Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313430303a3a2f34302d3430203d3e203131303937.roa
File:                     323830313a38303a313430303a3a2f34302d3430203d3e203131303937.roa (raw, json)
Hash identifier:          BL/5DKb0BWbF6Hiu84bMCgAx2JTs30ICjMBcBcLfbxc=
Subject key identifier:   11:77:7B:12:3F:7E:75:11:78:F2:C8:32:5E:BF:6F:8F:CE:C4:A7:75
Certificate issuer:       /CN=BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C
Certificate serial:       77DBA5076606C28AE7C8D056C1F14E9DC9C96BE6
Authority key identifier: BC:61:E6:D5:F8:50:C8:FF:71:4F:E8:34:B7:A2:E7:1D:62:AB:BC:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313430303a3a2f34302d3430203d3e203131303937.roa
Signing time:             Tue 03 Sep 2024 19:14:38 +0000
ROA not before:           Tue 03 Sep 2024 19:09:38 +0000
ROA not after:            Tue 02 Sep 2025 19:14:38 +0000
asID:                     11097
IP address blocks:        2801:80:1400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.crl
                          rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:db:a5:07:66:06:c2:8a:e7:c8:d0:56:c1:f1:4e:9d:c9:c9:6b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C
        Validity
            Not Before: Sep  3 19:09:38 2024 GMT
            Not After : Sep  2 19:14:38 2025 GMT
        Subject: CN=11777B123F7E751178F2C8325EBF6F8FCEC4A775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b4:84:36:89:7c:4b:a1:7e:b5:ba:08:0a:84:
                    1f:bf:a3:95:06:3d:66:35:5a:13:1d:92:0d:af:17:
                    5c:28:8b:d3:2d:20:1b:d5:86:2b:9f:bb:87:e6:ed:
                    54:29:46:aa:e2:6d:64:17:91:e4:6a:6f:ae:c4:dc:
                    72:50:4e:b7:15:04:5f:7b:b2:07:b9:e1:83:4b:41:
                    d4:df:b6:f3:a0:65:b0:1c:37:43:4c:8c:a0:1a:6a:
                    23:8d:d8:98:25:ab:ea:d4:09:f5:f2:0d:62:fc:33:
                    80:5b:60:ea:19:a5:62:1c:a9:ea:3e:7d:10:9b:81:
                    79:ea:62:01:22:46:56:90:ad:d5:4b:2b:0f:1f:d6:
                    7e:72:4f:be:72:c0:1b:62:2c:84:1a:6b:73:9d:d2:
                    2a:a7:1f:e5:99:66:e0:3c:04:10:64:ee:1a:8a:36:
                    74:de:7c:25:0e:16:39:c1:4b:02:1b:b5:e3:1a:9d:
                    19:de:6b:84:e4:69:f0:bd:79:e2:ac:59:ed:78:85:
                    b9:db:40:0a:59:69:ac:91:b7:54:5d:14:10:31:6f:
                    7a:81:50:3b:2d:b1:51:33:48:88:da:76:39:c9:d8:
                    f1:82:3a:1e:04:c6:16:1b:26:c4:17:ff:dd:c4:08:
                    bf:13:50:1a:d6:79:ee:9e:22:10:74:6c:26:d2:86:
                    71:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:77:7B:12:3F:7E:75:11:78:F2:C8:32:5E:BF:6F:8F:CE:C4:A7:75
            X509v3 Authority Key Identifier:
                keyid:BC:61:E6:D5:F8:50:C8:FF:71:4F:E8:34:B7:A2:E7:1D:62:AB:BC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313430303a3a2f34302d3430203d3e203131303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         0f:95:d8:88:5e:53:9c:14:f4:d9:3e:f6:12:6c:9d:11:54:ed:
         7f:fa:95:ad:89:a7:05:f0:1b:59:fe:fe:fd:cf:6f:a0:d8:52:
         7d:ec:24:62:f7:fb:aa:31:f3:62:7e:48:43:64:c5:7c:d3:42:
         ab:c1:8b:16:76:1d:44:0d:37:8d:6f:09:08:20:e3:ac:67:d4:
         20:68:48:1f:38:38:c9:89:d1:3e:ca:4f:65:9e:92:db:1d:dd:
         e5:67:63:15:76:ec:70:18:95:e6:74:37:e0:98:cd:12:fc:c8:
         64:67:a0:ca:14:5d:1d:90:9c:e3:b6:c4:73:f1:70:86:d1:dd:
         97:96:0a:87:6b:a6:bf:78:fe:10:40:18:01:a5:55:a2:61:fc:
         56:90:53:81:8c:aa:c7:bf:70:2f:78:0a:0c:82:4c:1a:08:e9:
         94:73:bc:0c:e5:8c:77:89:54:60:5d:0c:59:8a:7b:31:de:3f:
         87:b2:86:a1:14:36:aa:e5:91:e3:e3:8d:44:ac:89:cd:80:5b:
         7c:76:76:75:07:3d:53:06:d8:79:cd:fa:30:3b:e7:3d:4c:d4:
         c8:fd:36:67:83:92:75:75:41:fe:c6:12:65:0c:65:4f:48:c6:
         3a:95:78:5e:83:2a:de:7a:f3:13:b4:3c:ad:e5:2b:c0:ea:e4:
         ba:af:8f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:29:58 2024 by rpki-client on console-fra.rpki-client.org