Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a3a2f33322d3332203d3e20323633363237.roa
File:                     323830343a313034343a3a2f33322d3332203d3e20323633363237.roa (raw, json)
Hash identifier:          5Z0gznJUwec84G8f8bJRBUgReCmezA1h6090TX0OpcA=
Subject key identifier:   26:55:48:56:B6:33:C3:20:1B:8E:6D:95:4F:35:B6:8E:A9:B5:59:AC
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       018A0DF0E6FB0982923B6B0D3952A909296BC551
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a3a2f33322d3332203d3e20323633363237.roa
Signing time:             Tue 23 Apr 2024 19:13:40 +0000
ROA not before:           Tue 23 Apr 2024 19:08:40 +0000
ROA not after:            Tue 22 Apr 2025 19:13:40 +0000
asID:                     263627
IP address blocks:        2804:1044::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:0d:f0:e6:fb:09:82:92:3b:6b:0d:39:52:a9:09:29:6b:c5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Apr 23 19:08:40 2024 GMT
            Not After : Apr 22 19:13:40 2025 GMT
        Subject: CN=26554856B633C3201B8E6D954F35B68EA9B559AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:38:1f:4b:24:6e:87:9d:f3:31:9d:be:ea:bd:
                    a6:39:9b:7b:24:28:d6:bb:6a:ec:f1:1f:51:d6:da:
                    ed:a9:9b:2e:0b:ac:da:b2:f8:ad:9b:0e:ac:d8:cb:
                    e5:a5:e5:8d:dd:a9:72:c8:c3:3f:78:cf:76:15:61:
                    17:38:ea:80:14:9e:13:7e:86:9e:ec:3f:c5:2a:53:
                    49:7a:d9:05:6a:59:c8:52:21:39:71:0b:54:94:f7:
                    1b:9d:59:b1:f6:a2:39:2c:1e:3b:3a:d0:f5:fb:86:
                    f3:e5:55:c3:7b:20:33:e8:8b:65:2e:b9:27:79:25:
                    7d:d7:82:75:94:a5:98:c8:c1:8f:43:a5:b8:75:c6:
                    f4:0a:01:5d:65:70:40:52:cf:cb:e9:45:77:9c:6a:
                    45:02:8c:84:db:30:21:0a:24:97:97:1d:79:83:7c:
                    55:d3:26:2f:a1:3c:50:49:ed:1f:b0:34:82:d0:23:
                    be:3c:75:63:a8:18:f8:80:3b:2c:70:93:95:97:d9:
                    4f:0d:e7:d0:6a:a3:76:b4:b3:78:a6:e3:0d:31:90:
                    a6:65:52:e4:94:77:e6:31:62:a3:ca:00:e8:16:92:
                    6b:1f:32:89:bf:1c:7d:9a:db:b0:cc:ce:f9:7f:00:
                    2d:31:a2:53:43:a6:13:e0:91:5d:d8:ea:30:83:21:
                    f3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:55:48:56:B6:33:C3:20:1B:8E:6D:95:4F:35:B6:8E:A9:B5:59:AC
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a3a2f33322d3332203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1044::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:3d:16:31:63:b6:83:7f:05:7a:e9:48:54:b7:7a:25:5b:e1:
         33:61:73:f2:69:8c:44:4d:f4:fa:1b:32:f1:5c:f0:72:0d:c8:
         96:82:68:e8:1f:51:1e:ec:0f:f4:dd:1a:53:c1:df:c3:9b:2e:
         72:bf:47:79:9c:4f:6c:75:82:eb:50:e3:a6:10:22:40:43:7b:
         33:ca:e7:0c:ed:0a:24:ec:f3:d2:1d:25:8e:f8:cb:4a:26:e0:
         8a:0d:03:0e:ef:4a:a7:78:aa:0a:ae:93:53:1a:71:26:58:c7:
         82:41:6d:bb:f9:f1:3c:3b:de:9f:01:83:90:2a:23:90:0d:74:
         85:6a:6c:f6:81:ef:70:a6:c8:bb:d7:de:6d:da:83:c5:cf:2e:
         b9:9a:88:a4:ea:26:0e:e3:93:60:d0:71:f0:99:0c:b9:9e:c5:
         9d:b2:fe:74:74:7d:eb:14:83:50:06:20:9b:d1:ff:e3:ac:75:
         4e:2f:37:78:64:f8:0c:3d:07:1c:31:92:f4:4d:81:34:82:df:
         59:14:12:5d:12:d4:4e:59:0d:cb:99:44:0f:16:42:5b:b2:5a:
         78:02:61:ff:fe:05:49:2a:f7:5a:88:30:61:84:a3:16:89:75:
         c9:cb:04:af:ce:9a:1a:63:5c:b3:84:25:07:82:be:b8:3a:26:
         22:5f:a6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:39 2024 by rpki-client on console-fra.rpki-client.org