Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a3a2f33332d3333203d3e203631373438.roa
File:                     323830343a316263343a3a2f33332d3333203d3e203631373438.roa (raw, json)
Hash identifier:          zr1rEwV/OjDzCpBh0FsCHxWq6jTOMfe4uu38pE6u9iI=
Subject key identifier:   0B:14:47:2C:28:12:BD:5F:EE:32:AB:69:B7:F3:6C:1A:AB:C9:BA:B2
Certificate issuer:       /CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
Certificate serial:       0C25F0728A76F0F45C74AEAF08F07540DEB0C9A1
Authority key identifier: 55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a3a2f33332d3333203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:18:38 +0000
ROA not before:           Wed 10 Apr 2024 19:13:38 +0000
ROA not after:            Wed 09 Apr 2025 19:18:38 +0000
asID:                     61748
IP address blocks:        2804:1bc4::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl
                          rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:25:f0:72:8a:76:f0:f4:5c:74:ae:af:08:f0:75:40:de:b0:c9:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
        Validity
            Not Before: Apr 10 19:13:38 2024 GMT
            Not After : Apr  9 19:18:38 2025 GMT
        Subject: CN=0B14472C2812BD5FEE32AB69B7F36C1AABC9BAB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:9b:92:8d:a6:00:f8:d3:0b:5e:b9:02:b1:
                    aa:5c:20:91:ba:f5:32:80:b5:e6:b2:7b:ca:82:11:
                    10:fd:cc:cc:7b:a3:3f:ba:bc:ba:68:f8:f1:a2:e8:
                    ea:be:80:1b:61:1e:7f:01:cd:68:5c:ae:ec:b0:5c:
                    e9:1a:29:22:5e:91:3b:88:88:47:73:53:cf:8f:9f:
                    46:c0:20:29:1c:93:c2:6c:89:42:5c:b7:5f:64:13:
                    d5:95:f9:6b:50:cd:72:d0:3f:3f:92:02:a5:81:1f:
                    b8:29:d1:a7:72:3d:6d:05:5c:19:b7:47:50:42:35:
                    2d:26:98:2c:ac:87:e1:51:1e:af:8b:9e:2d:75:71:
                    fd:c9:0e:10:4e:a4:91:b4:4f:85:bb:2a:6d:7c:d0:
                    e3:b6:fa:9a:77:5f:c5:5f:04:53:87:ba:2c:99:8a:
                    62:17:87:ea:6d:d4:c0:1e:ee:fc:8c:9b:7e:2b:62:
                    cf:00:89:f1:12:5c:5d:3e:c5:6a:78:d3:86:a9:2c:
                    25:d8:af:f9:1e:bc:e8:df:36:91:b9:17:2b:72:17:
                    63:84:42:d9:33:e3:cf:7b:44:8d:c7:43:5a:f0:aa:
                    1d:0b:4e:9b:1f:a6:fc:ae:c7:06:e2:02:29:e8:28:
                    2a:3f:65:a6:88:37:8b:bd:b7:60:4c:b4:0c:d2:9b:
                    c6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:14:47:2C:28:12:BD:5F:EE:32:AB:69:B7:F3:6C:1A:AB:C9:BA:B2
            X509v3 Authority Key Identifier:
                keyid:55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a3a2f33332d3333203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1bc4::/33

    Signature Algorithm: sha256WithRSAEncryption
         4e:53:95:68:ca:e8:bc:02:d6:87:19:3a:73:34:8c:57:4b:bb:
         08:3a:36:7e:cd:a1:9b:7e:7c:0f:fe:c2:71:1b:e6:cb:1c:af:
         02:51:94:23:c9:a1:33:58:74:1b:dd:85:d4:ac:1b:6c:70:b9:
         0c:37:5b:da:7b:02:22:07:ed:dc:de:e7:69:af:31:60:e7:22:
         36:36:ac:e4:f1:46:2e:36:cd:32:9c:7e:7d:b2:74:55:7b:a3:
         28:02:4f:09:39:61:78:eb:1d:89:3a:a0:0b:9e:de:08:f3:95:
         99:3e:b2:70:20:7e:2c:65:51:85:50:aa:e2:d9:64:2e:9d:c3:
         11:ba:bc:d4:08:e0:74:dd:45:42:a8:93:22:9a:26:49:f1:45:
         84:08:5c:74:dc:39:58:99:65:a2:09:78:d1:a1:c2:f9:3f:e4:
         c6:61:36:90:5e:35:47:f4:80:8d:89:27:db:dd:42:0e:fc:a7:
         ab:3b:4d:d6:0e:f4:48:7d:91:7d:6b:46:14:e2:25:34:5b:c1:
         0b:67:0d:3d:4c:5d:90:dc:15:fb:96:f0:d9:b0:52:10:e6:89:
         41:d8:bd:ef:65:5f:44:e7:2a:59:85:8a:c0:ae:44:56:95:d9:
         8f:5a:a6:64:5f:6e:52:5c:9f:df:34:98:04:7f:66:5d:96:0c:
         25:8a:4d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:25 2024 by rpki-client on console-ams.rpki-client.org