Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383032303a3a2f34342d3434203d3e20323634353039.roa
File:                     323830343a323062343a383032303a3a2f34342d3434203d3e20323634353039.roa (raw, json)
Hash identifier:          aZP9grWqU5Mm9XKsOzIza2CWaAjIAE8ndWi1sE9y4Nk=
Subject key identifier:   E6:80:0E:95:12:5A:7D:25:89:ED:4B:35:BB:DB:1B:34:51:84:AA:D2
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       5C4B19C5F26B30DD9C009E92FF7927CB62CB7B24
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383032303a3a2f34342d3434203d3e20323634353039.roa
Signing time:             Tue 27 Aug 2024 16:18:09 +0000
ROA not before:           Tue 27 Aug 2024 16:13:09 +0000
ROA not after:            Tue 26 Aug 2025 16:18:09 +0000
asID:                     264509
IP address blocks:        2804:20b4:8020::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
                          rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:4b:19:c5:f2:6b:30:dd:9c:00:9e:92:ff:79:27:cb:62:cb:7b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Aug 27 16:13:09 2024 GMT
            Not After : Aug 26 16:18:09 2025 GMT
        Subject: CN=3082010A0282010100CCB308BB0E9CCF9761F710053651AD363E796021A3BCCF621E3125CEA95FA0B24F891F456EAAE116200B34A1AFCDE67727370F7E8A7B88569D72239C2486579B817D262F21EE461DBDE5E526878D2AEA8963845DB407EED19BC195BC70ED90C7F58C1661B2018FC95ADE598D22E46F9BB184EC3A7680B6A1C2F44E4CD6344DC841313EB1FDCF14AEA5AC39E92E4CEC4176D630ED63297AA0F9C12EF3B42C2A1794A52745C8C1DD997068B627AA11B64F7C827D5847F3C5CA76C04C47BAB7CE5A0586B5E121641827050256F5C39F67047ACFB9CD0384FDBBBEEBD5AC2FDEB9D66A74E9BD4755F23B9E7C2A4A409127AE22DEFC2E255E0F6C84AA3BBE60209B1F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b3:08:bb:0e:9c:cf:97:61:f7:10:05:36:51:
                    ad:36:3e:79:60:21:a3:bc:cf:62:1e:31:25:ce:a9:
                    5f:a0:b2:4f:89:1f:45:6e:aa:e1:16:20:0b:34:a1:
                    af:cd:e6:77:27:37:0f:7e:8a:7b:88:56:9d:72:23:
                    9c:24:86:57:9b:81:7d:26:2f:21:ee:46:1d:bd:e5:
                    e5:26:87:8d:2a:ea:89:63:84:5d:b4:07:ee:d1:9b:
                    c1:95:bc:70:ed:90:c7:f5:8c:16:61:b2:01:8f:c9:
                    5a:de:59:8d:22:e4:6f:9b:b1:84:ec:3a:76:80:b6:
                    a1:c2:f4:4e:4c:d6:34:4d:c8:41:31:3e:b1:fd:cf:
                    14:ae:a5:ac:39:e9:2e:4c:ec:41:76:d6:30:ed:63:
                    29:7a:a0:f9:c1:2e:f3:b4:2c:2a:17:94:a5:27:45:
                    c8:c1:dd:99:70:68:b6:27:aa:11:b6:4f:7c:82:7d:
                    58:47:f3:c5:ca:76:c0:4c:47:ba:b7:ce:5a:05:86:
                    b5:e1:21:64:18:27:05:02:56:f5:c3:9f:67:04:7a:
                    cf:b9:cd:03:84:fd:bb:be:eb:d5:ac:2f:de:b9:d6:
                    6a:74:e9:bd:47:55:f2:3b:9e:7c:2a:4a:40:91:27:
                    ae:22:de:fc:2e:25:5e:0f:6c:84:aa:3b:be:60:20:
                    9b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:80:0E:95:12:5A:7D:25:89:ED:4B:35:BB:DB:1B:34:51:84:AA:D2
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383032303a3a2f34342d3434203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b4:8020::/44

    Signature Algorithm: sha256WithRSAEncryption
         98:3a:bd:78:c2:34:d0:23:63:d1:72:89:80:f1:b1:ab:38:b0:
         22:f8:4f:2a:51:6e:54:ad:00:2f:ee:d4:37:5f:3d:1f:c8:c9:
         50:22:99:e9:b9:ff:a4:2f:ad:e8:cf:eb:3b:d3:f4:c5:0c:ed:
         80:e6:57:90:52:5b:db:62:09:2c:aa:35:46:8b:1f:fc:66:12:
         33:c5:f6:ce:c4:15:d4:c5:90:5c:ca:28:82:56:59:e4:82:6f:
         9f:47:0b:64:a1:6a:47:c0:22:3d:f3:47:67:9e:97:09:f3:e7:
         9e:6b:76:13:71:b5:6f:28:b6:27:3c:e2:51:8b:05:06:14:94:
         5a:c2:09:f3:c2:9f:31:35:52:0a:f0:b3:77:cc:fc:95:af:b2:
         4b:bb:71:86:e6:a9:da:da:7d:52:ca:66:0f:53:9a:c0:57:4a:
         e2:ce:fa:ee:c8:f7:0f:18:00:3a:93:c7:ae:49:b9:58:4e:c6:
         82:f9:97:3e:a6:b1:52:42:85:6d:dc:0e:3d:fb:ac:53:77:06:
         03:8e:eb:52:73:90:9b:d4:25:c8:85:aa:aa:48:36:bd:e6:2c:
         0a:fe:ec:7c:49:c6:cb:ad:15:f7:56:5f:c2:c0:fc:d1:77:e5:
         1c:80:7d:56:57:68:b4:7c:cd:83:94:83:52:77:5f:c8:c9:6d:
         0e:14:de:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:05 2024 by rpki-client on console-ams.rpki-client.org