Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/1/323830343a6335383a3a2f33322d3333203d3e203532363934.roa
File:                     323830343a6335383a3a2f33322d3333203d3e203532363934.roa (raw, json)
Hash identifier:          415MTB5I3kIGjxR5CCps40WuhzdJoVjMFD1MG5tT2Lc=
Subject key identifier:   94:5B:84:28:65:DB:CB:CF:B8:FA:86:01:1A:73:6A:58:00:C7:F1:DC
Certificate issuer:       /CN=83129E5E092C29B388C70341FCF41F83A69B3CCC
Certificate serial:       55D75A2F106024C2B831769DE17C5AF721CC4DEC
Authority key identifier: 83:12:9E:5E:09:2C:29:B3:88:C7:03:41:FC:F4:1F:83:A6:9B:3C:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83129E5E092C29B388C70341FCF41F83A69B3CCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/1/323830343a6335383a3a2f33322d3333203d3e203532363934.roa
Signing time:             Wed 03 Apr 2024 23:47:21 +0000
ROA not before:           Wed 03 Apr 2024 23:42:21 +0000
ROA not after:            Wed 02 Apr 2025 23:47:21 +0000
asID:                     52694
IP address blocks:        2804:c58::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/1/83129E5E092C29B388C70341FCF41F83A69B3CCC.crl
                          rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/1/83129E5E092C29B388C70341FCF41F83A69B3CCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83129E5E092C29B388C70341FCF41F83A69B3CCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:40:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d7:5a:2f:10:60:24:c2:b8:31:76:9d:e1:7c:5a:f7:21:cc:4d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83129E5E092C29B388C70341FCF41F83A69B3CCC
        Validity
            Not Before: Apr  3 23:42:21 2024 GMT
            Not After : Apr  2 23:47:21 2025 GMT
        Subject: CN=945B842865DBCBCFB8FA86011A736A5800C7F1DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3c:77:04:aa:ac:62:12:12:45:b7:00:27:cc:
                    9e:34:30:34:ea:81:88:f7:15:df:3a:b9:a8:be:f7:
                    65:9e:d4:c9:65:a2:34:e3:c8:60:70:54:35:e9:c5:
                    79:cc:31:f7:ae:f5:9a:9c:d7:c7:41:63:fe:9a:39:
                    44:6f:e1:12:8f:4f:b2:db:d0:a5:a4:54:46:3c:59:
                    d6:25:a5:31:1b:3e:3d:53:87:37:fc:9b:d6:e5:19:
                    8b:ae:ee:09:f3:9b:13:7d:08:34:be:1e:27:28:85:
                    04:42:e5:21:19:8c:d6:f8:1f:96:5e:14:08:4e:8c:
                    7d:14:10:e4:e1:8e:fb:65:6a:24:ad:9f:51:12:45:
                    06:a2:53:13:1e:fd:d5:75:3c:11:84:62:77:28:62:
                    e9:61:f2:de:b9:cd:d2:01:7c:8d:0c:85:1e:39:00:
                    27:46:ba:09:84:67:5e:3d:39:61:25:4f:b1:0b:75:
                    a6:11:ab:7d:bb:ea:1e:8f:b5:43:96:61:fb:9c:51:
                    9c:1b:08:89:6c:0c:55:12:ff:1f:b3:70:3b:c3:42:
                    46:8a:b8:94:00:82:28:64:93:cd:6f:37:87:47:1e:
                    9b:71:e5:9b:de:70:f6:ab:93:e6:21:ab:86:8f:e1:
                    7f:34:56:36:ab:68:2b:de:4c:7c:f5:50:5e:87:38:
                    8d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5B:84:28:65:DB:CB:CF:B8:FA:86:01:1A:73:6A:58:00:C7:F1:DC
            X509v3 Authority Key Identifier:
                keyid:83:12:9E:5E:09:2C:29:B3:88:C7:03:41:FC:F4:1F:83:A6:9B:3C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/1/83129E5E092C29B388C70341FCF41F83A69B3CCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83129E5E092C29B388C70341FCF41F83A69B3CCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/1/323830343a6335383a3a2f33322d3333203d3e203532363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c58::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:8d:93:73:87:e2:8c:b7:ab:46:38:b8:ba:a7:e5:80:30:e4:
         f5:6d:b9:04:33:9b:11:74:28:aa:49:cc:4f:56:ec:e5:9a:7d:
         85:06:ae:1c:87:71:2b:de:c0:25:86:d2:0b:b5:22:e3:dd:8d:
         97:80:97:92:bd:95:27:cd:7b:93:2b:04:2c:3e:0e:0a:c9:22:
         8d:aa:b3:d4:c7:4f:dc:27:7a:03:ad:71:c7:06:11:c0:7e:b1:
         12:d3:95:73:b6:6e:29:80:09:0e:6c:31:68:3b:81:87:bb:40:
         21:10:fb:63:db:69:dc:fe:63:c2:75:a6:f0:22:38:50:8d:63:
         b4:5f:23:4b:fa:6d:cd:42:4d:28:18:25:79:30:fb:b1:4e:7c:
         49:a3:a9:0c:6a:b2:42:65:2b:31:31:7b:a7:80:87:63:a8:d0:
         49:9b:c1:5e:9b:f2:bc:ee:2e:63:37:ff:f8:2d:c5:f5:8e:c3:
         67:ef:8f:8f:14:4e:ca:75:1c:d0:ba:7c:2b:2a:d7:06:85:bc:
         c8:a4:7c:31:a6:25:ad:52:0d:57:d1:02:bb:70:c9:3d:d8:04:
         38:48:d9:2d:d7:27:fe:f1:91:79:5b:04:2c:22:3e:47:25:90:
         ab:37:bc:44:3a:ed:9a:65:b4:0d:c6:50:11:0c:22:ef:28:df:
         98:54:f4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:44 2024 by rpki-client on console-ams.rpki-client.org