Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a626130303a3a2f34302d3430203d3e20323733363633.roa
File:                     323830343a386135383a626130303a3a2f34302d3430203d3e20323733363633.roa (raw, json)
Hash identifier:          ZK5sG8vfq5Z0a6AldFvFtJb4f/Z0Em/TYxagJK2Km3I=
Subject key identifier:   DE:02:C9:04:3C:40:3F:9C:D5:64:19:6A:AB:A3:52:18:89:8C:03:C1
Certificate issuer:       /CN=85A7E0A72BD08974369104FECCC3D14C543F54FC
Certificate serial:       0C1CD2E667226627E92C870EBBCE239ED2BACB1B
Authority key identifier: 85:A7:E0:A7:2B:D0:89:74:36:91:04:FE:CC:C3:D1:4C:54:3F:54:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A7E0A72BD08974369104FECCC3D14C543F54FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a626130303a3a2f34302d3430203d3e20323733363633.roa
Signing time:             Sat 31 Aug 2024 14:16:17 +0000
ROA not before:           Sat 31 Aug 2024 14:11:17 +0000
ROA not after:            Sat 30 Aug 2025 14:16:17 +0000
asID:                     273663
IP address blocks:        2804:8a58:ba00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/85A7E0A72BD08974369104FECCC3D14C543F54FC.crl
                          rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/85A7E0A72BD08974369104FECCC3D14C543F54FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A7E0A72BD08974369104FECCC3D14C543F54FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:1c:d2:e6:67:22:66:27:e9:2c:87:0e:bb:ce:23:9e:d2:ba:cb:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85A7E0A72BD08974369104FECCC3D14C543F54FC
        Validity
            Not Before: Aug 31 14:11:17 2024 GMT
            Not After : Aug 30 14:16:17 2025 GMT
        Subject: CN=DE02C9043C403F9CD564196AABA35218898C03C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:17:6f:7c:3a:00:6d:68:98:cf:c4:b9:9e:
                    aa:4d:cd:72:c2:f8:6a:98:b9:5e:65:4e:4e:19:e5:
                    1f:ac:39:2b:14:59:82:f3:25:56:b0:b0:cc:6c:5c:
                    8b:4d:a1:41:9e:19:90:72:3b:db:7a:93:86:d2:43:
                    e1:3e:f6:f7:dd:9c:58:cc:2b:74:b7:d1:c2:55:11:
                    74:23:13:ec:96:25:3a:74:95:db:eb:c5:65:5b:d1:
                    d8:c1:36:54:03:29:cd:0d:fe:8b:4e:b2:35:78:79:
                    c9:14:d0:03:0b:ea:75:92:ce:b9:fe:18:2a:c2:f2:
                    1c:a5:e1:df:29:a3:c8:ba:09:0d:6f:ed:93:98:67:
                    88:c1:b9:ed:30:7a:cc:90:5a:4e:25:6c:4e:69:1b:
                    3d:ed:78:05:00:15:c8:63:1f:19:37:56:c9:98:70:
                    d8:4b:48:2f:24:13:9c:b2:60:5b:4f:36:aa:ba:47:
                    40:2a:a5:a6:4f:04:08:b3:63:46:db:ba:69:15:bb:
                    cf:1d:9f:c3:3f:f7:db:52:85:73:1f:a7:a9:6f:ed:
                    ed:e1:68:01:12:64:b3:3c:af:c4:9b:2d:56:97:59:
                    74:b7:09:19:2d:cb:f5:9f:87:63:84:26:55:63:3b:
                    84:63:c2:47:05:c3:44:66:24:5b:75:b9:e2:09:7a:
                    7e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:02:C9:04:3C:40:3F:9C:D5:64:19:6A:AB:A3:52:18:89:8C:03:C1
            X509v3 Authority Key Identifier:
                keyid:85:A7:E0:A7:2B:D0:89:74:36:91:04:FE:CC:C3:D1:4C:54:3F:54:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/85A7E0A72BD08974369104FECCC3D14C543F54FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A7E0A72BD08974369104FECCC3D14C543F54FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a626130303a3a2f34302d3430203d3e20323733363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a58:ba00::/40

    Signature Algorithm: sha256WithRSAEncryption
         33:82:97:85:ac:25:54:fe:31:03:bb:dd:61:26:d6:63:90:f3:
         3d:10:7a:30:9a:3a:7d:61:2f:27:0a:d5:f8:2c:ac:ef:aa:a3:
         fa:d1:9f:6c:5a:ed:5a:8a:9f:45:45:01:34:5f:be:03:31:e8:
         e6:9a:b5:00:0f:0e:0a:1b:2c:33:f1:f5:59:32:db:43:0c:37:
         d4:d5:95:9d:5d:e8:10:16:1d:e7:21:ef:29:75:21:d6:c9:86:
         b8:d9:2d:90:93:7b:79:da:d0:fc:6c:fe:37:73:d3:b0:c3:dd:
         21:c8:c6:9d:b8:5c:97:b3:66:00:ad:36:8a:79:ad:92:f7:3d:
         a4:b1:5f:89:cd:2a:f4:bc:06:58:59:2e:b3:61:e8:7d:2f:0f:
         74:e1:92:55:10:87:e8:ba:52:57:aa:96:bc:64:25:39:fe:bf:
         7a:f0:c7:8d:c6:e4:ec:f3:f4:0b:41:54:eb:36:88:5e:f4:35:
         3a:ec:bd:f1:1f:65:a0:df:c0:48:c3:dd:10:4c:2c:d3:9b:2a:
         1e:8e:83:af:92:2d:ea:a2:4d:e7:f2:8c:09:85:e1:b9:f3:3e:
         04:48:fc:3a:3b:71:91:46:9f:dd:4f:87:ce:68:99:39:dc:90:
         1d:d3:ec:fa:a0:4e:24:c5:ff:95:17:3c:1b:e4:33:aa:1b:d4:
         68:7b:90:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:42 2024 by rpki-client on console-fra.rpki-client.org