Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/1/323830343a373761303a3a2f33322d3438203d3e20323731313535.roa
File:                     323830343a373761303a3a2f33322d3438203d3e20323731313535.roa (raw, json)
Hash identifier:          XxeWs/4TV888yO7RL7cUmyL2NQrI3U2HdoWDa8fktv0=
Subject key identifier:   F8:13:0C:50:AE:F3:4D:ED:99:77:3C:0D:9C:51:9F:6C:79:BF:A4:C6
Certificate issuer:       /CN=7AB6FD2F3C7AC526DEFF47DE8402EE747A952074
Certificate serial:       3B095709BA0CC9A3F8D338693AAC4755C41D29B9
Authority key identifier: 7A:B6:FD:2F:3C:7A:C5:26:DE:FF:47:DE:84:02:EE:74:7A:95:20:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB6FD2F3C7AC526DEFF47DE8402EE747A952074.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/1/323830343a373761303a3a2f33322d3438203d3e20323731313535.roa
Signing time:             Thu 04 Apr 2024 08:46:52 +0000
ROA not before:           Thu 04 Apr 2024 08:41:52 +0000
ROA not after:            Thu 03 Apr 2025 08:46:52 +0000
asID:                     271155
IP address blocks:        2804:77a0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/1/7AB6FD2F3C7AC526DEFF47DE8402EE747A952074.crl
                          rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/1/7AB6FD2F3C7AC526DEFF47DE8402EE747A952074.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB6FD2F3C7AC526DEFF47DE8402EE747A952074.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:09:57:09:ba:0c:c9:a3:f8:d3:38:69:3a:ac:47:55:c4:1d:29:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB6FD2F3C7AC526DEFF47DE8402EE747A952074
        Validity
            Not Before: Apr  4 08:41:52 2024 GMT
            Not After : Apr  3 08:46:52 2025 GMT
        Subject: CN=F8130C50AEF34DED99773C0D9C519F6C79BFA4C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1e:4a:17:fe:f5:cc:06:4c:73:bc:83:e7:49:
                    58:91:93:d4:43:22:25:ce:c3:4a:db:38:aa:c5:9b:
                    5b:59:44:50:8a:d9:26:53:d9:14:84:b0:ec:34:1d:
                    5a:85:80:ed:9f:37:45:55:38:4e:97:28:a0:85:08:
                    68:50:34:7f:20:a0:a4:c1:d1:2a:11:65:8e:c8:ff:
                    e7:43:2b:39:29:68:f4:2d:17:49:a3:ee:5c:06:cc:
                    03:04:6f:b6:97:04:3c:c3:e1:1c:21:5e:99:c3:29:
                    ad:21:65:41:ab:94:e8:1b:89:39:5c:86:ee:02:20:
                    53:fd:67:1c:4d:7a:4b:9e:f1:19:d8:d4:7f:dc:53:
                    34:74:50:f2:25:0a:1f:9c:ca:92:ec:8c:ea:c8:e5:
                    70:47:b1:b3:6e:5b:09:f7:c0:08:f0:fa:82:8f:15:
                    37:ac:f4:e9:3b:d4:06:95:dd:cc:ba:0a:0e:d9:52:
                    23:7a:b2:a8:99:90:be:27:82:da:5e:5b:e9:7e:fc:
                    f8:89:76:e0:e3:79:63:31:0a:7b:ef:31:17:bd:6f:
                    f5:ff:ab:3c:8c:f8:43:63:b3:87:8e:cc:99:5b:57:
                    e8:68:ac:9e:da:b7:72:47:35:5f:23:e5:5b:bb:3e:
                    35:01:99:df:3e:de:90:59:17:7f:65:df:a9:18:88:
                    b4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:13:0C:50:AE:F3:4D:ED:99:77:3C:0D:9C:51:9F:6C:79:BF:A4:C6
            X509v3 Authority Key Identifier:
                keyid:7A:B6:FD:2F:3C:7A:C5:26:DE:FF:47:DE:84:02:EE:74:7A:95:20:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/1/7AB6FD2F3C7AC526DEFF47DE8402EE747A952074.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB6FD2F3C7AC526DEFF47DE8402EE747A952074.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/1/323830343a373761303a3a2f33322d3438203d3e20323731313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:5d:c5:d2:97:72:b1:11:7c:27:6d:e5:1f:ec:57:a2:92:ed:
         d3:5d:6e:15:ab:9b:4d:b1:96:c1:d1:0e:c4:2c:2d:bb:9d:f8:
         95:3e:b6:93:d5:b2:b8:50:24:ce:ef:78:b0:b8:b6:b4:10:7f:
         7d:de:82:05:09:44:09:df:54:20:7b:2c:d7:05:07:3c:08:e9:
         63:4d:fa:03:90:02:69:ab:05:9e:26:d0:e0:74:d2:8e:45:2a:
         f7:d4:8f:cf:f6:bd:86:2d:85:d3:76:08:58:dc:fd:47:c6:64:
         e3:32:9a:be:f6:d3:c9:dd:38:93:bf:5f:a7:4f:5a:4c:4b:9c:
         52:f1:94:7b:a4:8e:fd:1c:5d:4f:93:7d:02:44:c9:d1:3d:73:
         c7:84:ee:9f:62:40:08:65:6b:d2:66:24:ed:2a:f2:29:f3:5c:
         26:7a:b4:57:3e:35:7d:59:b9:fe:a0:0e:40:ce:10:d4:d9:77:
         41:93:43:df:33:14:f2:07:a6:0d:2f:44:78:33:8b:09:4c:5e:
         f7:40:a9:47:ba:9a:f5:2c:6c:81:43:a6:47:d0:8c:10:14:df:
         ed:2c:de:6d:8b:a2:ac:19:bd:49:e1:0b:b0:71:88:7b:c9:f9:
         50:2f:a1:6f:58:fd:4e:33:64:06:ea:b6:97:f9:b6:1e:85:c3:
         62:e6:6f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:59 2024 by rpki-client on console-fra.rpki-client.org