Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383034303a3a2f34342d3434203d3e20323634353039.roa
File:                     323830343a323062343a383034303a3a2f34342d3434203d3e20323634353039.roa (raw, json)
Hash identifier:          v0Ta4CzqRd9OVo2IVImn6fZgCWnpKQksZMoA9ocxAhU=
Subject key identifier:   9D:41:EE:C5:4C:D2:A3:3A:0E:07:96:C0:7A:FA:76:11:A8:1E:7E:41
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       585D162EB59EDCC4ACAEF44B4CEA38DC84C80D08
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383034303a3a2f34342d3434203d3e20323634353039.roa
Signing time:             Wed 30 Oct 2024 01:07:14 +0000
ROA not before:           Wed 30 Oct 2024 01:02:14 +0000
ROA not after:            Wed 29 Oct 2025 01:07:14 +0000
asID:                     264509
IP address blocks:        2804:20b4:8040::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
                          rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5d:16:2e:b5:9e:dc:c4:ac:ae:f4:4b:4c:ea:38:dc:84:c8:0d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Oct 30 01:02:14 2024 GMT
            Not After : Oct 29 01:07:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:97:c1:40:ad:fe:3c:76:12:d5:bf:37:86:74:
                    14:46:01:55:56:5f:5c:9e:93:0c:b1:42:48:3e:7c:
                    88:f2:4f:af:3d:0a:e3:77:42:31:ea:59:f7:b0:69:
                    31:5a:cf:67:3b:bf:65:fb:ef:78:cf:09:57:7a:1c:
                    23:65:b3:82:fa:00:c8:66:86:0d:70:ca:63:af:41:
                    0b:f9:22:bd:41:fa:ca:8a:73:f5:27:0f:0e:1a:d2:
                    9a:da:85:ee:c6:76:01:8e:31:2e:cb:67:a5:39:f3:
                    4b:ee:3c:48:5e:b2:ef:9e:9e:fc:98:8b:6f:29:ae:
                    ec:1f:f5:d8:5a:63:bd:ba:da:89:78:de:70:db:0c:
                    57:ca:a7:52:62:5a:a3:dd:7a:4e:2a:bf:f9:49:00:
                    01:3b:99:ac:1d:8b:85:98:1b:4c:bd:a1:7c:a6:af:
                    0c:51:db:a8:eb:76:77:2f:8a:b7:dd:4a:a7:ca:6e:
                    dc:2d:8b:04:cb:66:6e:33:8f:a1:df:17:e3:24:f8:
                    45:4e:a2:51:4d:8f:ae:fe:34:6a:e2:3e:f2:d8:48:
                    c0:8e:21:5e:ab:d0:c2:2c:80:a6:79:17:a3:1b:f9:
                    27:e4:32:aa:47:46:fa:d4:23:86:21:e1:3e:0d:68:
                    cd:2f:19:d1:54:04:57:41:34:85:1a:df:bd:ad:19:
                    0d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:41:EE:C5:4C:D2:A3:3A:0E:07:96:C0:7A:FA:76:11:A8:1E:7E:41
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383034303a3a2f34342d3434203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b4:8040::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:f7:8b:cb:9d:df:b6:54:ce:b0:97:61:fe:f2:4b:cc:99:92:
         ed:ad:8a:51:61:5b:3a:7f:e2:95:cc:20:29:b1:cb:54:ee:91:
         a8:01:79:b6:69:d7:6b:b5:ab:1b:26:d8:55:3e:68:e9:c5:d4:
         12:ef:95:d6:b8:95:0e:e7:2d:77:55:d0:a9:f6:8e:48:7a:3f:
         42:61:85:95:b0:ae:ea:e1:59:1e:4c:87:3d:61:d3:e8:e1:b3:
         f2:f0:89:a8:73:47:90:d7:2c:62:2c:ed:8b:a2:15:4e:b6:dc:
         28:6b:a0:86:7b:d4:99:2d:14:61:d7:bd:65:16:12:69:31:02:
         cc:8a:94:48:23:13:44:21:c2:ae:53:25:08:46:2a:32:24:6d:
         f6:41:12:b6:48:1d:e6:94:12:b0:f4:eb:6d:f1:11:b6:4b:0f:
         24:94:fe:11:3b:25:f1:10:02:48:3e:c5:1a:87:8e:4e:d8:2e:
         1e:1b:33:5f:e0:45:15:38:fb:47:8d:61:14:ff:45:6d:9d:6c:
         1e:43:a4:7f:84:89:ae:f3:67:4f:a3:10:f6:5a:64:57:23:9c:
         54:44:01:ba:de:d8:b3:76:a0:0a:9f:0d:70:e7:9e:e9:8f:ed:
         7e:c4:6a:db:a8:a7:45:c0:b4:23:2b:94:24:d4:d8:3f:95:5b:
         bd:f1:10:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:39 2024 by rpki-client on console-fra.rpki-client.org