Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/1/323830343a346562343a3a2f33322d313238203d3e203631353933.roa
File:                     323830343a346562343a3a2f33322d313238203d3e203631353933.roa (raw, json)
Hash identifier:          AeFw5M47MUtq7H5j7CYo3rKdieAN3lZG+R9Tjv/y2xs=
Subject key identifier:   50:CE:E9:BE:69:B3:B0:5F:9F:26:9A:B1:92:EA:11:4E:2D:CC:FF:16
Certificate issuer:       /CN=F79C2520AC77E73FBAC789D36D8E3E640BE39E65
Certificate serial:       34ADA877E1C566701AFC0C3839EE6F60D7A1DE92
Authority key identifier: F7:9C:25:20:AC:77:E7:3F:BA:C7:89:D3:6D:8E:3E:64:0B:E3:9E:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79C2520AC77E73FBAC789D36D8E3E640BE39E65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/1/323830343a346562343a3a2f33322d313238203d3e203631353933.roa
Signing time:             Thu 04 Apr 2024 08:58:17 +0000
ROA not before:           Thu 04 Apr 2024 08:53:17 +0000
ROA not after:            Thu 03 Apr 2025 08:58:17 +0000
asID:                     61593
IP address blocks:        2804:4eb4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/1/F79C2520AC77E73FBAC789D36D8E3E640BE39E65.crl
                          rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/1/F79C2520AC77E73FBAC789D36D8E3E640BE39E65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79C2520AC77E73FBAC789D36D8E3E640BE39E65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ad:a8:77:e1:c5:66:70:1a:fc:0c:38:39:ee:6f:60:d7:a1:de:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F79C2520AC77E73FBAC789D36D8E3E640BE39E65
        Validity
            Not Before: Apr  4 08:53:17 2024 GMT
            Not After : Apr  3 08:58:17 2025 GMT
        Subject: CN=50CEE9BE69B3B05F9F269AB192EA114E2DCCFF16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:98:48:44:c3:d2:db:ee:9d:32:41:7f:cc:19:
                    0d:49:72:bc:18:5c:00:11:f7:3f:55:61:6b:ab:3a:
                    82:f8:65:d1:5f:c6:bd:2e:15:15:cd:a8:7a:c3:25:
                    f5:35:59:1f:0a:65:aa:08:6f:88:8c:1c:08:42:bb:
                    d8:50:28:4d:c3:bd:ae:8a:ec:ee:aa:3d:d9:92:a5:
                    95:25:81:d7:f5:1b:53:43:ee:0a:a2:bb:55:9e:11:
                    e7:19:af:d6:5b:0b:0b:64:80:15:b4:aa:11:b5:d0:
                    50:f0:c3:51:bc:25:ed:66:9c:90:45:6c:40:e6:a2:
                    02:57:0c:19:38:d1:68:c3:17:ff:22:7a:a0:04:c9:
                    a9:69:8c:e5:ce:dd:6b:45:6b:5a:0d:89:7d:dd:5d:
                    6b:4c:73:96:aa:75:f0:53:51:04:a5:9c:a3:e5:12:
                    4e:ee:20:8f:76:3b:00:c6:34:89:cd:25:65:99:7f:
                    9e:00:3c:32:9c:88:34:99:98:b7:e5:06:fb:8f:d8:
                    fa:14:d2:84:69:79:54:38:60:c0:1c:4f:bb:bd:f7:
                    5e:3c:71:30:74:76:e1:2f:b9:a4:4d:7e:79:d5:6f:
                    7a:a0:80:1a:99:08:44:53:29:f8:6e:02:4b:3e:dc:
                    3f:90:12:fb:db:ab:5c:48:a9:d1:c6:0c:56:56:89:
                    19:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CE:E9:BE:69:B3:B0:5F:9F:26:9A:B1:92:EA:11:4E:2D:CC:FF:16
            X509v3 Authority Key Identifier:
                keyid:F7:9C:25:20:AC:77:E7:3F:BA:C7:89:D3:6D:8E:3E:64:0B:E3:9E:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/1/F79C2520AC77E73FBAC789D36D8E3E640BE39E65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79C2520AC77E73FBAC789D36D8E3E640BE39E65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/1/323830343a346562343a3a2f33322d313238203d3e203631353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4eb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:f1:d9:96:33:5a:68:a7:b3:f2:36:74:68:ed:1c:7d:51:35:
         f6:ae:ab:3d:46:e1:11:20:69:b1:9b:ac:d4:c4:32:c4:f6:54:
         4d:d4:80:49:ee:02:54:77:b3:1b:b0:ce:b8:c6:90:2e:90:aa:
         4f:89:2b:3d:f7:72:73:f6:4c:d8:9a:f0:6b:1a:23:c3:0f:11:
         49:69:01:92:b0:f1:c1:9d:26:bd:52:6d:eb:6d:f9:8b:2a:31:
         95:74:5f:8f:88:46:22:05:58:df:45:d5:bd:29:78:ae:26:25:
         88:56:fb:7f:ab:69:0b:7d:37:01:1e:10:ba:6c:f4:b2:00:f1:
         73:8a:76:05:d0:65:f7:21:fb:e6:1b:bb:13:ca:72:ce:40:0d:
         68:2e:60:87:b7:7b:20:fd:7c:11:95:d7:21:a5:6b:2c:6e:33:
         d9:1e:23:bf:50:f8:ef:42:a9:f6:71:42:a4:e3:f8:b3:9a:ab:
         99:d6:8f:de:8f:44:6f:64:64:bc:4e:e2:9d:4e:dc:ad:2a:7b:
         cf:41:03:77:cc:09:06:d8:62:bf:6f:7a:af:e3:3c:f8:43:42:
         08:6a:d8:e0:7d:a5:74:7f:54:3d:67:f6:e5:60:de:2e:ce:e9:
         8a:fc:d9:3e:54:1c:b0:67:2f:06:67:6a:a5:11:a5:a6:47:35:
         5f:a1:4d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:54 2024 by rpki-client on console-ams.rpki-client.org