Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/323830343a326266303a3130303a3a2f34382d3438203d3e20323632373430.roa
File:                     323830343a326266303a3130303a3a2f34382d3438203d3e20323632373430.roa (raw, json)
Hash identifier:          v4o0I2C5t4IovLhafXg+2RZhNO5W2jh7ESBMaDPjOfw=
Subject key identifier:   57:16:E8:51:15:A1:77:FC:95:6E:70:11:73:19:29:73:06:E0:EA:5E
Certificate issuer:       /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial:       4FB29F964600EC752D7387E5395E76C6AB5585D7
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/323830343a326266303a3130303a3a2f34382d3438203d3e20323632373430.roa
Signing time:             Mon 23 Sep 2024 20:54:45 +0000
ROA not before:           Mon 23 Sep 2024 20:49:45 +0000
ROA not after:            Mon 22 Sep 2025 20:54:45 +0000
asID:                     262740
IP address blocks:        2804:2bf0:100::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
                          rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b2:9f:96:46:00:ec:75:2d:73:87:e5:39:5e:76:c6:ab:55:85:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
        Validity
            Not Before: Sep 23 20:49:45 2024 GMT
            Not After : Sep 22 20:54:45 2025 GMT
        Subject: CN=5716E85115A177FC956E70117319297306E0EA5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:30:a9:aa:b7:d9:04:bb:a3:3c:16:66:ee:f4:
                    7f:2b:b0:a0:5c:79:1c:2f:1e:21:14:54:e0:07:cb:
                    4e:61:d9:c5:9c:63:77:19:cf:44:02:7e:89:b8:b8:
                    65:db:98:57:52:c3:05:32:46:32:14:14:b2:0c:a1:
                    6c:57:5e:30:10:cb:c9:d1:87:56:4f:7e:f2:83:f9:
                    4a:d4:fa:cc:87:49:5c:a2:55:95:3e:44:2e:bc:29:
                    ab:d1:8f:49:ff:73:a2:f0:c2:1f:60:51:0d:02:b7:
                    23:5f:4d:6b:3d:c3:e9:b4:bf:53:f0:f1:c7:28:1b:
                    cc:fd:76:15:f8:15:45:34:80:a2:0a:0b:75:61:5d:
                    51:6d:04:36:d2:c2:32:87:4f:c9:f8:4f:1b:a1:11:
                    0b:94:7b:ba:01:f5:98:0b:f1:fe:02:4b:01:d7:98:
                    36:43:9d:53:b5:d8:90:d1:83:e5:96:39:05:e6:57:
                    ab:4e:64:3d:db:e3:c0:5a:99:de:d0:75:dd:de:4f:
                    12:f8:5a:7f:78:7d:c4:37:3d:bc:3f:a0:86:1f:ec:
                    c8:5a:ab:e6:93:2a:1a:82:48:77:6b:82:a5:2c:71:
                    fb:58:36:d2:42:49:45:0c:fa:91:e1:1b:b5:36:24:
                    cb:a4:01:9f:ce:21:f5:f1:44:0e:e7:06:54:f9:f7:
                    4d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:16:E8:51:15:A1:77:FC:95:6E:70:11:73:19:29:73:06:E0:EA:5E
            X509v3 Authority Key Identifier:
                keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/323830343a326266303a3130303a3a2f34382d3438203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bf0:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:94:c5:f8:d1:db:f3:7e:63:2c:32:62:5f:70:37:ca:47:8d:
         d2:c0:81:32:4a:19:cc:7b:a5:dc:b7:8d:b2:d8:1a:d8:4c:21:
         2b:37:63:0e:43:a8:41:7f:33:0b:06:b3:12:5d:4e:35:08:5f:
         a8:64:66:bf:e0:5a:c3:8f:82:8a:6d:1f:f0:2f:de:e0:2d:c4:
         d1:93:61:79:f6:3c:0c:d2:c7:c7:29:4e:2f:fe:84:06:8a:fd:
         28:37:20:e5:da:f5:3b:0c:38:ad:7e:c8:9e:d1:4f:74:8e:8b:
         43:30:c1:21:1d:7b:34:d1:f7:d7:c0:b2:42:06:88:d6:59:de:
         cf:87:a8:a5:06:db:be:96:cb:f4:50:55:32:ab:c3:98:1e:40:
         f8:42:33:5b:49:a7:4a:0c:d6:4a:6b:43:f9:c4:bf:a2:5e:04:
         5c:20:94:e9:30:3f:49:28:f9:05:5b:da:b6:00:ff:71:6d:79:
         29:c5:94:89:62:f8:11:5b:2e:e6:9e:7a:54:7c:87:46:db:54:
         05:2b:59:ee:06:78:65:67:c6:ed:6e:f5:4e:d8:78:a6:e4:a3:
         21:33:b3:d2:74:92:77:4d:7f:90:83:7e:24:42:6b:24:a6:89:
         fe:13:08:fa:62:ea:78:6c:4c:56:b1:ad:ca:38:79:02:0f:e1:
         e2:95:99:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:02 2024 by rpki-client on console-fra.rpki-client.org