Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/323830343a313734303a3a2f33322d3438203d3e203533313037.roa
File:                     323830343a313734303a3a2f33322d3438203d3e203533313037.roa (raw, json)
Hash identifier:          Nn/S6ay4y4bMN6xsWajclQR9UKdo5BsfCO3fefwgmY0=
Subject key identifier:   A2:52:B2:F3:54:5B:7C:8E:9F:EE:E3:66:A9:08:89:44:89:74:FC:4F
Certificate issuer:       /CN=817F49231FF07F454E790AAA133485546F995822
Certificate serial:       186EAB1352CFC7F443A6BFB2D955CDBFE9AD67FC
Authority key identifier: 81:7F:49:23:1F:F0:7F:45:4E:79:0A:AA:13:34:85:54:6F:99:58:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F49231FF07F454E790AAA133485546F995822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/323830343a313734303a3a2f33322d3438203d3e203533313037.roa
Signing time:             Thu 04 Apr 2024 10:14:01 +0000
ROA not before:           Thu 04 Apr 2024 10:09:01 +0000
ROA not after:            Thu 03 Apr 2025 10:14:01 +0000
asID:                     53107
IP address blocks:        2804:1740::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/817F49231FF07F454E790AAA133485546F995822.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/817F49231FF07F454E790AAA133485546F995822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F49231FF07F454E790AAA133485546F995822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 23:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6e:ab:13:52:cf:c7:f4:43:a6:bf:b2:d9:55:cd:bf:e9:ad:67:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817F49231FF07F454E790AAA133485546F995822
        Validity
            Not Before: Apr  4 10:09:01 2024 GMT
            Not After : Apr  3 10:14:01 2025 GMT
        Subject: CN=A252B2F3545B7C8E9FEEE366A90889448974FC4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:10:19:f4:99:03:cf:b9:c3:71:07:3c:2b:b0:
                    3b:37:c1:06:03:4b:76:04:74:5b:87:e0:28:ae:d8:
                    f2:bf:b1:4e:cc:6a:35:fb:3e:f4:80:9a:a3:10:c3:
                    45:07:0e:db:54:c9:4d:cd:20:3b:a0:59:c2:c9:8a:
                    6e:88:e7:3e:d9:fd:6f:83:db:3f:4c:54:15:93:52:
                    80:c0:72:54:b6:58:a7:73:14:50:8a:49:41:3f:df:
                    76:61:d8:3b:98:6b:09:13:d7:0c:61:b9:f1:46:3c:
                    77:84:cc:0e:73:d1:d3:07:df:0d:01:8d:67:06:84:
                    1a:1c:31:24:69:ab:63:db:85:04:eb:49:23:83:51:
                    7a:bc:41:a4:5c:6e:a0:fc:44:94:bf:5e:fc:b7:9d:
                    e4:05:41:d1:0e:8f:5c:11:09:42:82:9e:a8:a9:84:
                    cd:96:dc:4d:59:af:12:80:5f:08:e9:bc:2a:e8:02:
                    ab:70:b0:b5:30:0e:0e:02:24:a6:ed:da:f1:a4:b4:
                    ed:5d:41:f1:e1:f4:26:89:5f:db:d5:0f:c4:cc:6d:
                    34:cd:80:74:e9:18:08:54:52:47:b3:d8:ae:d0:33:
                    73:d1:4d:f1:03:69:4d:27:51:79:45:f3:bb:9a:27:
                    1a:08:60:d1:7a:31:73:39:99:0f:77:b7:fc:64:cb:
                    f8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:52:B2:F3:54:5B:7C:8E:9F:EE:E3:66:A9:08:89:44:89:74:FC:4F
            X509v3 Authority Key Identifier:
                keyid:81:7F:49:23:1F:F0:7F:45:4E:79:0A:AA:13:34:85:54:6F:99:58:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/817F49231FF07F454E790AAA133485546F995822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F49231FF07F454E790AAA133485546F995822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/323830343a313734303a3a2f33322d3438203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1740::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:32:e7:ea:07:3b:d6:b1:76:09:77:dc:39:53:3a:ca:82:07:
         55:4f:d3:6b:8d:39:a2:59:f6:0a:01:7e:a2:52:48:da:31:7b:
         06:ed:52:f6:85:4c:26:da:cd:b8:79:a8:df:31:c4:91:5f:b3:
         d2:42:56:90:54:1b:9a:9f:84:87:b0:cd:31:d0:91:30:87:25:
         b8:6d:a3:3e:44:8a:47:02:da:6e:8c:3f:af:fd:ed:03:55:9f:
         ad:23:39:29:36:d6:51:ee:46:b2:c5:81:18:97:c5:0b:5e:ed:
         36:b4:1e:21:17:f7:b3:e7:5d:d1:89:5d:e8:41:f2:38:c9:86:
         51:c1:9c:d3:f5:3d:74:0d:63:16:e7:98:7e:b6:1c:24:56:0a:
         f0:05:2c:87:ff:07:80:0b:3e:e4:2c:70:d9:18:c6:80:31:4e:
         b4:a3:e9:81:2c:96:91:8b:01:37:9e:17:c4:76:4e:77:36:85:
         ef:e1:98:b9:ee:c0:ef:b6:15:09:24:90:1c:2a:f5:ac:b8:a2:
         ea:fe:12:b0:97:45:05:ae:0f:bd:51:3b:8f:60:5e:d6:72:67:
         3e:25:a1:2f:aa:33:80:cf:c4:28:78:dd:7a:36:96:ba:60:3e:
         f3:38:1c:2a:bc:43:2b:9e:5d:80:44:8e:dc:e6:2b:2d:7c:9d:
         f2:f8:56:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 01:52:36 2024 by rpki-client on console-ams.rpki-client.org