Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a3a2f33322d3332203d3e203631373438.roa
File:                     323830343a316263343a3a2f33322d3332203d3e203631373438.roa (raw, json)
Hash identifier:          urTzTZWVzQFTz+dG3Rvq707LpuznR3HbfzBvNOLMy8g=
Subject key identifier:   05:53:C0:2B:DE:FC:C7:9A:B5:3B:A4:6B:0A:2F:78:AC:E5:46:44:BE
Certificate issuer:       /CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
Certificate serial:       0E108DC9F6B6F069540A5A18C5AA41EB715C57D7
Authority key identifier: 55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a3a2f33322d3332203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:18:34 +0000
ROA not before:           Wed 10 Apr 2024 19:13:34 +0000
ROA not after:            Wed 09 Apr 2025 19:18:34 +0000
asID:                     61748
IP address blocks:        2804:1bc4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl
                          rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:10:8d:c9:f6:b6:f0:69:54:0a:5a:18:c5:aa:41:eb:71:5c:57:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
        Validity
            Not Before: Apr 10 19:13:34 2024 GMT
            Not After : Apr  9 19:18:34 2025 GMT
        Subject: CN=0553C02BDEFCC79AB53BA46B0A2F78ACE54644BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:58:29:04:e5:fe:c9:50:36:44:ef:61:0c:91:
                    5f:a5:e1:ed:ce:08:54:35:e8:9c:96:09:58:9c:a6:
                    ab:f4:7c:77:02:9b:5c:07:fb:1d:f4:b6:b8:4b:e3:
                    d5:2e:87:c9:90:b7:61:54:37:e0:df:92:58:72:e8:
                    fc:d4:48:98:d4:b3:2a:43:1a:93:e4:99:f5:98:46:
                    33:ff:5c:fb:96:50:af:a8:e4:c5:3f:60:1a:b4:9d:
                    0e:07:ac:51:7e:a1:62:07:d0:ce:05:1c:33:9f:1b:
                    92:dd:d2:b8:10:da:a7:ab:bf:da:e0:62:63:75:e1:
                    ac:02:06:0a:e3:95:2c:19:02:60:01:86:7a:59:ff:
                    30:ac:46:3b:a9:e3:c7:f7:93:e1:4d:22:b5:42:06:
                    11:80:d5:f9:62:6b:0e:7d:5a:b9:89:30:4b:d2:e2:
                    e2:85:99:1b:fd:81:7d:e0:da:77:25:36:2d:89:e6:
                    64:b3:fa:dd:a9:40:0c:0e:58:77:5c:dc:08:1e:08:
                    b6:01:bc:a5:8a:c2:9f:8e:74:4e:5f:42:0e:28:19:
                    68:4e:ca:ed:8f:2f:22:7c:f4:f7:33:5a:33:00:0a:
                    e7:c5:ce:25:a5:b0:db:21:c8:c8:82:b4:6e:16:ea:
                    8f:a1:7d:6d:d3:49:24:b0:36:44:f0:11:c4:ce:76:
                    85:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:53:C0:2B:DE:FC:C7:9A:B5:3B:A4:6B:0A:2F:78:AC:E5:46:44:BE
            X509v3 Authority Key Identifier:
                keyid:55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a3a2f33322d3332203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1bc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:90:61:ba:23:95:dc:35:99:b7:0f:c4:d9:8f:03:ee:24:4f:
         db:b4:a4:ca:7e:10:fc:c2:0c:35:79:77:de:ff:f6:2b:79:9a:
         98:f4:11:0e:96:92:47:e1:1d:12:65:27:92:b3:75:ca:09:4f:
         6b:a1:93:8c:43:8b:0e:c1:84:c9:09:e3:aa:05:a6:47:3b:76:
         ab:fe:33:d0:6b:03:5e:08:80:40:6a:d9:46:8c:28:47:06:c7:
         14:b4:9e:d5:3e:b5:71:ae:1f:4e:11:6f:ba:1c:e6:86:8d:24:
         39:dd:4e:f3:01:d3:67:92:7d:a1:94:ab:36:2d:3e:96:dd:1c:
         87:19:18:01:f4:b6:83:89:40:2c:c5:7c:e9:c8:62:b3:00:f5:
         ff:33:2f:cf:cc:17:1e:b0:54:5b:70:13:9b:4e:66:c4:ae:5c:
         fc:3f:45:43:48:ce:fd:45:ec:c9:cf:cd:af:ea:48:2d:c5:21:
         4d:84:0d:3a:28:e6:b7:e3:e1:f4:07:b7:15:e4:ee:38:ce:c4:
         0c:db:b6:8d:c6:93:65:9f:b8:ae:46:41:e5:a4:ce:51:02:32:
         ad:62:9a:16:0c:e9:61:e6:cb:bc:45:d6:fb:a3:cc:28:b9:e3:
         76:67:a8:f0:74:69:db:ba:e2:d8:dc:46:03:e7:e8:3d:73:2f:
         27:af:ac:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:09 2024 by rpki-client on console-fra.rpki-client.org