Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/323830343a326131343a3a2f33322d313238203d3e20323634303535.roa
File:                     323830343a326131343a3a2f33322d313238203d3e20323634303535.roa (raw, json)
Hash identifier:          on9KOjA+2SpcJgsJzqyo12idUpR5v+WYMnZZapDvYM0=
Subject key identifier:   DA:EB:6A:CC:04:79:2A:62:A6:49:A2:04:F3:E0:F0:32:A6:D1:93:F1
Certificate issuer:       /CN=C4718E13E885F1DF2DA1B48E5359594EF87F0F64
Certificate serial:       43A22770A1829B6DC7D2BCED73A8E742E59F6B00
Authority key identifier: C4:71:8E:13:E8:85:F1:DF:2D:A1:B4:8E:53:59:59:4E:F8:7F:0F:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4718E13E885F1DF2DA1B48E5359594EF87F0F64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/323830343a326131343a3a2f33322d313238203d3e20323634303535.roa
Signing time:             Tue 15 Oct 2024 04:53:17 +0000
ROA not before:           Tue 15 Oct 2024 04:48:17 +0000
ROA not after:            Tue 14 Oct 2025 04:53:17 +0000
asID:                     264055
IP address blocks:        2804:2a14::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/C4718E13E885F1DF2DA1B48E5359594EF87F0F64.crl
                          rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/C4718E13E885F1DF2DA1B48E5359594EF87F0F64.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4718E13E885F1DF2DA1B48E5359594EF87F0F64.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a2:27:70:a1:82:9b:6d:c7:d2:bc:ed:73:a8:e7:42:e5:9f:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4718E13E885F1DF2DA1B48E5359594EF87F0F64
        Validity
            Not Before: Oct 15 04:48:17 2024 GMT
            Not After : Oct 14 04:53:17 2025 GMT
        Subject: CN=DAEB6ACC04792A62A649A204F3E0F032A6D193F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:e4:06:65:ba:2a:aa:f0:a9:8b:8d:23:ce:9b:
                    a2:28:48:23:1e:0d:a8:b6:a7:a1:d6:2a:11:37:c8:
                    d8:33:de:3b:e1:a9:01:59:6a:e0:4d:62:55:f9:db:
                    13:55:91:ae:60:03:3d:f0:d6:11:2c:f9:2f:81:cf:
                    69:ec:17:87:d3:15:6d:6b:13:b7:a2:be:2b:ce:1d:
                    91:b3:ca:de:e4:62:3c:07:f7:b3:eb:16:97:99:1d:
                    48:11:fb:f0:de:22:62:d7:cc:09:3b:2e:ca:62:e0:
                    23:85:44:d5:04:75:fc:0f:ab:97:43:62:84:b1:83:
                    c0:31:e7:d4:21:cb:64:05:c6:3f:71:56:10:35:3b:
                    18:ae:27:2f:09:78:5f:c7:e9:5a:d7:9b:bd:f6:7f:
                    d1:ef:34:db:97:21:0f:b0:7a:df:37:09:a0:98:81:
                    19:97:dd:59:b4:19:85:60:79:18:7e:87:90:af:a5:
                    f3:f2:dd:40:a0:3b:52:2f:e7:7f:b9:c4:72:5e:16:
                    24:10:38:b7:44:99:09:6b:17:fe:f0:d2:a7:b5:25:
                    ad:d3:81:a6:86:02:f8:10:e1:18:0d:d2:dd:38:f9:
                    99:b1:4d:c7:b3:99:7d:71:84:de:f8:56:c5:53:77:
                    43:02:f8:02:96:9c:7c:89:af:1d:14:32:36:c0:68:
                    3a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EB:6A:CC:04:79:2A:62:A6:49:A2:04:F3:E0:F0:32:A6:D1:93:F1
            X509v3 Authority Key Identifier:
                keyid:C4:71:8E:13:E8:85:F1:DF:2D:A1:B4:8E:53:59:59:4E:F8:7F:0F:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/C4718E13E885F1DF2DA1B48E5359594EF87F0F64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4718E13E885F1DF2DA1B48E5359594EF87F0F64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/323830343a326131343a3a2f33322d313238203d3e20323634303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a14::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:8b:88:d8:42:b4:c8:94:1d:d0:38:be:3b:24:3f:4c:12:ed:
         e6:5f:d1:71:a4:b3:d5:3d:71:a7:fd:c7:88:52:01:ab:07:e7:
         48:a3:5b:ef:d7:c6:6e:07:a7:ab:6b:c0:2f:5d:f7:fd:d4:23:
         e1:8e:16:dd:23:5e:56:a4:5a:96:41:a7:e2:1b:ea:57:bc:ed:
         28:82:2c:7b:eb:51:bd:ba:8d:9d:49:fb:09:15:3e:89:93:bc:
         63:e8:af:b5:9e:33:79:1c:17:3e:5c:94:6b:ce:3d:fe:4d:15:
         61:c7:c0:70:54:4c:e0:d0:91:cf:70:83:53:e3:4d:fd:2f:49:
         30:76:c4:c7:36:cf:93:a8:1d:df:de:9e:73:70:71:51:dc:6d:
         22:ad:77:85:e4:d0:0b:7c:e0:56:d5:22:5a:0b:77:0b:80:ac:
         d0:85:0e:a0:78:99:b2:be:af:be:7a:96:17:80:e3:07:d1:ce:
         15:9c:0d:c7:6f:db:93:71:5b:25:47:37:b1:43:04:60:40:94:
         2a:42:11:f3:ce:51:ca:22:d4:ee:a0:12:44:c2:12:14:62:37:
         84:52:01:f7:78:e8:05:49:da:62:9b:b0:91:04:22:37:7d:69:
         9c:86:dc:e4:7e:f8:78:81:56:c7:2c:84:8f:9d:8e:f8:bf:21:
         08:23:6b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:52 2024 by rpki-client on console-fra.rpki-client.org