Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/323830343a356338383a316338303a3a2f34312d3431203d3e20323638393134.roa
File:                     323830343a356338383a316338303a3a2f34312d3431203d3e20323638393134.roa (raw, json)
Hash identifier:          aQA+nP/CDoB/djmYBCuMWlpaj3Xu006/0GEwEoFEnw8=
Subject key identifier:   58:0C:B8:D7:0B:C5:4E:BA:C9:2F:D8:A3:5D:4C:AA:FC:AC:43:88:64
Certificate issuer:       /CN=659E92F5914C997CC52D83DD0F162368DAC18EA2
Certificate serial:       04706EEA7523C381D0256736321DB3A49010A280
Authority key identifier: 65:9E:92:F5:91:4C:99:7C:C5:2D:83:DD:0F:16:23:68:DA:C1:8E:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/323830343a356338383a316338303a3a2f34312d3431203d3e20323638393134.roa
Signing time:             Mon 18 Nov 2024 17:13:28 +0000
ROA not before:           Mon 18 Nov 2024 17:08:28 +0000
ROA not after:            Mon 17 Nov 2025 17:13:28 +0000
asID:                     268914
IP address blocks:        2804:5c88:1c80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.crl
                          rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:70:6e:ea:75:23:c3:81:d0:25:67:36:32:1d:b3:a4:90:10:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659E92F5914C997CC52D83DD0F162368DAC18EA2
        Validity
            Not Before: Nov 18 17:08:28 2024 GMT
            Not After : Nov 17 17:13:28 2025 GMT
        Subject: CN=580CB8D70BC54EBAC92FD8A35D4CAAFCAC438864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d2:13:37:14:2d:38:97:2e:59:67:b2:2b:1e:
                    5e:a9:77:8e:38:72:b5:af:e6:a6:91:b3:b2:ac:31:
                    d8:91:55:94:9b:4a:d7:6d:3b:1a:0f:05:8a:a1:43:
                    73:08:8f:79:bc:6f:3b:fd:20:b7:93:a3:68:30:51:
                    9d:df:61:92:83:5a:a9:e7:de:26:6b:78:5b:49:99:
                    df:ea:5e:ff:84:5c:a0:af:13:bf:4a:85:46:1e:c8:
                    3c:50:10:a7:17:ae:a9:51:84:ed:d7:03:ca:40:51:
                    43:a9:57:0a:ef:cb:67:9b:1e:69:e8:63:60:07:66:
                    c0:43:c0:2c:79:e8:91:9b:ca:48:b2:45:4a:f6:a2:
                    4c:bc:37:c7:76:95:00:85:8a:99:03:73:0d:d5:73:
                    37:44:3d:83:09:0b:d2:74:1e:58:38:ad:b0:89:3c:
                    80:7f:95:8b:a8:cc:9c:b1:f1:c2:b7:1e:66:7f:f5:
                    e8:e3:39:6e:25:3d:c1:5e:95:67:eb:73:ad:8f:b7:
                    ea:f8:3b:34:2b:c9:55:9a:29:e0:23:4b:50:b0:79:
                    cc:65:2e:af:fb:b2:dc:18:17:9d:7d:64:f5:c7:e5:
                    e5:3c:fa:df:7e:5d:de:74:89:ea:4d:85:20:ab:87:
                    05:06:a0:40:ef:9b:c5:d1:1d:50:6d:79:ee:5f:9d:
                    fc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0C:B8:D7:0B:C5:4E:BA:C9:2F:D8:A3:5D:4C:AA:FC:AC:43:88:64
            X509v3 Authority Key Identifier:
                keyid:65:9E:92:F5:91:4C:99:7C:C5:2D:83:DD:0F:16:23:68:DA:C1:8E:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/323830343a356338383a316338303a3a2f34312d3431203d3e20323638393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c88:1c80::/41

    Signature Algorithm: sha256WithRSAEncryption
         63:e6:87:81:74:bf:34:ba:b0:ac:1c:01:a3:cb:9f:8e:30:8b:
         12:fd:f3:66:60:e0:9a:26:73:ae:9a:40:b8:9c:7d:63:e6:24:
         a7:82:b9:9a:d4:90:80:7c:b3:39:2e:a4:d3:c5:c8:81:38:34:
         f0:26:21:e5:dc:f4:55:c0:4b:18:fa:0a:d5:e3:52:35:f6:a6:
         71:f1:8f:61:9d:39:a4:11:df:86:6d:b8:fc:92:c8:f5:56:5a:
         c2:73:00:42:ee:7d:f6:8d:aa:d9:a8:79:3f:31:35:b5:b0:8b:
         b4:dc:f0:bb:8c:7e:39:9c:36:cd:1e:29:88:d0:5a:90:d4:14:
         35:4d:cd:88:2f:e3:c4:26:54:fb:90:11:13:1c:af:b8:0c:46:
         43:62:15:03:70:7a:24:c0:d3:40:ca:96:3b:24:8b:c8:4d:53:
         72:91:a4:ad:45:6f:2c:28:3f:a3:76:6b:76:14:e7:b6:dd:c2:
         54:73:5b:7d:a8:bd:9d:f7:f6:08:e5:b2:11:59:31:00:27:90:
         c1:1c:2b:4b:30:f3:da:67:c6:49:71:be:2a:a4:32:c6:fd:5a:
         eb:70:80:91:8a:ed:81:93:10:06:fb:a7:27:4b:51:f6:0e:0c:
         f5:b9:3e:8e:b1:4e:e7:7c:1c:49:0e:ef:36:4e:a6:85:a3:d0:
         6d:6e:d4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:18:41 2025 by rpki-client