Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/323830343a326266303a613130333a3a2f34382d3438203d3e20323632373430.roa
File:                     323830343a326266303a613130333a3a2f34382d3438203d3e20323632373430.roa (raw, json)
Hash identifier:          ZmoHFNwtj+oICRE8QRBjJsjQWxKk2TEHLmNkQdQsJwE=
Subject key identifier:   C6:46:EE:36:B0:10:E8:16:7F:DE:31:1C:9D:26:A9:45:C4:F1:B0:6A
Certificate issuer:       /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial:       19BB9603C3D5C0B50012F24D94153390D633172E
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/323830343a326266303a613130333a3a2f34382d3438203d3e20323632373430.roa
Signing time:             Mon 23 Sep 2024 20:54:42 +0000
ROA not before:           Mon 23 Sep 2024 20:49:42 +0000
ROA not after:            Mon 22 Sep 2025 20:54:42 +0000
asID:                     262740
IP address blocks:        2804:2bf0:a103::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
                          rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:bb:96:03:c3:d5:c0:b5:00:12:f2:4d:94:15:33:90:d6:33:17:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
        Validity
            Not Before: Sep 23 20:49:42 2024 GMT
            Not After : Sep 22 20:54:42 2025 GMT
        Subject: CN=C646EE36B010E8167FDE311C9D26A945C4F1B06A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:41:80:a7:43:d3:94:11:60:31:3d:bf:3a:ad:
                    ca:15:9e:ee:ed:2c:28:63:e1:96:36:1a:78:db:3d:
                    77:16:7a:0f:66:8d:54:43:f5:92:45:3e:47:ca:5f:
                    53:97:89:37:de:1a:b3:8c:3c:fc:04:8f:86:c6:a0:
                    21:82:f0:a8:b7:53:97:75:ad:d9:44:33:c7:90:b9:
                    22:63:e0:d7:e5:06:b4:94:3c:a3:fb:04:7d:9a:8e:
                    05:48:55:cd:08:ae:cd:91:d8:78:32:4d:4f:ed:dc:
                    73:5c:a6:01:c4:53:5a:c2:45:fd:4f:f6:5b:e1:1a:
                    b0:d9:3b:6f:ab:c7:89:cb:c4:93:09:92:12:25:78:
                    02:d8:97:7e:5e:b8:2a:0b:0a:51:8b:55:fd:3b:81:
                    94:a4:72:50:9a:1d:f0:a1:5b:8e:7b:93:26:f3:ed:
                    87:cc:7f:63:0d:81:ee:c5:2a:a5:bb:a8:1c:ee:b5:
                    07:d7:97:53:d9:9a:66:ab:8c:70:fc:6e:06:96:9a:
                    1e:eb:9b:44:da:ca:bd:fb:62:14:b6:34:cc:d8:0d:
                    a5:46:5e:23:48:2a:28:8b:b2:e0:57:ff:9b:43:c9:
                    7d:be:d7:c9:a9:f5:a2:2b:ca:4e:a6:80:03:58:17:
                    a5:22:03:f3:9d:36:d9:72:fe:8f:4a:70:ca:46:5f:
                    99:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:46:EE:36:B0:10:E8:16:7F:DE:31:1C:9D:26:A9:45:C4:F1:B0:6A
            X509v3 Authority Key Identifier:
                keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/323830343a326266303a613130333a3a2f34382d3438203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bf0:a103::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:fc:26:0b:72:7b:d2:4d:29:71:92:ab:9b:81:c8:b6:03:0b:
         2d:d4:2e:ce:3a:e1:ac:8b:b2:8d:f9:b9:53:b9:07:a1:b8:7a:
         50:1f:fa:be:b8:15:34:d4:aa:14:d8:51:fa:38:fd:1f:65:a1:
         d4:2c:f3:92:6d:65:41:ed:ed:8e:7f:55:49:0c:97:d4:e8:c7:
         09:7c:e5:3a:e9:a2:4a:b3:3b:cf:34:6a:42:85:ce:e7:82:1f:
         f7:1e:0c:b6:73:06:37:3a:64:79:87:39:8f:55:d3:82:8e:f2:
         4e:1d:5f:40:7a:e5:28:96:65:2a:e1:44:50:c8:0f:21:3f:8c:
         1c:0f:33:25:49:8a:25:f0:7e:1d:d5:1c:dc:9a:b6:4f:03:e6:
         d1:9f:f9:75:d4:d2:73:3d:00:92:16:01:a9:c6:b3:11:ae:1d:
         e9:20:cd:1e:34:c2:1b:d4:0b:6f:48:5a:7c:2a:a8:00:7b:08:
         7d:b9:aa:5b:4b:64:d3:cb:e0:d9:3c:c2:70:19:ea:d8:ff:e0:
         57:90:70:f7:d7:72:61:fb:77:f1:9e:2e:15:90:a6:b6:cd:ff:
         05:49:bf:26:33:29:87:86:00:7a:2b:7b:24:c6:10:3d:22:fb:
         ad:4a:32:4c:10:db:fd:c9:17:5e:a3:ba:ce:34:ec:43:a3:e5:
         b8:aa:83:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:02 2024 by rpki-client on console-fra.rpki-client.org