Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/323830343a3939383a3a2f33322d3634203d3e203238353839.roa
File:                     323830343a3939383a3a2f33322d3634203d3e203238353839.roa (raw, json)
Hash identifier:          xGy798FwT15K6ttsUqAbHzyr/YXaYTGmNI8V2O9LfDU=
Subject key identifier:   75:13:5F:16:AF:33:AC:3D:E9:A1:46:AB:0B:05:E1:58:DD:BD:87:84
Certificate issuer:       /CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
Certificate serial:       7C79546D781DAB0B0BFB05F9CD8B2C68863BDFA2
Authority key identifier: AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/323830343a3939383a3a2f33322d3634203d3e203238353839.roa
Signing time:             Fri 26 Jul 2024 18:16:24 +0000
ROA not before:           Fri 26 Jul 2024 18:11:24 +0000
ROA not after:            Fri 25 Jul 2025 18:16:24 +0000
asID:                     28589
IP address blocks:        2804:998::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl
                          rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:79:54:6d:78:1d:ab:0b:0b:fb:05:f9:cd:8b:2c:68:86:3b:df:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
        Validity
            Not Before: Jul 26 18:11:24 2024 GMT
            Not After : Jul 25 18:16:24 2025 GMT
        Subject: CN=75135F16AF33AC3DE9A146AB0B05E158DDBD8784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fd:e9:2e:4c:06:29:09:55:9f:87:d5:74:63:
                    fa:97:11:34:7b:6c:eb:49:c5:e1:5f:f0:62:92:dc:
                    7e:22:73:ab:c3:d0:95:5b:8a:1d:62:e1:99:94:c1:
                    9a:69:9f:bf:1d:e9:8a:0b:db:57:ca:f0:37:0f:c1:
                    12:3b:02:47:de:1f:f6:78:c5:92:77:79:49:90:ce:
                    1f:e8:b1:f3:77:5d:e7:37:65:00:8a:e9:8e:2b:e7:
                    60:16:02:ac:ff:a3:37:ba:62:64:38:04:81:13:98:
                    9d:06:85:5f:d1:da:9e:af:1a:b1:7a:ae:9d:3f:5c:
                    c6:b3:7e:8a:d9:86:b3:e6:72:ab:fb:c5:e2:9e:8f:
                    fb:70:1b:60:25:4f:a1:a0:e6:e3:e3:46:d2:e5:32:
                    4f:4b:5d:14:8b:c5:69:75:88:78:98:de:cd:6a:84:
                    5a:65:81:77:55:9c:9a:f8:78:41:3f:93:13:51:10:
                    79:4b:21:4e:10:bc:55:13:c7:d0:c3:69:5e:b2:2d:
                    bd:9f:f1:47:8a:cc:b5:41:8d:52:1a:01:32:cf:88:
                    ef:6a:6b:a6:6b:14:d9:ff:0b:f9:4a:c7:9f:f6:46:
                    cf:41:24:78:3d:ae:b0:23:47:94:d1:26:76:a2:47:
                    34:85:2f:64:bb:b8:5f:05:71:fd:5a:36:41:09:f9:
                    02:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:13:5F:16:AF:33:AC:3D:E9:A1:46:AB:0B:05:E1:58:DD:BD:87:84
            X509v3 Authority Key Identifier:
                keyid:AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/323830343a3939383a3a2f33322d3634203d3e203238353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:998::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:d2:80:72:4f:db:1a:a8:86:aa:ec:2c:46:77:d1:9b:5e:e9:
         59:c4:2f:58:33:a9:e7:58:0b:ab:6a:d9:51:c2:dd:1e:7f:64:
         5f:5e:b5:07:a9:5a:33:6b:e6:f0:b8:82:c1:06:d6:e1:c9:e3:
         a3:cd:c6:95:75:c7:78:20:ec:b0:7c:51:40:af:86:37:74:dc:
         9c:83:5e:22:1a:16:02:b9:9a:19:e5:f5:0a:c2:66:bd:70:34:
         e5:4a:38:75:ad:c3:89:c7:0a:f2:86:c9:5a:e7:8f:5d:b3:d4:
         cd:a1:08:c1:69:26:d7:c3:1a:77:4c:fd:46:57:c8:a8:69:c3:
         96:43:09:df:a4:2f:4d:e6:57:ed:b4:ce:0d:ea:4b:a5:7c:45:
         d2:d0:f8:a1:b4:e2:47:2d:06:94:82:77:ce:1e:d1:c1:35:8e:
         38:8f:a4:90:f2:a4:2a:2f:6b:b6:0c:69:d1:b1:00:e3:59:51:
         be:ee:de:7c:f9:b2:6e:e6:25:7c:43:21:0f:a1:e1:ef:b0:e3:
         0b:d9:5b:f0:ca:c9:72:6b:52:bc:6f:39:a7:50:3a:fa:68:70:
         aa:9d:e3:68:74:a1:6d:b2:47:71:7a:8c:8f:2d:8e:ae:3c:3b:
         13:5b:d1:7f:c6:f9:05:86:22:6e:61:86:40:7c:37:c9:59:87:
         9c:25:5e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:01 2024 by rpki-client on console-ams.rpki-client.org