d:f6:7a:45:f4:c8:52:16:2d:56:0a:4b:
                    89:28:55:c9:3a:9d:a6:d1:ac:ee:a8:55:6d:2e:56:
                    c4:cb:4d:54:7c:5b:e3:ef:83:a2:6c:86:85:a4:44:
                    0b:6b:42:56:24:d1:4a:64:47:51:05:cb:a9:0c:af:
                    a0:c9:96:ef:20:5d:80:8c:c9:bd:25:a6:43:8e:26:
                    d4:e7:e0:05:4f:36:33:c7:90:1b:57:bb:fd:94:e4:
                    81:36:de:09:ee:0f:eb:97:8c:68:f6:ae:08:74:d8:
                    16:69:7e:c0:9a:4d:6f:e8:91:ea:22:ba:86:87:67:
                    6f:5c:7c:9b:e8:55:0a:e5:b8:8b:d9:ba:3d:20:10:
                    ac:5f:2e:c4:2f:26:d7:56:6d:ea:44:e0:0f:43:fe:
                    93:5a:63:8a:85:a7:88:b9:0f:b2:72:70:24:aa:8f:
                    1b:2f:01:5e:0d:9b:9e:65:82:e9:3e:ae:2e:72:7a:
                    f8:c5:3d:fa:b8:2a:6c:cd:a1:c2:22:62:af:9e:33:
                    31:1c:c3:16:01:d5:1e:ba:41:dd:84:3d:65:5b:c1:
                    91:27:7a:c7:df:36:b0:65:f3:f1:c5:1f:6b:21:a6:
                    97:e0:1c:06:12:d9:c5:a8:1b:a7:bb:e5:b9:f1:4d:
                    37:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0C:62:1D:74:FA:A2:50:3D:CE:84:BB:2F:97:7E:03:94:E8:B9:FB
            X509v3 Authority Key Identifier:
                keyid:1F:73:8F:23:C0:91:FA:9E:A9:5E:B9:9A:0B:6D:76:AC:F2:55:3D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a3a2f33322d3332203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654::/32

    Signature Algorithm: sha256WithRSAEncryption
         cf:7f:f3:a8:dc:b6:8c:5f:a2:31:78:50:26:bf:a1:be:07:01:
         83:e4:03:c9:f8:90:79:19:27:b4:f7:22:41:24:54:00:95:0d:
         62:55:fa:b6:d2:16:e4:ed:d7:32:fc:e0:15:1d:9b:2e:14:f9:
         b6:a7:40:90:8d:eb:d8:e6:cd:fe:83:d0:56:6f:c8:af:af:36:
         12:81:82:cd:a3:ac:e5:10:f7:74:32:38:4d:80:7c:08:fc:04:
         10:d5:11:1a:59:a1:8a:05:ae:5f:4f:50:01:45:e9:2b:7b:1f:
         09:f0:7c:7f:87:e7:cb:41:8d:dc:1a:37:05:f3:d2:05:ff:68:
         c3:0c:02:fd:f2:8d:7c:8d:d7:83:b8:b5:30:8a:73:c9:28:8c:
         ba:44:a0:50:4f:fa:fb:59:92:54:59:7a:c2:4b:af:c2:99:20:
         be:86:89:61:2a:5d:0b:3e:b2:e6:89:91:5f:2a:4c:08:8b:e8:
         df:15:3b:94:03:92:17:d4:17:2e:74:2b:12:c8:e2:f9:e9:f1:
         99:9a:e9:25:f0:e3:d2:44:92:9f:de:65:43:11:a5:f6:63:b9:
         89:e3:3c:b9:ad:36:ad:c6:ef:8b:08:2a:6e:f5:41:a3:94:c3:
         6e:4e:7a:17:0c:27:fa:94:ff:13:0a:45:1c:1f:1a:30:1f:5b:
         7b:a3:2d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:09:25 2024 by rpki-client on console-ams.rpki-client.org