Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/323830343a316265303a3a2f33322d3438203d3e203631373534.roa
File:                     323830343a316265303a3a2f33322d3438203d3e203631373534.roa (raw, json)
Hash identifier:          lORiTx1Hp7vfxDzuAYiDaQPlW7AiwGtYdoBs2q0FVG8=
Subject key identifier:   C8:91:FD:59:16:E2:E3:4F:46:50:D3:B7:65:1A:D7:B4:CF:20:7F:F3
Certificate issuer:       /CN=B92001871A07D03B31A6C890436B41249FAC3A6E
Certificate serial:       437FBBBE1291EC21E582B44E84C402283607C4C8
Authority key identifier: B9:20:01:87:1A:07:D0:3B:31:A6:C8:90:43:6B:41:24:9F:AC:3A:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92001871A07D03B31A6C890436B41249FAC3A6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/323830343a316265303a3a2f33322d3438203d3e203631373534.roa
Signing time:             Thu 04 Apr 2024 22:12:15 +0000
ROA not before:           Thu 04 Apr 2024 22:07:15 +0000
ROA not after:            Thu 03 Apr 2025 22:12:15 +0000
asID:                     61754
IP address blocks:        2804:1be0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/B92001871A07D03B31A6C890436B41249FAC3A6E.crl
                          rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/B92001871A07D03B31A6C890436B41249FAC3A6E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92001871A07D03B31A6C890436B41249FAC3A6E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:7f:bb:be:12:91:ec:21:e5:82:b4:4e:84:c4:02:28:36:07:c4:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B92001871A07D03B31A6C890436B41249FAC3A6E
        Validity
            Not Before: Apr  4 22:07:15 2024 GMT
            Not After : Apr  3 22:12:15 2025 GMT
        Subject: CN=C891FD5916E2E34F4650D3B7651AD7B4CF207FF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:47:81:8f:bf:d9:46:36:01:7d:e0:6c:70:67:
                    62:f1:c1:c0:77:76:97:a9:41:26:bd:55:f3:23:88:
                    93:79:0d:39:21:00:30:7f:92:82:35:af:fd:2e:49:
                    ee:ca:4a:ea:ce:02:45:a4:39:a3:26:cd:0d:7d:5c:
                    82:c9:fe:d9:94:8a:80:37:01:ce:00:cd:de:4b:34:
                    6c:a2:55:94:e2:ba:da:7d:8e:a0:bb:5c:a3:9f:64:
                    a4:36:dc:b5:d0:75:35:18:4e:c2:04:f2:ea:93:0f:
                    45:b3:2a:7a:71:30:eb:b0:66:6c:a7:b3:b2:fb:cb:
                    31:98:8a:d6:83:06:d7:93:61:e2:2b:af:6a:c3:53:
                    0e:71:46:6d:45:db:f4:91:95:c6:dc:04:52:e9:97:
                    18:a4:57:b4:1c:ea:1e:a4:86:65:46:ba:6c:3d:92:
                    49:c3:04:7e:62:b6:0a:32:68:62:5c:e4:7e:38:8a:
                    b1:4c:a5:e3:19:5b:3f:91:47:4f:ec:70:94:24:78:
                    82:a8:c9:5f:0e:76:8d:cc:ec:51:c2:2a:60:97:50:
                    cc:b5:50:11:f2:7f:26:71:d8:88:06:9d:ae:69:47:
                    13:0f:c1:b1:fd:6d:f9:d3:81:32:92:1d:8b:5f:7d:
                    27:b7:e6:f0:d7:e7:f9:f9:4a:2e:c9:19:b1:38:21:
                    44:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:91:FD:59:16:E2:E3:4F:46:50:D3:B7:65:1A:D7:B4:CF:20:7F:F3
            X509v3 Authority Key Identifier:
                keyid:B9:20:01:87:1A:07:D0:3B:31:A6:C8:90:43:6B:41:24:9F:AC:3A:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/B92001871A07D03B31A6C890436B41249FAC3A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92001871A07D03B31A6C890436B41249FAC3A6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/323830343a316265303a3a2f33322d3438203d3e203631373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:1a:c4:76:a2:9a:24:db:0f:16:11:0c:93:bc:9a:4f:f2:1e:
         c4:55:41:74:b3:44:a3:70:0a:77:63:22:1c:bb:c0:da:40:97:
         cc:eb:c7:f2:6f:d4:37:6d:66:5b:01:1f:ed:cd:5d:8a:c0:40:
         88:6e:5c:76:ba:8c:42:c1:40:c7:51:48:f0:d3:b9:9f:63:67:
         45:90:0f:a6:d7:0c:df:1a:c1:7f:c1:80:aa:a3:93:c2:85:61:
         1e:84:94:59:e2:76:ed:c4:38:63:b0:e1:71:20:f4:13:33:4e:
         b7:4c:0f:55:1f:6d:f4:30:0c:14:ef:18:37:d4:55:00:d1:22:
         7c:8f:57:d3:86:aa:d3:ba:cb:d4:94:d8:af:de:bc:19:8a:d7:
         87:7b:9a:18:ee:1a:50:35:55:4a:7f:88:11:d7:f0:62:db:e5:
         97:f6:9d:2d:33:62:21:91:0c:68:d7:4a:6f:66:af:50:65:82:
         2c:eb:3b:29:5f:8d:f1:35:07:ee:3e:a4:b3:6d:fc:d2:f2:f6:
         5d:13:c1:c4:85:08:ce:d3:54:d1:c7:f4:31:e9:ca:8c:f4:af:
         07:2e:ff:17:40:47:0f:30:6b:8e:38:f4:62:06:c0:df:ef:a8:
         ce:df:d6:8b:b6:bf:c7:a8:4d:b8:af:de:86:dc:ba:3c:34:2e:
         33:88:f8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:27 2024 by rpki-client on console-ams.rpki-client.org