Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a3a2f33322d3332203d3e20323636303230.roa
File:                     323830343a333933633a3a2f33322d3332203d3e20323636303230.roa (raw, json)
Hash identifier:          YA88k/Qs92FBuIxWI0w3HNAX5FtKhtmWPW+cXx5t2cU=
Subject key identifier:   FD:DD:FF:B2:A7:43:D5:8D:F7:3B:BC:61:B6:CC:C2:B9:74:C7:F1:51
Certificate issuer:       /CN=A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554
Certificate serial:       03A3AB9665C528D9AD0DBEF102C4C7F0AD89FB0C
Authority key identifier: A7:83:EB:24:30:AF:A2:B9:12:F0:F1:C0:7E:5A:0C:2E:44:CD:65:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a3a2f33322d3332203d3e20323636303230.roa
Signing time:             Thu 21 Nov 2024 21:46:01 +0000
ROA not before:           Thu 21 Nov 2024 21:41:01 +0000
ROA not after:            Thu 20 Nov 2025 21:46:01 +0000
asID:                     266020
IP address blocks:        2804:393c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.crl
                          rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a3:ab:96:65:c5:28:d9:ad:0d:be:f1:02:c4:c7:f0:ad:89:fb:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554
        Validity
            Not Before: Nov 21 21:41:01 2024 GMT
            Not After : Nov 20 21:46:01 2025 GMT
        Subject: CN=FDDDFFB2A743D58DF73BBC61B6CCC2B974C7F151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7f:27:92:6e:3f:8f:35:e2:f5:52:a3:ab:b0:
                    61:d1:e0:80:0e:1e:d4:77:44:13:8c:9b:37:32:33:
                    db:c5:f9:97:f5:ec:3a:47:f7:4e:ed:08:53:80:65:
                    4f:db:30:19:a0:50:09:de:90:36:19:b3:37:7b:e3:
                    19:18:09:85:ee:ea:fe:83:7f:76:18:b4:8c:64:1d:
                    6c:a9:de:b0:b6:ff:82:0b:f3:0f:5a:22:d8:77:eb:
                    ec:4a:4d:35:46:f9:ed:5f:e8:67:b3:2e:80:71:9d:
                    5c:52:df:fe:58:82:44:e1:ec:72:88:51:5c:38:ab:
                    91:d9:92:a1:38:fd:54:c8:e6:50:8e:d0:9c:21:53:
                    57:28:ee:7b:9e:bd:b7:de:12:b4:9b:35:9d:b7:8c:
                    18:03:17:2b:d3:0a:4d:c0:a6:ab:74:21:2a:48:c8:
                    41:17:34:ad:1f:f1:59:d6:b5:5a:63:55:5d:8c:3a:
                    e7:2c:5d:8c:b7:63:24:46:03:b0:06:2d:6c:37:b9:
                    62:dc:02:df:50:2e:2d:e3:5d:69:39:99:33:f0:c3:
                    2a:47:ad:a0:b1:db:99:10:b3:1e:98:f1:85:5f:8f:
                    d7:7c:63:3e:75:ab:94:31:c0:49:93:86:42:1f:e6:
                    84:21:88:d9:c7:39:a3:34:b2:bf:ba:dd:b4:05:6b:
                    9e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DD:FF:B2:A7:43:D5:8D:F7:3B:BC:61:B6:CC:C2:B9:74:C7:F1:51
            X509v3 Authority Key Identifier:
                keyid:A7:83:EB:24:30:AF:A2:B9:12:F0:F1:C0:7E:5A:0C:2E:44:CD:65:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a3a2f33322d3332203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:393c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:b6:44:61:29:7d:34:ee:ab:24:30:29:54:76:82:2f:85:8d:
         f6:3f:22:32:d7:3c:aa:9b:a7:8e:a4:5e:da:26:34:34:eb:6b:
         5d:99:5b:a7:18:b8:58:03:67:96:74:ba:73:9b:06:bf:fb:61:
         1d:b6:7b:3b:6e:65:69:ce:6c:46:f0:bb:39:ee:30:11:ee:da:
         62:58:7b:d7:61:da:30:7e:22:91:65:4d:8c:f8:41:00:dd:13:
         b1:f8:aa:ec:22:b0:14:d6:3d:e9:2d:51:90:de:b8:46:08:dc:
         08:ea:85:37:26:22:50:51:59:38:75:33:c5:c8:60:eb:29:fb:
         1a:a0:eb:09:5a:c7:29:25:6a:09:c5:70:d7:12:45:b7:cd:ce:
         36:31:bb:cb:f0:86:b9:64:30:b9:b0:9a:2e:ac:cf:71:81:b2:
         d9:e2:02:fd:76:0d:a3:89:db:ee:de:ad:cb:ac:ad:d3:49:99:
         fa:3d:5e:61:c4:d7:b6:d9:90:69:79:60:7c:73:ef:02:37:87:
         d5:4d:91:74:14:9a:cb:56:f9:10:3f:da:04:ee:3d:63:83:d8:
         68:49:33:39:51:02:37:70:b9:c2:78:f5:cb:4e:ae:ca:b7:fd:
         fe:30:6a:48:05:4b:1d:7a:7c:aa:6b:57:5e:d6:8f:61:9e:c9:
         23:c0:48:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:31 2024 by rpki-client on console-fra.rpki-client.org