Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hCidgVhCgqQeATRjHWBdw2biP7AZYs9UgEjLfJDFoPA/1/323830343a386436383a3a2f33322d313238203d3e20323733333535.roa
File:                     323830343a386436383a3a2f33322d313238203d3e20323733333535.roa (raw, json)
Hash identifier:          lfWqFMym13Uxz1OltMsK2dJGumC8guwFkvXXsY/Ztvo=
Subject key identifier:   15:5F:5E:3B:17:E7:A6:50:C1:36:1A:B9:DC:19:87:9E:02:29:5F:77
Certificate issuer:       /CN=141275360DF37083B41EEE804D5662A4B19CAA95
Certificate serial:       52644A50D198366C6F5E4B045D07B87891B95C69
Authority key identifier: 14:12:75:36:0D:F3:70:83:B4:1E:EE:80:4D:56:62:A4:B1:9C:AA:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/141275360DF37083B41EEE804D5662A4B19CAA95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hCidgVhCgqQeATRjHWBdw2biP7AZYs9UgEjLfJDFoPA/1/323830343a386436383a3a2f33322d313238203d3e20323733333535.roa
Signing time:             Thu 04 Apr 2024 06:40:18 +0000
ROA not before:           Thu 04 Apr 2024 06:35:18 +0000
ROA not after:            Thu 03 Apr 2025 06:40:18 +0000
asID:                     273355
IP address blocks:        2804:8d68::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hCidgVhCgqQeATRjHWBdw2biP7AZYs9UgEjLfJDFoPA/1/141275360DF37083B41EEE804D5662A4B19CAA95.crl
                          rsync://rpki-repo.registro.br/repo/hCidgVhCgqQeATRjHWBdw2biP7AZYs9UgEjLfJDFoPA/1/141275360DF37083B41EEE804D5662A4B19CAA95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/141275360DF37083B41EEE804D5662A4B19CAA95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:64:4a:50:d1:98:36:6c:6f:5e:4b:04:5d:07:b8:78:91:b9:5c:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=141275360DF37083B41EEE804D5662A4B19CAA95
        Validity
            Not Before: Apr  4 06:35:18 2024 GMT
            Not After : Apr  3 06:40:18 2025 GMT
        Subject: CN=155F5E3B17E7A650C1361AB9DC19879E02295F77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d6:a0:ad:33:78:b8:23:fb:7a:84:44:02:55:
                    be:ea:f1:9c:0f:05:6e:8a:e5:f8:db:04:05:f2:91:
                    53:30:47:61:06:af:15:d5:b9:1a:6d:3a:52:bb:f0:
                    3f:21:66:18:7e:06:44:d9:44:ea:52:92:a8:40:f3:
                    cc:a4:fc:36:11:b6:c7:1a:29:96:1f:ec:83:4f:90:
                    24:78:17:5c:fc:36:22:81:22:62:e8:04:4e:b5:f2:
                    c7:fa:e0:80:63:db:bc:a6:3c:e9:43:bb:43:5a:21:
                    9f:98:84:f5:27:12:30:58:6e:53:9a:b0:10:4c:c4:
                    f2:5e:2e:7b:d0:92:a0:b4:ea:e2:ea:fb:9f:df:90:
                    0e:0c:f9:f1:53:c2:d7:a9:88:06:bf:3c:41:1b:2e:
                    7a:06:b2:28:6b:c1:92:ce:52:ba:ee:79:0b:9f:7a:
                    4b:c9:b4:7c:05:f9:72:c6:09:85:2d:23:b0:c1:a4:
                    04:dd:ff:4b:e4:eb:37:00:31:bc:df:64:be:86:4e:
                    fc:38:87:15:e5:93:c3:3e:6d:85:4a:37:22:e5:0f:
                    6e:8f:9c:31:ad:4c:b0:8a:6f:bc:b1:f5:24:19:0c:
                    54:1e:ad:1f:29:5d:86:5a:0d:fa:bd:b7:ad:46:5c:
                    0c:b7:e5:f1:52:3a:42:62:91:e5:e4:1a:28:b0:26:
                    12:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5F:5E:3B:17:E7:A6:50:C1:36:1A:B9:DC:19:87:9E:02:29:5F:77
            X509v3 Authority Key Identifier:
                keyid:14:12:75:36:0D:F3:70:83:B4:1E:EE:80:4D:56:62:A4:B1:9C:AA:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hCidgVhCgqQeATRjHWBdw2biP7AZYs9UgEjLfJDFoPA/1/141275360DF37083B41EEE804D5662A4B19CAA95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/141275360DF37083B41EEE804D5662A4B19CAA95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hCidgVhCgqQeATRjHWBdw2biP7AZYs9UgEjLfJDFoPA/1/323830343a386436383a3a2f33322d313238203d3e20323733333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d68::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:42:e8:ad:4b:4b:1c:63:35:cc:fd:39:f7:11:c9:c9:dc:a2:
         cf:76:61:c0:56:cd:59:aa:f0:a9:99:7d:52:50:c8:20:74:78:
         c4:c7:a6:8e:44:cf:58:7f:d9:e3:86:5e:07:8f:d1:2d:b6:d8:
         5b:ac:88:62:ec:0d:09:52:dd:da:08:35:9b:c5:a6:6d:b8:03:
         e8:ef:d9:4c:0f:12:c9:95:64:a8:65:89:e4:f5:26:0b:b5:c0:
         1c:d9:76:ba:94:cc:c7:ee:62:27:8f:71:ad:f9:a3:f9:bb:fe:
         ce:ea:a2:95:12:91:05:9f:93:85:c8:76:f1:8b:a5:56:0a:ad:
         74:85:08:72:27:c8:1e:a4:31:df:04:6b:88:16:a0:c6:d1:9f:
         b2:74:ae:ae:16:c4:3f:21:44:6f:dd:fe:18:7d:e2:79:7f:73:
         18:c5:3c:8d:f4:66:8f:46:fa:ea:89:25:2c:f1:94:0c:8a:98:
         57:10:2d:1f:1a:cb:1b:6a:b8:b1:cb:87:1e:44:1f:59:a8:20:
         41:49:68:a1:8d:73:44:c3:8b:d1:b6:6e:38:28:d0:25:aa:2f:
         cc:13:84:51:ac:b1:df:5a:fc:be:0e:8d:25:4f:ef:55:eb:83:
         f8:19:05:d4:9c:17:7e:49:1d:dd:7b:de:f9:88:16:d7:13:68:
         58:fc:7a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:17 2024 by rpki-client on console-ams.rpki-client.org