Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a323130313a3a2f34382d3438203d3e203631353931.roa
File:                     323830343a323331633a323130313a3a2f34382d3438203d3e203631353931.roa (raw, json)
Hash identifier:          9Va82oq+9FPBKqUMx86W5hgx9vV1hOV9iWfahCtwkCI=
Subject key identifier:   32:05:D7:ED:EA:2B:65:0A:3B:20:24:E6:25:1F:DC:E7:09:EF:72:67
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       18CD799B55DEB41A3DE1FA0B0CB819CFF788FAA8
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a323130313a3a2f34382d3438203d3e203631353931.roa
Signing time:             Wed 02 Oct 2024 18:14:50 +0000
ROA not before:           Wed 02 Oct 2024 18:09:50 +0000
ROA not after:            Wed 01 Oct 2025 18:14:50 +0000
asID:                     61591
IP address blocks:        2804:231c:2101::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:cd:79:9b:55:de:b4:1a:3d:e1:fa:0b:0c:b8:19:cf:f7:88:fa:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Oct  2 18:09:50 2024 GMT
            Not After : Oct  1 18:14:50 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6f:3a:7d:a9:51:e6:e2:ab:c8:21:44:c5:4f:
                    d6:1b:c8:b7:2a:c7:7f:6c:d7:1e:52:81:1b:19:5f:
                    f3:aa:08:bc:45:ea:ef:f7:c2:61:b6:23:10:43:0a:
                    56:82:06:28:7b:d9:cd:f5:ab:78:20:1a:77:6d:b8:
                    d3:a6:22:94:cf:e1:40:78:a6:39:30:6c:d4:71:4c:
                    59:29:6d:db:d2:5e:b7:ac:f1:73:45:ef:9d:f4:c1:
                    c3:a2:61:fa:57:ab:b8:99:5c:ec:b3:03:a3:d2:72:
                    5c:19:88:9e:1a:71:1e:db:0c:19:13:bf:8f:bd:da:
                    6d:3b:ca:0d:1f:31:83:7b:f7:a2:18:70:38:89:5e:
                    f1:60:3a:01:f1:d9:4e:93:80:ef:13:30:45:b8:9d:
                    c3:12:31:3b:bb:b8:09:3f:1a:c9:5b:6c:3d:31:b8:
                    67:45:b2:eb:ce:a6:9f:95:5b:4a:45:fb:d9:a0:d0:
                    68:de:05:96:76:fa:01:47:3b:b1:30:24:ec:08:75:
                    2a:b0:d5:dc:b4:80:60:2c:4c:a0:ea:6b:87:0c:75:
                    bc:e5:e1:fd:3e:26:82:58:9b:c2:71:eb:c7:67:81:
                    00:13:b4:a8:7d:b7:dd:e3:77:0b:97:99:0c:c6:0e:
                    2a:71:c5:7e:e4:69:99:00:38:db:4f:49:00:cc:76:
                    26:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:05:D7:ED:EA:2B:65:0A:3B:20:24:E6:25:1F:DC:E7:09:EF:72:67
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a323130313a3a2f34382d3438203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:231c:2101::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:97:f8:5b:7e:b8:af:f8:f8:8d:97:40:79:e9:c4:02:b4:37:
         1a:d1:b5:6f:4b:8a:03:b0:90:de:1e:86:35:e4:ce:3c:ab:c2:
         72:7e:8b:d9:a2:28:2d:16:c0:f7:28:26:e5:d6:ce:87:b9:3d:
         72:a3:13:2e:34:d3:1b:a9:dc:21:73:31:23:35:a2:d2:66:4a:
         89:ad:cf:de:83:ef:13:a6:9f:20:68:84:9d:d2:6b:be:63:e9:
         79:03:cd:62:e9:3a:8c:02:2d:5b:6a:20:16:4f:94:f1:86:47:
         d7:20:aa:b2:16:87:bb:6c:b3:18:c9:e2:4f:f8:dd:40:5d:85:
         4f:43:47:12:ee:ba:ff:a1:ba:a2:31:32:2a:c8:35:a9:c8:a4:
         c0:37:d6:92:46:1b:6c:02:33:d3:e9:b5:8e:be:69:f7:01:72:
         ce:f0:c8:99:c5:65:f0:e3:70:b6:ba:a6:b3:fa:15:56:ec:cc:
         cc:e0:00:9e:4d:42:a1:a6:4c:8d:54:ac:cf:20:1d:53:b0:d1:
         86:cd:f6:cb:27:1f:bd:1d:c4:4a:b8:84:df:69:a6:6c:eb:c6:
         e4:e7:f5:b5:1a:05:b8:1c:e0:c4:f1:2a:a1:44:d9:39:4d:03:
         10:e5:51:20:0c:74:d6:b6:6a:52:10:8b:21:75:37:52:de:3c:
         2c:6c:8d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:31 2024 by rpki-client on console-fra.rpki-client.org