Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a313530303a3a2f34302d3430203d3e20323634303232.roa
File:                     323830343a323939303a313530303a3a2f34302d3430203d3e20323634303232.roa (raw, json)
Hash identifier:          qO9kczWOrYQEOehVYDLWIuyN4NQyQ61dfDv36PsmDO8=
Subject key identifier:   3E:A9:23:15:C0:C9:10:E8:A4:21:77:87:6C:47:17:60:8D:15:62:99
Certificate issuer:       /CN=F63047CFCA73277026C41BFD930CC304F5F342B7
Certificate serial:       4BF8D11A1F98BC387CE99FEF050D355BAAF2D2B5
Authority key identifier: F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a313530303a3a2f34302d3430203d3e20323634303232.roa
Signing time:             Tue 12 Nov 2024 14:25:22 +0000
ROA not before:           Tue 12 Nov 2024 14:20:22 +0000
ROA not after:            Tue 11 Nov 2025 14:25:22 +0000
asID:                     264022
IP address blocks:        2804:2990:1500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl
                          rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f8:d1:1a:1f:98:bc:38:7c:e9:9f:ef:05:0d:35:5b:aa:f2:d2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F63047CFCA73277026C41BFD930CC304F5F342B7
        Validity
            Not Before: Nov 12 14:20:22 2024 GMT
            Not After : Nov 11 14:25:22 2025 GMT
        Subject: CN=3EA92315C0C910E8A42177876C4717608D156299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6e:62:7c:9d:c5:53:df:4e:0a:68:1c:17:7e:
                    85:5f:09:2c:d5:e7:b7:4c:e3:5c:ce:46:cf:dc:47:
                    74:c3:d8:c1:54:9f:e9:c1:89:68:12:43:3c:b1:13:
                    77:01:b2:7f:92:2d:43:a5:95:73:00:07:ee:f2:bc:
                    55:5a:3c:b2:d9:d9:7b:a4:5a:c0:c0:2c:31:3f:e2:
                    f4:03:b9:16:8a:04:9f:20:b0:3f:ee:fa:23:50:85:
                    9e:08:61:ce:33:c1:04:fe:e1:1c:82:23:fd:fb:e8:
                    f8:df:de:2a:7f:da:37:e1:67:c3:fc:59:6c:2c:1f:
                    ef:0f:71:c5:1f:01:d6:77:63:11:03:6d:31:ca:b9:
                    fa:16:93:3f:15:9c:46:3d:4e:fc:53:c9:9a:37:c7:
                    2f:70:f6:bb:5b:30:11:fb:54:29:da:11:0d:59:a1:
                    bc:4d:09:eb:5b:b1:ac:17:c4:32:b4:57:5d:0b:97:
                    83:da:82:8d:9f:f7:b8:50:4b:f8:aa:75:ae:fb:e6:
                    78:3a:64:3a:73:c6:58:c4:48:91:9d:09:56:50:ed:
                    aa:f9:f8:2e:d0:f0:a4:49:e8:18:64:bb:e6:36:7e:
                    7a:e7:25:47:19:37:01:4c:bc:45:70:50:41:a4:e2:
                    ae:b0:9a:42:5f:07:7a:86:d0:bd:18:bb:ee:e9:e6:
                    33:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A9:23:15:C0:C9:10:E8:A4:21:77:87:6C:47:17:60:8D:15:62:99
            X509v3 Authority Key Identifier:
                keyid:F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a313530303a3a2f34302d3430203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2990:1500::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:96:64:6e:b3:05:cd:c5:27:f8:a1:34:cd:cd:de:b6:6b:02:
         7a:87:fc:12:3c:97:80:16:c0:7d:b0:8e:39:5b:45:ff:2f:2d:
         d8:1d:bf:56:6e:8b:2a:21:5a:d2:ec:78:13:45:16:26:68:40:
         12:23:a7:5a:98:3d:f6:f8:11:5e:07:dd:76:2e:8f:0e:f1:dd:
         0e:31:9f:69:d8:2b:c7:3c:bf:71:8a:63:80:1d:80:22:33:e1:
         fb:ce:08:63:0d:af:92:f0:df:0c:8e:83:68:30:12:97:fc:41:
         36:83:6b:8b:2f:03:01:37:bf:93:13:09:c8:02:fe:a3:47:05:
         ea:73:d8:59:c5:c7:f0:9f:65:0e:cb:0f:11:4d:33:5a:f8:5f:
         33:72:c6:28:57:4b:ec:91:34:a0:5b:3b:c6:37:e2:33:8b:f1:
         33:79:08:77:10:7a:d3:ef:e6:fb:c7:8d:34:36:3a:3d:e7:dd:
         75:b5:cc:16:ce:32:80:f2:dc:cd:8f:28:53:a7:5e:0b:a7:6c:
         13:d6:e6:6d:8d:a5:c9:a0:10:a1:b0:b5:dc:2a:9c:da:0d:66:
         86:9c:94:95:10:36:c5:c3:a5:50:4b:68:f3:5f:48:55:95:0d:
         67:a6:08:6d:bf:8d:c1:e4:58:23:ea:a9:6f:1f:d5:40:51:23:
         db:64:58:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:32 2024 by rpki-client on console-ams.rpki-client.org