Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/323830343a316135383a3a2f33322d3335203d3e203631383535.roa
File:                     323830343a316135383a3a2f33322d3335203d3e203631383535.roa (raw, json)
Hash identifier:          J96Bnko0G9pnjbEq47GcWMzbI3TpzZkSTQDsXmLR9Yo=
Subject key identifier:   29:76:BF:96:2F:5D:45:80:15:B4:52:A2:7C:A2:30:EB:3F:D0:AF:0E
Certificate issuer:       /CN=B45683C1BB4344BEACD72830DD6175D3188D8B0A
Certificate serial:       5B051E68320E0D70AB11245E4CA39EFF5AF6A602
Authority key identifier: B4:56:83:C1:BB:43:44:BE:AC:D7:28:30:DD:61:75:D3:18:8D:8B:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/323830343a316135383a3a2f33322d3335203d3e203631383535.roa
Signing time:             Wed 03 Apr 2024 18:32:44 +0000
ROA not before:           Wed 03 Apr 2024 18:27:44 +0000
ROA not after:            Wed 02 Apr 2025 18:32:44 +0000
asID:                     61855
IP address blocks:        2804:1a58::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl
                          rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:05:1e:68:32:0e:0d:70:ab:11:24:5e:4c:a3:9e:ff:5a:f6:a6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45683C1BB4344BEACD72830DD6175D3188D8B0A
        Validity
            Not Before: Apr  3 18:27:44 2024 GMT
            Not After : Apr  2 18:32:44 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2f:4b:61:1c:db:eb:eb:59:58:f3:f8:c0:b8:
                    4f:a5:eb:1f:e7:a6:88:35:bc:ae:4b:8e:49:32:fe:
                    e4:b9:a2:55:25:e5:d2:de:8d:34:d9:0f:7a:10:8e:
                    0e:e6:30:73:76:fc:82:87:b2:f7:80:da:ff:04:30:
                    ba:be:3b:2b:2b:e9:36:cd:65:93:f2:01:d6:1d:e3:
                    e2:16:da:24:eb:6d:62:e3:32:dc:11:c1:cd:ed:56:
                    b1:c9:86:54:4a:c3:d0:01:ad:6b:ac:1b:a8:94:47:
                    4e:20:b8:e2:50:22:bf:fa:44:30:c3:9c:3b:95:d8:
                    6d:40:06:76:3f:09:2c:a8:54:ae:c7:1c:1b:54:d8:
                    11:01:bc:68:52:02:0a:98:07:57:24:80:53:20:cf:
                    5e:cb:e6:cc:07:06:d2:4a:ab:0f:b4:c9:db:33:1d:
                    d0:e2:b7:53:29:31:7f:50:77:70:6d:bb:3a:2c:4e:
                    a9:8b:75:18:0d:8d:de:d2:0e:45:54:6d:9f:c5:ff:
                    b6:c0:33:30:43:2f:35:a1:03:91:2c:18:f1:48:a8:
                    6d:b0:03:50:c9:0e:59:7f:e8:d7:d0:a9:b9:16:2e:
                    1c:95:0a:8d:29:05:e5:10:ec:37:81:1d:fc:79:f2:
                    47:46:2f:7a:37:57:25:51:d0:61:6a:2a:73:14:1e:
                    13:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:76:BF:96:2F:5D:45:80:15:B4:52:A2:7C:A2:30:EB:3F:D0:AF:0E
            X509v3 Authority Key Identifier:
                keyid:B4:56:83:C1:BB:43:44:BE:AC:D7:28:30:DD:61:75:D3:18:8D:8B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/323830343a316135383a3a2f33322d3335203d3e203631383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a58::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:35:04:fe:78:43:e2:ea:43:1f:fd:ce:bf:10:a8:67:56:3a:
         c9:91:9b:cf:02:a8:88:4a:32:3a:6d:e5:3d:bd:bb:49:70:c1:
         2a:d2:4a:33:ed:45:0b:9c:62:3d:85:99:72:23:06:50:18:45:
         9b:07:5b:e3:5b:af:c1:f3:a4:d6:16:d2:06:97:21:90:9d:35:
         20:50:b8:27:e6:20:d6:50:8b:b0:58:14:a2:c2:c1:b3:3a:65:
         69:b8:9a:0a:7c:55:7c:e0:53:9f:a1:71:c9:64:18:6d:f9:e9:
         96:6b:2f:7e:27:e8:1a:ea:be:37:de:da:8c:3b:24:57:91:2e:
         c3:71:bd:c9:73:85:aa:63:e8:f9:d6:35:19:bb:6d:be:ae:64:
         9e:df:e0:23:48:98:fd:e8:df:ea:de:ca:cc:ae:fb:ea:36:c4:
         1b:5f:ab:39:41:29:82:20:5d:98:4e:c7:30:a9:87:78:e5:ba:
         7b:57:0f:b0:76:f7:60:fc:3f:34:2e:38:f1:a8:43:d5:ef:6b:
         66:43:a4:0b:e7:b0:62:a0:3c:54:1b:2e:a9:f6:20:38:2e:9f:
         6b:ac:5a:a4:76:3c:d3:10:44:3b:13:8e:0f:36:40:50:a4:af:
         df:90:27:74:a7:f3:71:01:b4:72:cd:d2:09:4f:80:f2:74:74:
         93:ce:2b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:21 2024 by rpki-client on console-ams.rpki-client.org