Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/323830343a326266303a613130313a3a2f34382d3438203d3e20323632373430.roa
File:                     323830343a326266303a613130313a3a2f34382d3438203d3e20323632373430.roa (raw, json)
Hash identifier:          ld8qazitQ8z4E+6P3vcLfwMKNQkkaJ/e21CJ04bLW+o=
Subject key identifier:   97:FF:AE:90:AF:F2:6D:D1:B2:1B:41:89:43:FD:89:83:46:69:20:E6
Certificate issuer:       /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial:       38AC46EE6E00714CB9C8A3E651BE5AE6F6307EF5
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/323830343a326266303a613130313a3a2f34382d3438203d3e20323632373430.roa
Signing time:             Mon 23 Sep 2024 20:54:35 +0000
ROA not before:           Mon 23 Sep 2024 20:49:35 +0000
ROA not after:            Mon 22 Sep 2025 20:54:35 +0000
asID:                     262740
IP address blocks:        2804:2bf0:a101::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
                          rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ac:46:ee:6e:00:71:4c:b9:c8:a3:e6:51:be:5a:e6:f6:30:7e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
        Validity
            Not Before: Sep 23 20:49:35 2024 GMT
            Not After : Sep 22 20:54:35 2025 GMT
        Subject: CN=97FFAE90AFF26DD1B21B418943FD8983466920E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:67:20:94:cd:b0:66:93:53:30:d9:0d:2e:
                    a4:ef:a3:16:1f:e7:f6:bb:da:07:f3:b1:dd:b7:68:
                    3d:92:60:df:36:45:87:6e:c9:ed:5a:b4:31:8f:84:
                    3f:79:54:c9:16:4f:76:34:34:bc:1c:09:e3:44:75:
                    82:9d:8f:e9:45:10:ef:16:2e:72:25:73:78:f4:9e:
                    42:a3:a9:da:61:86:a9:9c:ad:4b:98:19:a8:db:14:
                    b4:54:67:7c:bd:48:76:d3:b5:64:91:00:ef:af:34:
                    b6:6a:a3:af:89:73:51:5e:f2:64:d5:de:3c:12:4e:
                    de:2b:58:11:64:22:f2:0c:29:98:d0:77:f8:94:00:
                    9f:6a:45:d8:5a:c2:1b:6e:da:7c:b9:43:c8:68:80:
                    b9:6a:5d:58:d5:38:9c:a3:51:56:3c:41:0f:7e:1d:
                    30:a8:68:7d:aa:dd:55:43:b2:8b:f2:67:e6:f5:c5:
                    4a:99:e9:0c:75:1f:c9:ce:5a:ba:c2:bf:57:f3:48:
                    06:75:fa:79:44:da:fb:0a:80:eb:a1:e4:15:e4:c9:
                    f8:f0:70:e7:53:ad:31:ec:5e:bf:b9:26:c4:be:5c:
                    82:ac:ef:9b:63:9f:bd:2d:23:60:bc:2f:90:1c:d9:
                    c4:6f:fe:29:38:25:d1:65:e3:c7:79:e4:c4:93:08:
                    3b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FF:AE:90:AF:F2:6D:D1:B2:1B:41:89:43:FD:89:83:46:69:20:E6
            X509v3 Authority Key Identifier:
                keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/323830343a326266303a613130313a3a2f34382d3438203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bf0:a101::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:67:ca:fa:b2:ec:97:b6:df:95:f1:66:78:a9:a4:63:78:ec:
         75:87:66:61:cc:cf:a5:bc:8e:2a:f9:1d:23:32:b3:b4:18:ad:
         68:01:8d:ea:93:c2:5a:12:bd:9c:16:c0:26:0c:93:2d:0b:48:
         92:dc:4f:99:3c:c9:4e:26:8b:4b:f7:21:eb:4c:68:8c:2f:50:
         4f:2b:b3:34:9a:b2:51:78:9b:7f:6d:2f:ec:35:6b:ee:f6:e5:
         7b:4b:02:e9:26:2e:71:49:40:db:9d:d7:0d:1e:37:56:4c:79:
         52:b4:a7:79:47:4f:f6:9f:59:39:65:50:97:66:8c:c6:8a:e1:
         0c:c6:88:49:b6:ad:54:36:ef:ac:82:4f:83:2d:62:c4:c6:c9:
         31:93:16:8b:fd:e7:fe:e8:58:e7:9a:0d:bf:73:f6:d1:ab:e4:
         bf:42:1e:33:52:a6:18:50:fa:16:ba:a9:f1:ee:7b:70:e7:43:
         56:d8:ba:11:ea:70:56:e8:cb:cc:58:ac:d4:66:6f:4a:fb:b6:
         97:6b:b1:56:f8:95:d8:a5:45:6d:95:f3:32:8e:72:0c:7e:c4:
         c3:88:93:b6:ad:91:2e:ef:6a:d9:4b:60:0c:35:d4:26:31:c8:
         f4:33:f6:24:db:5e:04:4f:ca:b6:2c:33:59:56:c0:d0:c1:af:
         d8:ca:86:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:02 2024 by rpki-client on console-fra.rpki-client.org