Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/323830343a346131303a3a2f33322d3336203d3e20323637323136.roa
File:                     323830343a346131303a3a2f33322d3336203d3e20323637323136.roa (raw, json)
Hash identifier:          IB0QJXQa/r4HxTuMXsgB8ZUbluEYSe2oJt0r4paJAJU=
Subject key identifier:   A0:8F:56:3A:90:09:AE:19:AB:C9:70:63:B3:34:FB:95:57:95:81:5E
Certificate issuer:       /CN=78AE3DD85CE8B1906EC69C301D8A2B0D52E94F96
Certificate serial:       1B9F371BEEF5CD6A687CE925CC7080CE5B7380D3
Authority key identifier: 78:AE:3D:D8:5C:E8:B1:90:6E:C6:9C:30:1D:8A:2B:0D:52:E9:4F:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78AE3DD85CE8B1906EC69C301D8A2B0D52E94F96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/323830343a346131303a3a2f33322d3336203d3e20323637323136.roa
Signing time:             Fri 15 Nov 2024 00:07:02 +0000
ROA not before:           Fri 15 Nov 2024 00:02:02 +0000
ROA not after:            Fri 14 Nov 2025 00:07:02 +0000
asID:                     267216
IP address blocks:        2804:4a10::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/78AE3DD85CE8B1906EC69C301D8A2B0D52E94F96.crl
                          rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/78AE3DD85CE8B1906EC69C301D8A2B0D52E94F96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78AE3DD85CE8B1906EC69C301D8A2B0D52E94F96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 11:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:9f:37:1b:ee:f5:cd:6a:68:7c:e9:25:cc:70:80:ce:5b:73:80:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78AE3DD85CE8B1906EC69C301D8A2B0D52E94F96
        Validity
            Not Before: Nov 15 00:02:02 2024 GMT
            Not After : Nov 14 00:07:02 2025 GMT
        Subject: CN=A08F563A9009AE19ABC97063B334FB955795815E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c1:25:9c:b6:a1:ca:e4:cb:b7:57:51:04:2b:
                    ff:29:a4:14:39:b3:17:7c:ac:18:f6:27:ed:d0:73:
                    1e:4c:52:04:9d:44:16:48:eb:59:b0:5d:c4:d9:1b:
                    a3:03:55:c2:7d:02:da:ac:5d:65:70:03:eb:88:d2:
                    0d:3a:d7:f0:34:fc:45:43:34:fd:1d:05:88:f3:4a:
                    63:8b:04:ca:97:5f:4c:62:28:54:87:51:34:c4:d6:
                    57:4e:80:b6:7b:28:15:b0:1d:37:01:24:4f:50:a1:
                    03:5b:bc:f3:fe:ed:b1:64:6f:f3:1a:2f:15:b1:f1:
                    c0:3b:9c:13:5a:d4:ca:44:b5:f6:b0:6d:ca:64:8f:
                    c0:22:53:ff:13:b1:7c:0c:78:a8:8d:0f:37:65:40:
                    1c:dc:42:92:cf:d2:b7:1c:5d:8d:07:6e:68:5a:ba:
                    b9:b4:8b:2e:89:e4:91:4c:ac:78:84:6b:39:bf:a0:
                    2f:08:33:2b:b0:96:f5:7d:24:41:19:88:6a:3e:a1:
                    66:05:e5:c9:91:46:67:39:cf:55:b7:3c:b9:39:66:
                    49:de:d4:85:dc:bc:f2:f6:ce:6e:89:97:7d:02:72:
                    12:52:94:c0:74:8a:57:9a:d6:37:e4:ba:ef:1e:33:
                    3c:a5:eb:e9:7a:1b:f3:16:fc:01:1e:c1:31:ec:37:
                    39:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8F:56:3A:90:09:AE:19:AB:C9:70:63:B3:34:FB:95:57:95:81:5E
            X509v3 Authority Key Identifier:
                keyid:78:AE:3D:D8:5C:E8:B1:90:6E:C6:9C:30:1D:8A:2B:0D:52:E9:4F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/78AE3DD85CE8B1906EC69C301D8A2B0D52E94F96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78AE3DD85CE8B1906EC69C301D8A2B0D52E94F96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/323830343a346131303a3a2f33322d3336203d3e20323637323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:58:8b:19:6f:76:39:70:91:00:97:5f:f8:bb:17:52:ad:30:
         c6:8b:cd:45:f5:ce:5a:8a:e5:96:2f:75:95:9b:c8:24:34:af:
         22:93:6f:13:5d:57:34:2c:7b:c1:c9:0c:3d:55:dc:b5:0f:78:
         5c:f7:48:58:0e:fa:8d:d8:80:7e:83:0e:e1:c8:a0:02:4d:e6:
         ca:80:84:dc:d2:2b:4f:16:b0:ab:1d:e9:de:bf:8f:67:e8:5a:
         82:7c:9b:0c:6c:58:d5:a0:a8:9d:94:05:8e:a4:26:49:e8:d1:
         40:83:a1:81:40:43:5e:e7:8e:5e:5a:1c:d3:50:41:ab:53:05:
         3d:29:15:73:2b:7c:82:c0:56:93:bb:4d:c9:bf:97:f5:89:bf:
         89:e3:0c:28:2c:41:04:5a:b7:2b:f4:70:1d:3b:81:ca:3d:f3:
         ec:47:a5:2f:89:9c:90:e1:92:8a:61:ab:b8:d5:f0:42:aa:11:
         81:a7:44:91:c1:7d:89:f3:7d:5b:e5:bc:4f:6e:62:fc:e7:b8:
         aa:61:b2:02:95:fb:ec:c9:11:f7:07:6c:23:5b:d6:31:76:12:
         41:d8:2b:c0:c7:04:d5:24:24:d1:a6:0b:0a:74:51:7b:5c:40:
         c8:25:02:c7:b7:ee:b8:fd:f0:de:38:eb:81:bb:83:af:6b:97:
         20:b6:24:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:16:51 2024 by rpki-client on console-ams.rpki-client.org