Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/323830343a326566633a3a2f33322d3438203d3e20323634383634.roa
File:                     323830343a326566633a3a2f33322d3438203d3e20323634383634.roa (raw, json)
Hash identifier:          cbaQJ3hW3zfItnci8IpTOOKH6i+HEgEaayJxZznvEIM=
Subject key identifier:   83:CC:1E:D8:DB:79:8B:78:B5:1E:54:E5:B4:45:0C:F5:77:E9:28:18
Certificate issuer:       /CN=2E8CF693E5DE3DEE3BA971BC3B7904D999F127B5
Certificate serial:       6C2ADD4147A0F6A2DB9A6D3DEF8F349E240C5AE2
Authority key identifier: 2E:8C:F6:93:E5:DE:3D:EE:3B:A9:71:BC:3B:79:04:D9:99:F1:27:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8CF693E5DE3DEE3BA971BC3B7904D999F127B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/323830343a326566633a3a2f33322d3438203d3e20323634383634.roa
Signing time:             Thu 17 Oct 2024 13:53:16 +0000
ROA not before:           Thu 17 Oct 2024 13:48:16 +0000
ROA not after:            Thu 16 Oct 2025 13:53:16 +0000
asID:                     264864
IP address blocks:        2804:2efc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/2E8CF693E5DE3DEE3BA971BC3B7904D999F127B5.crl
                          rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/2E8CF693E5DE3DEE3BA971BC3B7904D999F127B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8CF693E5DE3DEE3BA971BC3B7904D999F127B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 20:38:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2a:dd:41:47:a0:f6:a2:db:9a:6d:3d:ef:8f:34:9e:24:0c:5a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8CF693E5DE3DEE3BA971BC3B7904D999F127B5
        Validity
            Not Before: Oct 17 13:48:16 2024 GMT
            Not After : Oct 16 13:53:16 2025 GMT
        Subject: CN=83CC1ED8DB798B78B51E54E5B4450CF577E92818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fa:60:99:90:7f:b1:8b:51:6a:25:b2:97:e6:
                    2f:ee:a9:16:99:78:91:a4:4d:45:45:dd:37:d5:0f:
                    32:26:cc:ef:0f:79:83:99:96:71:29:8a:2f:10:e0:
                    c4:b9:e3:7f:0c:e2:17:ad:8f:f9:5b:28:2e:d1:0c:
                    a0:db:2b:56:ec:fb:32:cc:75:72:b9:ac:b2:ed:cc:
                    ca:25:02:ed:01:0e:91:0b:31:0d:1b:da:76:f8:cd:
                    e3:7c:29:39:5a:0e:5f:1b:07:bc:b5:f7:63:6f:82:
                    d2:50:39:61:13:7b:dd:48:0e:63:e5:64:ca:2b:11:
                    fb:96:63:46:ed:c9:c9:59:c4:b6:68:68:80:19:6b:
                    3e:6d:a5:e3:bc:e2:79:f9:c9:3d:bf:23:a2:58:2b:
                    d6:13:06:79:db:36:fe:12:75:cf:8f:3d:fb:10:a3:
                    af:58:94:2d:f6:ed:07:85:a4:5b:53:13:3e:b4:53:
                    ee:79:c0:70:78:71:e2:80:16:51:8e:d6:df:9b:bd:
                    73:04:d3:af:a7:25:14:ac:9a:80:f3:a8:3f:9e:3d:
                    61:3a:23:37:3b:e4:17:06:3f:89:bf:98:8b:14:33:
                    34:51:5b:2e:60:6a:b7:b8:c3:06:2b:8f:c1:dc:48:
                    55:9f:09:07:99:8b:6c:61:97:b7:d5:27:4a:54:2a:
                    13:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CC:1E:D8:DB:79:8B:78:B5:1E:54:E5:B4:45:0C:F5:77:E9:28:18
            X509v3 Authority Key Identifier:
                keyid:2E:8C:F6:93:E5:DE:3D:EE:3B:A9:71:BC:3B:79:04:D9:99:F1:27:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/2E8CF693E5DE3DEE3BA971BC3B7904D999F127B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8CF693E5DE3DEE3BA971BC3B7904D999F127B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/323830343a326566633a3a2f33322d3438203d3e20323634383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2efc::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:82:44:57:1c:17:c3:ac:bf:18:2a:8f:14:f1:02:2f:3e:08:
         84:67:57:c5:cf:76:73:58:be:4a:bc:16:71:dd:50:52:cc:07:
         e9:36:ff:ab:dc:f6:a5:04:a8:93:35:76:37:e8:bd:31:fc:d2:
         14:52:41:14:79:09:76:f2:fd:c8:55:85:23:1c:d4:3a:71:00:
         02:2c:2d:d5:bb:e4:6e:08:66:67:40:15:4a:c0:ca:0c:bc:bf:
         28:91:20:5a:e9:71:74:9d:0d:33:ef:59:db:92:8f:fb:46:19:
         64:38:66:65:6f:fe:18:31:10:15:95:0b:f6:1a:d7:62:74:f0:
         43:32:e3:87:38:c3:66:c1:e0:95:da:93:70:ec:2b:3d:8f:d8:
         80:22:4e:27:88:45:5f:35:63:dc:77:81:16:2a:fc:2c:a5:dd:
         b1:24:0a:49:37:1d:81:f9:bf:99:f6:ec:7f:60:2a:93:a8:d8:
         38:db:5d:18:95:f7:17:62:80:fe:72:83:f1:6c:e6:6d:fd:ab:
         70:35:e0:4c:39:64:70:5b:64:0d:9a:e8:b6:10:b3:84:a8:ca:
         75:5c:f2:df:b4:9f:a0:52:0e:fd:05:39:ea:66:8a:34:dc:65:
         ee:95:d5:e3:37:37:f4:76:58:4e:7c:ad:2d:82:57:01:c8:a1:
         bc:8b:68:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:34 2024 by rpki-client on console-ams.rpki-client.org