Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a3a2f33322d3332203d3e20323732363439.roa
File:                     323830343a383638343a3a2f33322d3332203d3e20323732363439.roa (raw, json)
Hash identifier:          Hv3/Fj7xme+hEmBXeHybSysLbtHdvN36tGsLnHD1Bmg=
Subject key identifier:   0C:04:F6:C1:F4:92:1B:15:07:4D:53:96:5A:DB:ED:9E:54:5A:ED:79
Certificate issuer:       /CN=D61B496314B43E1C9976EB9E63C1AA21310DA4B4
Certificate serial:       11562B7FF9E9FEF867227539A091A3CF168C92FF
Authority key identifier: D6:1B:49:63:14:B4:3E:1C:99:76:EB:9E:63:C1:AA:21:31:0D:A4:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D61B496314B43E1C9976EB9E63C1AA21310DA4B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a3a2f33322d3332203d3e20323732363439.roa
Signing time:             Wed 31 Jul 2024 20:54:17 +0000
ROA not before:           Wed 31 Jul 2024 20:49:17 +0000
ROA not after:            Wed 30 Jul 2025 20:54:17 +0000
asID:                     272649
IP address blocks:        2804:8684::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/D61B496314B43E1C9976EB9E63C1AA21310DA4B4.crl
                          rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/D61B496314B43E1C9976EB9E63C1AA21310DA4B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D61B496314B43E1C9976EB9E63C1AA21310DA4B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:24:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:56:2b:7f:f9:e9:fe:f8:67:22:75:39:a0:91:a3:cf:16:8c:92:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D61B496314B43E1C9976EB9E63C1AA21310DA4B4
        Validity
            Not Before: Jul 31 20:49:17 2024 GMT
            Not After : Jul 30 20:54:17 2025 GMT
        Subject: CN=0C04F6C1F4921B15074D53965ADBED9E545AED79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:08:e5:5d:bd:81:ad:e3:31:29:6d:45:22:05:
                    82:61:0e:60:f8:62:54:5f:f0:4f:03:83:82:64:9e:
                    a7:19:5e:09:97:92:be:20:17:9f:0c:e4:e6:14:d8:
                    76:bc:af:cf:ab:f0:d1:2b:04:da:7d:2a:32:c1:b3:
                    9f:91:17:f1:bb:2a:b8:2d:55:40:93:15:05:e8:74:
                    ce:70:9a:26:a4:b0:cf:c5:f3:30:80:10:11:00:29:
                    eb:bf:db:10:58:44:08:f7:6b:ee:16:af:ba:84:07:
                    d2:b1:96:5d:94:64:29:eb:87:c2:76:81:5f:78:71:
                    ba:7c:77:a3:6a:4f:43:68:22:b0:dc:25:a2:33:80:
                    f1:bd:3a:69:1d:a3:0b:b5:e1:91:32:96:a3:cd:08:
                    cc:2c:af:06:f1:f7:04:ef:a6:2b:93:f6:04:d6:81:
                    bb:da:5c:0d:4d:19:ee:c0:44:6d:1d:17:92:f1:20:
                    55:4d:e8:b4:2a:03:7f:45:20:39:d0:f1:64:38:fc:
                    b2:f3:1d:54:ba:05:65:f4:ce:68:e0:10:8c:e7:f2:
                    b4:1a:20:9a:5a:0f:c7:0d:d8:c8:8d:cb:f4:a4:88:
                    92:0d:8a:9a:4e:cb:c8:c0:cc:15:ef:e1:2d:e0:43:
                    4f:08:17:6e:3d:09:d3:1b:bb:97:c5:06:1d:ba:1a:
                    f4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:04:F6:C1:F4:92:1B:15:07:4D:53:96:5A:DB:ED:9E:54:5A:ED:79
            X509v3 Authority Key Identifier:
                keyid:D6:1B:49:63:14:B4:3E:1C:99:76:EB:9E:63:C1:AA:21:31:0D:A4:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/D61B496314B43E1C9976EB9E63C1AA21310DA4B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D61B496314B43E1C9976EB9E63C1AA21310DA4B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a3a2f33322d3332203d3e20323732363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8684::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:a5:c8:01:ce:d3:a0:0e:b9:07:17:8d:e2:73:b4:14:32:30:
         ce:6c:fa:56:18:13:ab:b7:7a:1a:ff:6e:f8:81:ea:d8:c9:30:
         88:c7:5a:06:9a:43:dd:5f:94:95:ad:1a:7b:97:97:db:67:ce:
         e0:e6:9d:b5:63:88:f0:a5:2a:d3:6b:76:72:2e:5f:80:c7:96:
         a7:b7:a5:42:f5:30:9d:05:d9:d8:97:5e:4f:73:80:59:ba:ca:
         cd:16:f4:1a:4d:bb:b1:1e:68:57:37:b2:d1:af:fa:35:ee:18:
         e4:52:f1:3c:48:5e:0a:c5:52:22:fa:a9:32:20:54:32:70:e8:
         c9:86:b8:e0:a6:b8:67:84:2d:ba:3a:1d:11:1f:13:5b:b7:39:
         6f:70:6e:c4:54:4c:fd:00:74:45:b4:90:13:2e:58:f6:bc:09:
         b5:8e:1c:5a:2d:2d:fe:7f:4b:67:68:36:f1:b9:aa:b8:9e:7b:
         4d:cb:87:bf:f3:e7:97:18:98:2d:1b:b4:ca:27:41:a4:cd:35:
         dd:eb:05:00:37:24:78:6d:3c:de:2c:af:a5:0b:08:f7:3c:8b:
         c4:68:1d:44:29:c1:26:b5:83:5c:a5:63:67:8c:6b:47:21:51:
         0e:34:30:66:93:75:3b:19:84:b8:a5:f6:b0:1d:d3:85:ae:4b:
         aa:6c:76:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:16 2024 by rpki-client on console-fra.rpki-client.org