Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/323830343a333735633a3a2f33322d3634203d3e20323636343036.roa
File:                     323830343a333735633a3a2f33322d3634203d3e20323636343036.roa (raw, json)
Hash identifier:          TziyfPxGQOFT8zEfX2XwZrG+b9fLLhxCAl9/Fo45F6U=
Subject key identifier:   73:A3:A0:BE:C2:DD:82:73:66:ED:00:EA:C2:44:91:F0:90:3A:21:9B
Certificate issuer:       /CN=CB91FE18915AE687D903BB2899406C36F9DB163E
Certificate serial:       151DEBB5E1917D67298E98DBF3C06740CEB2A70D
Authority key identifier: CB:91:FE:18:91:5A:E6:87:D9:03:BB:28:99:40:6C:36:F9:DB:16:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB91FE18915AE687D903BB2899406C36F9DB163E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/323830343a333735633a3a2f33322d3634203d3e20323636343036.roa
Signing time:             Tue 05 Nov 2024 18:21:18 +0000
ROA not before:           Tue 05 Nov 2024 18:16:18 +0000
ROA not after:            Tue 04 Nov 2025 18:21:18 +0000
asID:                     266406
IP address blocks:        2804:375c::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/CB91FE18915AE687D903BB2899406C36F9DB163E.crl
                          rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/CB91FE18915AE687D903BB2899406C36F9DB163E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB91FE18915AE687D903BB2899406C36F9DB163E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 15:26:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:1d:eb:b5:e1:91:7d:67:29:8e:98:db:f3:c0:67:40:ce:b2:a7:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB91FE18915AE687D903BB2899406C36F9DB163E
        Validity
            Not Before: Nov  5 18:16:18 2024 GMT
            Not After : Nov  4 18:21:18 2025 GMT
        Subject: CN=73A3A0BEC2DD827366ED00EAC24491F0903A219B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:bb:da:5f:e3:1f:d9:24:a9:a2:45:b8:da:
                    58:e1:2a:03:3a:fc:ae:31:2c:f5:85:44:a8:5c:13:
                    6e:5e:3f:5b:8e:33:65:21:d3:07:78:7b:77:d4:13:
                    9d:e1:85:52:15:e1:1d:6b:69:83:3a:88:9d:a0:33:
                    a4:67:c3:37:8c:6d:1d:a5:1d:68:3e:1c:b6:4a:15:
                    aa:03:b7:57:f8:b8:5d:94:89:17:df:13:18:4e:d7:
                    73:99:8f:c1:7a:7d:d7:d2:b2:8d:d8:51:77:c7:c4:
                    a6:36:a7:83:a6:c4:71:f3:c5:12:6e:e9:de:57:53:
                    c0:ca:7f:f9:3d:b8:47:e8:d3:3d:c7:99:cc:59:0b:
                    31:4e:76:11:d7:64:79:22:84:58:17:fd:a0:8e:ab:
                    7f:13:4d:c8:08:3f:bb:b6:a9:e0:be:0f:2b:7c:e0:
                    99:e7:52:9d:20:a7:7c:5f:01:c9:04:f4:71:70:64:
                    73:76:a8:20:28:11:c9:7a:ee:80:81:6c:96:ef:3a:
                    80:2a:1d:33:b6:35:cb:a4:ed:b8:6a:9a:63:d8:79:
                    26:5d:ef:0d:4e:80:08:7c:fe:80:ba:43:62:18:63:
                    93:1c:2d:c8:e2:a1:84:55:6d:7d:eb:b6:2f:74:d3:
                    b3:ab:ba:2b:5a:63:50:0e:b1:b8:d9:1b:9f:70:f7:
                    d0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A3:A0:BE:C2:DD:82:73:66:ED:00:EA:C2:44:91:F0:90:3A:21:9B
            X509v3 Authority Key Identifier:
                keyid:CB:91:FE:18:91:5A:E6:87:D9:03:BB:28:99:40:6C:36:F9:DB:16:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/CB91FE18915AE687D903BB2899406C36F9DB163E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB91FE18915AE687D903BB2899406C36F9DB163E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/323830343a333735633a3a2f33322d3634203d3e20323636343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:375c::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:87:f3:7e:5d:be:e5:39:1a:db:af:7a:13:cd:51:09:e0:84:
         9c:54:e0:9b:80:60:4e:05:e8:a0:1e:cf:e7:50:08:d1:62:ea:
         5e:3e:84:9b:5c:76:92:aa:1c:da:dc:9f:be:28:18:e1:9e:a1:
         ef:a2:73:52:a9:e6:71:1c:98:ef:ef:90:6a:40:e4:6d:35:54:
         0c:2f:d7:c0:d5:59:cf:51:8b:cc:8f:12:53:5a:e0:79:43:34:
         0a:30:e4:75:c8:23:d8:3d:52:54:66:59:27:35:f5:ec:eb:86:
         a2:6b:0a:eb:99:6f:97:e7:61:1c:de:c9:f2:a7:2e:01:15:df:
         b6:ad:6e:8e:47:07:6a:08:ec:90:68:d2:9e:df:61:7d:d2:df:
         77:9f:3b:7b:d2:f0:0f:31:f2:ec:72:52:63:a2:1e:95:bc:3e:
         e2:ff:ba:f8:78:b3:f4:ef:a6:9a:01:2f:9f:7f:a0:fb:96:8d:
         9d:83:4d:7d:8d:32:31:15:11:99:14:f7:24:be:69:30:0b:8e:
         6f:eb:6d:b0:ec:ba:3b:d6:75:0a:94:6c:af:d1:5d:35:ff:cb:
         ef:21:bb:c6:b7:6b:00:36:00:24:13:48:b3:f3:70:87:07:1d:
         20:48:e0:c9:54:e4:2e:97:f8:f7:1b:c0:43:91:ee:91:ef:1f:
         c8:a4:97:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:04 2024 by rpki-client on console-ams.rpki-client.org