Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/323830343a313131303a3a2f33322d313238203d3e20323632393031.roa
File:                     323830343a313131303a3a2f33322d313238203d3e20323632393031.roa (raw, json)
Hash identifier:          qhoTFkAsS/xg2xhPJTh0I9flvTJn5gBA+HQh/rmtuAg=
Subject key identifier:   3D:E1:3B:DD:B2:4A:E3:11:A1:B6:B7:19:E1:6A:4B:5B:43:F3:6A:6F
Certificate issuer:       /CN=E792BDE63D5999B942575841C2AF8D944B3B4BE2
Certificate serial:       70AD3102E179332BC2CD50D5C3179BED65AFD243
Authority key identifier: E7:92:BD:E6:3D:59:99:B9:42:57:58:41:C2:AF:8D:94:4B:3B:4B:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E792BDE63D5999B942575841C2AF8D944B3B4BE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/323830343a313131303a3a2f33322d313238203d3e20323632393031.roa
Signing time:             Thu 26 Sep 2024 14:44:08 +0000
ROA not before:           Thu 26 Sep 2024 14:39:08 +0000
ROA not after:            Thu 25 Sep 2025 14:44:08 +0000
asID:                     262901
IP address blocks:        2804:1110::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/E792BDE63D5999B942575841C2AF8D944B3B4BE2.crl
                          rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/E792BDE63D5999B942575841C2AF8D944B3B4BE2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E792BDE63D5999B942575841C2AF8D944B3B4BE2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 13:54:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ad:31:02:e1:79:33:2b:c2:cd:50:d5:c3:17:9b:ed:65:af:d2:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E792BDE63D5999B942575841C2AF8D944B3B4BE2
        Validity
            Not Before: Sep 26 14:39:08 2024 GMT
            Not After : Sep 25 14:44:08 2025 GMT
        Subject: CN=3DE13BDDB24AE311A1B6B719E16A4B5B43F36A6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:39:5f:f1:57:4a:ee:9d:f0:2c:90:b8:60:bb:
                    c5:59:12:5f:ec:3b:38:65:b9:b6:75:af:b2:95:c5:
                    e3:a7:ee:bd:1a:d5:46:ff:05:29:a2:5b:b6:07:b1:
                    5e:68:62:19:4f:38:8c:cf:5d:db:fc:e5:00:b5:67:
                    34:94:64:c0:f7:8a:0c:94:9f:d7:d5:5e:12:10:ed:
                    d5:ca:8b:14:e5:56:a1:d5:2e:34:38:2a:72:4a:02:
                    d6:0f:8b:fe:9b:a7:01:d0:a3:b8:ee:94:b5:92:03:
                    63:01:1d:73:41:7e:38:e7:81:56:8e:a1:99:bb:d1:
                    c1:4e:7b:94:b9:37:7c:e1:7d:55:42:c8:b6:f4:4e:
                    64:c6:c0:a6:ff:0d:81:5d:0f:43:bf:91:a8:be:dc:
                    7c:81:09:d8:53:31:0b:6d:ae:c6:bc:69:c4:c1:25:
                    fe:72:65:52:2b:bd:fb:c7:b5:5b:e2:7a:b8:ef:56:
                    db:73:0a:72:da:88:a9:b3:e3:85:19:4b:b0:bf:18:
                    3a:53:b1:9f:65:25:cc:fe:d6:13:01:7d:93:92:c6:
                    f1:05:3e:55:eb:46:a6:0e:8a:15:26:2f:34:48:7e:
                    a9:53:ca:e8:9f:52:70:f7:63:eb:88:ed:dc:00:bd:
                    6e:dd:77:1e:28:be:ba:f6:3a:4a:c3:e4:e3:0f:19:
                    db:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E1:3B:DD:B2:4A:E3:11:A1:B6:B7:19:E1:6A:4B:5B:43:F3:6A:6F
            X509v3 Authority Key Identifier:
                keyid:E7:92:BD:E6:3D:59:99:B9:42:57:58:41:C2:AF:8D:94:4B:3B:4B:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/E792BDE63D5999B942575841C2AF8D944B3B4BE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E792BDE63D5999B942575841C2AF8D944B3B4BE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/323830343a313131303a3a2f33322d313238203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1110::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:8f:7c:94:fb:25:2e:d3:c6:09:b3:01:21:1d:7f:bb:6a:16:
         8d:6e:71:20:4a:12:8c:f6:d9:79:9b:57:3a:20:fe:bb:54:a4:
         f7:10:5b:a1:0c:3d:9d:41:9d:55:64:79:40:f7:1a:95:ae:ef:
         1b:05:3c:af:a2:46:4f:69:6a:8c:b9:5f:15:5c:4b:6f:96:3a:
         32:6c:96:57:26:1f:a3:12:f2:a0:2e:73:b2:ca:55:8f:58:71:
         f2:82:e5:3e:dd:73:62:be:94:6a:f7:dd:f1:f6:22:6c:25:0e:
         37:74:96:aa:f3:3d:c0:64:ee:eb:e2:38:24:78:21:99:07:26:
         58:92:d5:9e:cd:08:88:87:9d:47:2d:e7:f6:c4:20:f0:9f:75:
         3b:c1:cb:be:d0:62:cb:ab:aa:42:d8:e5:86:16:35:64:c5:89:
         c1:78:d2:b5:07:b6:89:ae:58:ba:6c:18:f8:e6:fa:44:18:6f:
         19:39:16:66:39:e0:fa:12:67:8a:9c:ca:c0:ff:e1:1a:5c:03:
         d0:62:ae:3e:7b:f4:34:24:d4:38:18:00:7d:29:e4:cb:07:3b:
         b9:d2:c5:da:62:cb:7e:f7:9d:72:7c:b2:31:88:d9:ed:10:51:
         2d:c1:25:92:0c:87:1b:21:06:3c:5e:45:34:bc:9a:36:e4:61:
         63:7a:a2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:10 2024 by rpki-client on console-fra.rpki-client.org