Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/323830343a356463303a3a2f33322d3438203d3e203532393533.roa
File:                     323830343a356463303a3a2f33322d3438203d3e203532393533.roa (raw, json)
Hash identifier:          5fnEtUfQrSKWCuciDSUEK/95kE0f4Ei4PL+pTHI2/iM=
Subject key identifier:   29:47:E3:1C:B9:70:A1:64:AC:0F:77:57:A1:F6:B3:58:64:2A:E5:5B
Certificate issuer:       /CN=136589E651A12B3538E17F7856FB523F01EC591F
Certificate serial:       0AB600537926A9533E32323D6EC7AFB3C40E7325
Authority key identifier: 13:65:89:E6:51:A1:2B:35:38:E1:7F:78:56:FB:52:3F:01:EC:59:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/136589E651A12B3538E17F7856FB523F01EC591F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/323830343a356463303a3a2f33322d3438203d3e203532393533.roa
Signing time:             Wed 03 Apr 2024 21:32:04 +0000
ROA not before:           Wed 03 Apr 2024 21:27:04 +0000
ROA not after:            Wed 02 Apr 2025 21:32:04 +0000
asID:                     52953
IP address blocks:        2804:5dc0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/136589E651A12B3538E17F7856FB523F01EC591F.crl
                          rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/136589E651A12B3538E17F7856FB523F01EC591F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/136589E651A12B3538E17F7856FB523F01EC591F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:38:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b6:00:53:79:26:a9:53:3e:32:32:3d:6e:c7:af:b3:c4:0e:73:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=136589E651A12B3538E17F7856FB523F01EC591F
        Validity
            Not Before: Apr  3 21:27:04 2024 GMT
            Not After : Apr  2 21:32:04 2025 GMT
        Subject: CN=2947E31CB970A164AC0F7757A1F6B358642AE55B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:dc:90:77:f5:4c:2b:29:08:9d:6b:98:21:b8:
                    e7:b5:c3:62:57:87:fc:33:cd:db:71:e8:73:ff:fe:
                    6c:b6:d2:2b:d9:72:c6:10:c8:69:e0:6e:37:cc:0b:
                    4f:6f:28:38:49:0e:0d:9a:73:63:69:44:5a:2d:6f:
                    af:48:60:b9:ac:9e:0b:8f:50:7b:b0:d8:77:05:4a:
                    1c:48:1d:7b:d0:36:e9:6c:c7:3f:55:fd:51:88:33:
                    1f:b8:56:a4:ac:08:b5:d4:ce:68:0c:79:d7:b7:81:
                    67:df:c2:78:bb:43:e8:c6:f0:3f:4b:3e:76:82:fd:
                    a7:88:f9:32:2a:89:75:f7:0c:00:f0:ed:be:ff:dc:
                    25:11:de:c2:02:94:b3:13:8b:1b:05:82:6d:a4:c7:
                    86:fe:fb:f0:c7:2b:1d:25:34:cb:46:06:73:df:6a:
                    42:81:80:55:4c:f6:fd:84:f0:09:e1:c3:3f:64:ab:
                    db:77:7e:aa:dc:32:34:82:4b:04:95:64:fa:61:33:
                    ef:8d:8e:de:46:b0:e3:ef:e5:bb:09:64:14:e3:a3:
                    40:2f:c1:40:c1:d9:46:d6:c7:8c:d4:7e:08:cb:76:
                    c2:bb:aa:77:c7:ce:2a:f4:a8:14:57:0c:4b:24:1d:
                    a1:3b:3f:35:25:59:26:bd:26:40:7e:1d:49:c2:3c:
                    96:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:47:E3:1C:B9:70:A1:64:AC:0F:77:57:A1:F6:B3:58:64:2A:E5:5B
            X509v3 Authority Key Identifier:
                keyid:13:65:89:E6:51:A1:2B:35:38:E1:7F:78:56:FB:52:3F:01:EC:59:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/136589E651A12B3538E17F7856FB523F01EC591F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/136589E651A12B3538E17F7856FB523F01EC591F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/323830343a356463303a3a2f33322d3438203d3e203532393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:cb:0a:dd:b9:6d:b5:12:43:07:50:9e:63:50:c3:76:cc:97:
         04:77:8b:57:4d:69:73:4c:9c:87:24:01:d4:0b:b0:d7:7d:6b:
         21:0c:2d:81:a1:67:f5:d6:18:61:9d:48:a8:f3:13:a4:b3:ff:
         58:c5:0a:33:4a:68:fd:38:ec:51:74:7a:cf:83:1c:75:c0:91:
         73:20:8f:b8:29:04:27:70:6f:9c:20:fe:0c:f2:f1:4c:25:30:
         5d:7f:8b:47:8d:97:3d:7c:43:c5:f9:3f:98:4e:f1:39:87:07:
         be:79:a1:e1:48:37:b8:17:06:75:83:90:50:09:f3:08:7f:ec:
         45:24:b4:ea:61:6f:90:58:68:55:21:81:c8:e8:67:46:30:60:
         a0:99:87:af:e2:1c:ab:ac:7a:d9:fe:bf:de:d0:42:07:52:11:
         e5:e6:13:f7:bc:5c:b7:f7:80:f4:82:d4:08:75:f0:b9:48:dc:
         fc:1b:69:eb:33:a3:bc:4e:e1:7d:1a:e0:bc:cb:81:f7:1e:46:
         58:02:45:92:a7:d5:97:16:61:b8:d9:11:37:75:17:a8:7c:1b:
         dc:ae:0b:85:d0:5a:6d:0f:87:b5:ed:b9:e6:93:a0:aa:56:29:
         f0:d9:a8:65:fa:a9:15:2b:66:11:2a:f2:fb:9b:f0:15:49:36:
         cf:c8:54:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:52 2024 by rpki-client on console-fra.rpki-client.org