Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a3a2f33322d313238203d3e20323731323030.roa
File:                     323830343a373763633a3a2f33322d313238203d3e20323731323030.roa (raw, json)
Hash identifier:          Ba4wA8hsZJci7ttiRUvGbVuixLz1b4iKIcHUPa7k8lE=
Subject key identifier:   4E:50:9D:83:CF:B4:46:67:A2:44:72:5B:1D:2A:25:75:34:52:13:B5
Certificate issuer:       /CN=052E1FD3B34D2D94C83980528B60B11DFB854B57
Certificate serial:       5F0FE5B715C4D188DDA51AC8425F6C9071A850D3
Authority key identifier: 05:2E:1F:D3:B3:4D:2D:94:C8:39:80:52:8B:60:B1:1D:FB:85:4B:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052E1FD3B34D2D94C83980528B60B11DFB854B57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a3a2f33322d313238203d3e20323731323030.roa
Signing time:             Mon 21 Oct 2024 06:34:45 +0000
ROA not before:           Mon 21 Oct 2024 06:29:45 +0000
ROA not after:            Mon 20 Oct 2025 06:34:45 +0000
asID:                     271200
IP address blocks:        2804:77cc::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/052E1FD3B34D2D94C83980528B60B11DFB854B57.crl
                          rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/052E1FD3B34D2D94C83980528B60B11DFB854B57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052E1FD3B34D2D94C83980528B60B11DFB854B57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 12:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:0f:e5:b7:15:c4:d1:88:dd:a5:1a:c8:42:5f:6c:90:71:a8:50:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=052E1FD3B34D2D94C83980528B60B11DFB854B57
        Validity
            Not Before: Oct 21 06:29:45 2024 GMT
            Not After : Oct 20 06:34:45 2025 GMT
        Subject: CN=4E509D83CFB44667A244725B1D2A2575345213B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4d:f9:20:e8:cd:53:ba:50:fa:39:56:e6:cc:
                    dc:26:43:da:28:3b:52:9e:96:e0:4d:b4:02:d9:07:
                    f0:48:f1:9c:73:f7:fc:9f:73:20:ea:c0:d1:38:83:
                    a0:cb:75:17:90:36:7a:4e:a4:e6:25:51:17:36:1b:
                    52:44:7f:c0:ac:02:9e:ab:66:29:7b:df:28:a6:6a:
                    9c:e6:de:ef:df:6f:d7:84:eb:6e:48:30:bd:d4:69:
                    34:00:02:b5:32:08:b7:3b:47:05:4b:27:6d:0a:38:
                    b9:21:96:69:42:4d:48:b9:3f:40:b1:20:e4:49:c6:
                    8b:be:41:ce:bb:c7:09:c3:ed:25:5c:3b:51:98:b3:
                    eb:b7:50:26:09:ce:6d:97:81:c5:41:4b:df:be:02:
                    0c:93:16:7e:04:23:3b:4c:ed:0c:ca:a9:8d:cf:17:
                    59:3b:f6:f2:5f:ff:f2:50:da:75:16:29:0c:bb:c3:
                    f0:21:c1:51:65:ba:bc:f2:e1:64:41:db:3e:ec:e3:
                    cc:be:17:53:ce:5f:32:45:53:57:18:ca:db:4e:88:
                    46:08:3c:19:40:b5:f9:b9:b3:8c:ee:a0:b1:df:55:
                    4e:55:aa:26:9c:93:fd:e3:cd:be:c3:ba:e2:be:ed:
                    c6:9f:18:4e:61:56:66:ae:a1:4e:98:0b:c6:36:e8:
                    5f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:50:9D:83:CF:B4:46:67:A2:44:72:5B:1D:2A:25:75:34:52:13:B5
            X509v3 Authority Key Identifier:
                keyid:05:2E:1F:D3:B3:4D:2D:94:C8:39:80:52:8B:60:B1:1D:FB:85:4B:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/052E1FD3B34D2D94C83980528B60B11DFB854B57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052E1FD3B34D2D94C83980528B60B11DFB854B57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a3a2f33322d313238203d3e20323731323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:64:ce:92:31:78:83:08:c4:d9:36:0b:24:51:6d:d1:b2:7d:
         eb:86:79:e1:c1:ec:e4:00:df:fe:b3:4f:ff:f6:c7:37:4b:07:
         59:72:1e:06:da:44:e3:f1:7a:25:2d:e9:b4:84:29:6b:d2:d1:
         88:a9:96:06:0e:a9:d4:99:ae:2b:3a:56:21:90:62:7d:be:db:
         9f:ea:97:66:11:c0:aa:07:bd:e3:3b:73:31:94:0b:64:09:18:
         53:bd:d6:78:b1:6e:64:ba:63:3a:bc:f4:8b:12:be:3b:12:27:
         42:73:06:a3:aa:5a:b7:8a:e5:30:14:c8:35:f8:71:65:e3:dd:
         33:4a:35:4d:27:d7:80:55:93:88:77:be:2c:07:ef:5a:a6:14:
         40:3b:07:45:27:62:fa:4e:c8:23:71:82:99:f6:9c:a1:a3:c8:
         f0:65:7c:d7:f9:ba:a9:f8:74:53:9d:47:fb:69:fe:69:4b:76:
         2b:e6:23:96:a8:84:5e:cf:dd:2e:66:55:f7:78:52:69:16:4d:
         d5:b3:90:9a:25:b1:79:41:21:a3:40:d4:ff:9d:8e:d3:56:c3:
         34:d8:19:7e:66:e7:c3:33:6d:dd:fb:84:46:58:dd:87:42:29:
         f5:86:77:77:66:95:0d:66:85:ec:54:d3:13:b2:0e:71:77:cb:
         8d:82:dd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 14:49:09 2024 by rpki-client on console-fra.rpki-client.org