Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/323830343a333937633a3a2f33322d3336203d3e203532353932.roa
File:                     323830343a333937633a3a2f33322d3336203d3e203532353932.roa (raw, json)
Hash identifier:          LUk6V76y8pZ51vvrFPnkR/k2b6NOOQ6fbAfl2u9oEpE=
Subject key identifier:   7C:7B:97:0B:8B:65:FE:5D:58:58:C3:91:05:A9:72:04:F8:41:59:7D
Certificate issuer:       /CN=CFF957416ABC451AD3955260CF69F31756051BD6
Certificate serial:       3D13C33F52ACB15C3D03C66D191E576205135418
Authority key identifier: CF:F9:57:41:6A:BC:45:1A:D3:95:52:60:CF:69:F3:17:56:05:1B:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/323830343a333937633a3a2f33322d3336203d3e203532353932.roa
Signing time:             Thu 27 Jun 2024 12:04:27 +0000
ROA not before:           Thu 27 Jun 2024 11:59:27 +0000
ROA not after:            Thu 26 Jun 2025 12:04:27 +0000
asID:                     52592
IP address blocks:        2804:397c::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.crl
                          rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:13:c3:3f:52:ac:b1:5c:3d:03:c6:6d:19:1e:57:62:05:13:54:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFF957416ABC451AD3955260CF69F31756051BD6
        Validity
            Not Before: Jun 27 11:59:27 2024 GMT
            Not After : Jun 26 12:04:27 2025 GMT
        Subject: CN=7C7B970B8B65FE5D5858C39105A97204F841597D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:93:4c:20:00:57:f9:58:e2:19:96:f5:56:ac:
                    ae:3d:fd:cd:b9:20:3c:64:e9:59:d7:61:c0:3c:0d:
                    e7:33:83:7c:f4:bd:fd:59:6f:3b:54:ac:32:c4:d9:
                    8a:18:8d:41:2a:06:55:07:f4:0d:72:13:b5:2c:ed:
                    13:2e:7e:dd:19:9c:17:d3:00:cb:60:c0:8c:aa:27:
                    f1:48:29:64:ef:27:b0:95:7b:a6:bb:e6:bf:f2:f7:
                    6b:2a:a3:c9:cb:0e:ef:0b:80:1a:d4:5d:08:bc:33:
                    cb:d7:80:4c:60:2a:96:ec:62:9b:26:53:a2:0f:2b:
                    c4:12:ca:38:8b:2e:6f:47:f2:b4:92:ad:2d:c0:67:
                    07:68:73:76:8a:a5:93:49:27:7b:b5:e0:0e:c6:6f:
                    69:9f:57:c4:0d:e7:9c:15:5c:ec:7f:09:99:d6:5d:
                    7c:6d:7f:c0:73:c7:8d:55:f4:06:60:cc:05:84:72:
                    c3:6f:c2:a6:76:e1:6e:bf:65:eb:3f:73:02:9d:26:
                    92:06:73:01:9f:b9:a7:2a:17:7d:69:1e:ad:f7:61:
                    fd:75:3f:45:81:3d:eb:c2:9d:d6:1b:2b:ad:c7:4b:
                    3a:05:fb:db:ea:c9:30:48:85:d8:9a:36:50:e3:ec:
                    c6:b1:a2:9b:f0:0e:d1:da:42:61:1d:32:5b:27:be:
                    eb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7B:97:0B:8B:65:FE:5D:58:58:C3:91:05:A9:72:04:F8:41:59:7D
            X509v3 Authority Key Identifier:
                keyid:CF:F9:57:41:6A:BC:45:1A:D3:95:52:60:CF:69:F3:17:56:05:1B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/323830343a333937633a3a2f33322d3336203d3e203532353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:397c::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:09:ce:9a:d8:fa:8e:02:78:03:58:49:52:d0:7d:89:ff:47:
         03:aa:7e:62:93:27:00:df:f3:6f:18:f5:31:3b:83:5a:e2:0f:
         4c:9d:0c:7f:0b:d4:66:b4:00:35:13:3e:b4:ab:2e:5e:94:85:
         fb:69:3d:4d:c6:59:e6:de:51:d4:ba:b2:9d:51:a6:80:e2:00:
         0c:ac:51:12:88:24:bc:1c:8e:ef:89:9d:e2:01:ea:42:a9:91:
         c1:b4:bb:c3:08:4a:4b:d8:8a:04:4c:79:11:72:69:8f:6d:64:
         77:21:e5:79:3e:b5:1c:8b:ba:97:9d:81:9f:e5:71:c8:3b:f4:
         e2:62:76:9b:cd:bb:08:35:f0:04:10:dc:0d:da:e7:fb:79:46:
         39:bd:1d:4d:4c:7b:c7:dc:72:d0:fe:ea:7b:8a:e7:66:aa:44:
         48:2e:0d:4f:4e:ca:de:b5:43:91:51:d9:4d:2f:c1:4e:0f:1b:
         6a:36:cb:91:01:6b:20:0a:d3:81:9a:bc:08:6b:24:67:1a:01:
         6f:98:e4:9e:dc:ce:9b:20:53:82:22:d4:8f:ed:52:c5:92:a9:
         5a:29:8a:df:c4:c0:89:b0:2e:af:0a:0b:f7:ba:18:03:d4:f9:
         0d:16:25:78:a5:26:14:5e:99:31:7c:f1:38:0b:95:45:8b:a2:
         10:24:3f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:13:40 2024 by rpki-client on console-fra.rpki-client.org