Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/323830343a366336633a3a2f33322d3438203d3e20323730343637.roa
File:                     323830343a366336633a3a2f33322d3438203d3e20323730343637.roa (raw, json)
Hash identifier:          9v5D58Z/OqFK4M2s7Fy9auOLxQpats1LcBPgKCgZ0k8=
Subject key identifier:   2C:25:29:E2:DA:6A:C7:E9:64:E4:96:35:B2:3A:87:61:91:44:C2:AE
Certificate issuer:       /CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF
Certificate serial:       1A83FE7190FA4CBA8C0591F6ECBBE29035398701
Authority key identifier: CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/323830343a366336633a3a2f33322d3438203d3e20323730343637.roa
Signing time:             Fri 13 Sep 2024 04:11:53 +0000
ROA not before:           Fri 13 Sep 2024 04:06:53 +0000
ROA not after:            Fri 12 Sep 2025 04:11:53 +0000
asID:                     270467
IP address blocks:        2804:6c6c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl
                          rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:25:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:83:fe:71:90:fa:4c:ba:8c:05:91:f6:ec:bb:e2:90:35:39:87:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF
        Validity
            Not Before: Sep 13 04:06:53 2024 GMT
            Not After : Sep 12 04:11:53 2025 GMT
        Subject: CN=2C2529E2DA6AC7E964E49635B23A87619144C2AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a3:e1:cf:b3:75:0a:ff:87:59:c6:3a:9a:bd:
                    a5:b8:95:bb:8a:8a:9b:bf:92:db:b6:2e:35:8a:a9:
                    53:6f:4d:41:9c:03:16:cc:04:61:96:d1:c6:4f:b0:
                    5e:44:8b:d5:94:2f:67:f2:a1:23:d8:44:55:ef:50:
                    72:65:6b:6a:06:ea:8e:9a:6a:bc:47:d9:fb:20:4f:
                    b4:53:2a:52:02:08:4c:3b:0c:7a:ea:2c:25:bc:b8:
                    91:31:ef:a4:08:cf:54:2a:2d:68:ab:d0:c2:8c:bd:
                    d8:6a:c3:f3:bc:4c:7b:9b:52:9e:c8:cc:18:be:af:
                    e5:0b:be:47:ab:84:51:df:09:f9:bd:4a:59:97:26:
                    b4:80:9a:62:cd:d5:e5:c8:0e:86:dc:71:59:a8:1d:
                    ea:ed:3f:6e:9f:c0:d5:a7:ca:5d:fc:bf:36:3a:2d:
                    00:8b:9f:5a:e5:34:11:ef:9b:f4:33:b8:df:a6:6c:
                    a9:40:ef:97:6f:02:9d:2d:77:f3:13:a5:db:c7:de:
                    fe:67:2e:74:ec:99:af:51:2c:3b:d6:12:7a:5e:ff:
                    2a:1a:15:fe:4d:da:82:53:bf:22:4d:bb:49:7a:51:
                    77:6e:9b:83:35:bf:e6:72:2e:f8:e4:c2:18:df:4b:
                    b5:db:52:c6:17:89:ef:c3:4e:a4:95:83:00:2a:8c:
                    b7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:25:29:E2:DA:6A:C7:E9:64:E4:96:35:B2:3A:87:61:91:44:C2:AE
            X509v3 Authority Key Identifier:
                keyid:CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/323830343a366336633a3a2f33322d3438203d3e20323730343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:74:ac:20:99:05:d7:ec:ea:b3:b1:4d:01:fb:75:92:3f:4d:
         d2:a2:ba:a2:ee:8c:52:2e:d3:52:81:77:57:6c:ac:bc:65:b9:
         dc:d6:6d:68:68:76:fa:44:d6:0c:40:15:40:9e:4b:b3:85:4f:
         96:44:6e:b5:e0:3f:ff:de:fd:af:bc:4e:80:17:9c:a4:a5:25:
         ed:2d:05:24:c4:33:80:02:e6:a5:26:71:6b:8f:8f:62:e9:e7:
         0b:94:12:1d:12:d0:0c:5d:91:a9:c7:55:89:1d:e1:35:59:21:
         a9:e2:bb:6b:76:2a:54:03:22:02:d3:c5:28:83:b2:7b:4f:2d:
         a7:78:77:c4:98:78:50:be:58:42:19:90:55:b3:47:92:37:b4:
         35:0d:32:84:a8:6f:8b:80:7f:b5:cf:1a:62:72:fc:47:91:62:
         a9:18:73:29:01:a1:01:e7:a5:a0:43:54:ab:22:f0:63:6e:33:
         7f:56:2d:f2:bf:7f:ce:9f:db:87:80:d4:64:88:6f:4f:d7:46:
         79:c5:19:90:96:a3:6d:6e:96:47:b3:59:01:da:4c:2e:40:03:
         05:d4:ee:92:e2:86:32:1f:78:09:6d:27:7b:e2:eb:ab:84:ec:
         41:cd:c5:7c:da:e0:3b:76:66:6e:85:38:6a:d3:4b:52:51:b7:
         f9:ec:0e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:31 2024 by rpki-client on console-fra.rpki-client.org