Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a383030303a3a2f33332d3333203d3e203631373438.roa
File:                     323830343a316263343a383030303a3a2f33332d3333203d3e203631373438.roa (raw, json)
Hash identifier:          PEvnLLQu2azE5a5PjNpKdvrvF9BR5eVtoRGp1rghiPg=
Subject key identifier:   39:D7:F0:79:D3:BB:25:D3:94:86:48:A3:40:77:D5:31:D4:6C:BC:AA
Certificate issuer:       /CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
Certificate serial:       055FD467FE118E04F04F5809B307081522B417E0
Authority key identifier: 55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a383030303a3a2f33332d3333203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:18:41 +0000
ROA not before:           Wed 10 Apr 2024 19:13:41 +0000
ROA not after:            Wed 09 Apr 2025 19:18:41 +0000
asID:                     61748
IP address blocks:        2804:1bc4:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl
                          rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:5f:d4:67:fe:11:8e:04:f0:4f:58:09:b3:07:08:15:22:b4:17:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
        Validity
            Not Before: Apr 10 19:13:41 2024 GMT
            Not After : Apr  9 19:18:41 2025 GMT
        Subject: CN=39D7F079D3BB25D3948648A34077D531D46CBCAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:81:c2:06:62:cd:8e:21:51:dc:3b:03:33:6f:
                    36:40:8c:38:37:77:5a:36:f9:25:5d:50:c0:69:c4:
                    b2:c0:5c:d7:ac:fc:ae:b4:a7:44:22:a4:0c:02:33:
                    d2:9d:7e:00:a1:da:7c:13:d7:57:9b:ef:4a:bd:47:
                    f9:8a:93:4e:8f:55:6d:e3:ac:af:d1:18:0d:f5:f4:
                    fe:03:f0:6f:c3:1b:b6:f6:61:be:04:23:f2:9c:51:
                    37:b0:18:ed:2e:40:3c:f9:5a:95:83:e8:4b:9e:56:
                    fb:84:38:8b:51:f5:ad:7f:b9:8f:f1:a6:bc:ca:b0:
                    7a:2c:48:72:0a:be:30:73:03:66:19:b1:98:3b:af:
                    a1:fa:33:b6:bf:05:d1:0e:d1:d6:e9:5d:de:80:16:
                    1c:12:4c:73:ec:fd:51:ba:fb:26:d0:33:17:ef:70:
                    d3:f1:10:e9:c7:d3:a8:3d:99:28:bf:f5:76:77:f3:
                    42:c4:ba:0f:1b:ed:5d:44:c9:e9:ed:e1:45:9e:37:
                    48:14:e9:f5:3b:8a:2c:58:ee:ba:ea:1b:29:81:55:
                    ee:ae:73:d9:8f:75:64:8a:d1:1c:34:bc:61:8b:32:
                    1b:e9:c3:94:f7:74:0c:20:ff:f3:c7:4e:dc:c9:16:
                    66:93:7c:e2:0d:f4:aa:79:9d:3c:5a:b5:83:68:89:
                    01:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D7:F0:79:D3:BB:25:D3:94:86:48:A3:40:77:D5:31:D4:6C:BC:AA
            X509v3 Authority Key Identifier:
                keyid:55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a383030303a3a2f33332d3333203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1bc4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1f:e2:5a:88:ff:59:08:db:23:f9:1e:60:71:4e:bf:a9:3f:13:
         c2:4f:fc:47:59:24:2d:45:cb:8b:e0:ba:0f:b1:d1:19:f5:f5:
         01:e1:79:e1:89:de:65:83:e2:1e:38:96:66:e7:e2:f5:bd:63:
         81:ab:6b:dc:54:1b:55:6f:d0:52:6f:69:cf:b2:b8:5f:74:ac:
         ad:e9:50:55:4c:40:31:ef:a5:69:cb:bd:f6:33:32:c1:a0:e5:
         92:48:4b:fa:e2:06:bd:f7:26:8b:18:cb:fa:05:c5:69:84:e3:
         eb:9b:57:21:f7:39:06:06:05:87:44:90:5f:24:04:8f:38:af:
         70:4a:86:9a:52:08:ca:01:38:41:14:29:89:5e:6e:d1:bd:58:
         da:14:b2:c6:5c:7f:2c:36:bd:95:55:a9:33:ae:ae:27:c7:66:
         67:61:32:03:12:f4:1e:ca:3a:3d:da:46:07:a1:38:bb:6c:52:
         52:b2:32:e6:7a:7d:78:24:96:e0:25:6d:10:70:5f:09:b3:cb:
         e0:50:d8:43:d2:33:3a:70:0a:43:de:ce:77:56:88:9e:64:06:
         6a:9b:ac:45:03:d5:7d:22:00:5e:89:20:30:4b:fc:16:ea:c3:
         4a:6e:c8:cb:7b:d8:6e:b6:10:66:e5:98:a1:fd:82:1c:0d:b2:
         66:c1:ea:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 07:37:27 2024 by rpki-client on console-fra.rpki-client.org