Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/1/323830343a353039343a3a2f3332203d3e20323638333937.roa
File:                     323830343a353039343a3a2f3332203d3e20323638333937.roa (raw, json)
Hash identifier:          uUCf5LqLAMboKfuv2jx8ATKVhVuElfWENYXpU8L2CK8=
Subject key identifier:   17:F4:3E:C3:A3:40:05:26:1E:B5:B9:EC:F3:E4:F7:72:22:2C:14:D7
Certificate issuer:       /CN=012775388D13F69C6556A7B8F60188E65FB6EDEB
Certificate serial:       2E1D0031C25D4E1238E1726B295CF3428B0EDC67
Authority key identifier: 01:27:75:38:8D:13:F6:9C:65:56:A7:B8:F6:01:88:E6:5F:B6:ED:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/012775388D13F69C6556A7B8F60188E65FB6EDEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/1/323830343a353039343a3a2f3332203d3e20323638333937.roa
Signing time:             Thu 04 Apr 2024 04:58:30 +0000
ROA not before:           Thu 04 Apr 2024 04:53:30 +0000
ROA not after:            Thu 03 Apr 2025 04:58:30 +0000
asID:                     268397
IP address blocks:        2804:5094::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/1/012775388D13F69C6556A7B8F60188E65FB6EDEB.crl
                          rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/1/012775388D13F69C6556A7B8F60188E65FB6EDEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/012775388D13F69C6556A7B8F60188E65FB6EDEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:1d:00:31:c2:5d:4e:12:38:e1:72:6b:29:5c:f3:42:8b:0e:dc:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012775388D13F69C6556A7B8F60188E65FB6EDEB
        Validity
            Not Before: Apr  4 04:53:30 2024 GMT
            Not After : Apr  3 04:58:30 2025 GMT
        Subject: CN=17F43EC3A34005261EB5B9ECF3E4F772222C14D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b3:9c:3a:ea:8f:94:33:d5:09:5b:f2:0f:15:
                    2f:b4:cc:13:90:75:50:47:b4:85:89:37:be:19:45:
                    c4:dc:dc:50:5c:f6:27:3b:04:64:55:90:cb:82:25:
                    b6:7b:d0:4e:ed:8f:f3:29:6a:59:94:99:6a:e9:50:
                    54:22:5a:f9:06:32:e8:2f:85:2d:99:d1:c4:41:b3:
                    b5:6c:ab:cb:47:4f:d2:60:3c:72:fc:47:a6:18:16:
                    79:25:04:b3:fc:cd:03:31:43:d7:f1:51:3e:db:83:
                    03:f1:ec:c7:0b:8b:7b:ac:b4:42:38:60:b8:f9:43:
                    b2:76:81:ee:52:79:b4:95:d6:d1:35:5a:37:16:9e:
                    ae:79:42:03:40:3b:eb:7b:db:5d:c1:d5:ed:27:d0:
                    5a:1f:01:8b:c7:d1:a1:dc:f4:f2:ca:68:28:d3:dc:
                    cb:42:7c:e5:51:c0:6c:a3:00:9e:e2:03:fb:3c:3e:
                    77:aa:20:d1:7e:65:c4:fb:37:8a:00:8f:ca:35:dc:
                    bd:de:fa:9b:e4:2d:9a:f8:e2:11:a2:a7:80:ae:47:
                    01:84:c0:f5:e6:02:57:7d:df:52:56:37:ba:7f:d0:
                    56:6b:cb:cd:86:22:32:e3:97:61:cc:22:3e:5a:3b:
                    7c:78:8f:97:bb:2f:e0:c9:dc:e3:b3:f3:7b:ba:76:
                    93:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F4:3E:C3:A3:40:05:26:1E:B5:B9:EC:F3:E4:F7:72:22:2C:14:D7
            X509v3 Authority Key Identifier:
                keyid:01:27:75:38:8D:13:F6:9C:65:56:A7:B8:F6:01:88:E6:5F:B6:ED:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/1/012775388D13F69C6556A7B8F60188E65FB6EDEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/012775388D13F69C6556A7B8F60188E65FB6EDEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/1/323830343a353039343a3a2f3332203d3e20323638333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5094::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:dc:c5:46:15:85:75:c9:63:a5:90:0f:48:e6:d1:78:91:1e:
         ca:e1:65:99:e9:34:8b:2b:aa:5a:cc:87:d7:0c:71:6b:4f:45:
         6a:8a:50:1f:dd:b9:c7:ba:b4:2d:0a:58:ea:fe:c6:79:f5:71:
         fc:ba:f0:ed:62:6e:30:e9:97:b5:f7:9b:d6:db:3e:0f:c3:5a:
         b0:ce:8f:6f:fc:07:7d:ce:e3:03:f0:23:18:60:ea:bd:ee:9a:
         90:41:a3:51:33:c4:c5:bd:fb:8b:68:ef:f8:76:a5:d2:2b:2a:
         67:d7:86:61:95:05:93:85:f4:f9:68:a5:6b:fc:eb:f8:dc:38:
         6a:6e:4c:e9:24:38:6e:1f:14:61:ec:cf:be:57:c4:06:0d:b5:
         b6:0a:06:d4:d4:79:5f:a3:97:91:09:6b:2d:29:ed:4e:24:ff:
         8c:fa:08:4b:27:5a:81:4f:4f:16:ee:d5:bd:f6:d0:df:a0:51:
         40:5f:4b:f2:91:71:ce:2f:52:44:56:2f:19:ec:de:bd:8d:14:
         07:4f:19:12:1c:58:8e:61:03:ae:91:4e:cf:e3:dd:8a:5e:e9:
         77:17:7d:d6:fc:55:39:e3:fa:7b:5f:a8:01:29:88:17:88:e0:
         b3:e5:cf:d5:cb:41:24:6f:c1:0b:b5:a3:54:58:89:52:a3:bf:
         e7:43:ef:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:46 2024 by rpki-client on console-fra.rpki-client.org