Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/323830343a343034633a313030313a3a2f34382d3438203d3e20323635393530.roa
File:                     323830343a343034633a313030313a3a2f34382d3438203d3e20323635393530.roa (raw, json)
Hash identifier:          dXUU/wQ9oT9TRyJv0YAnTJFP2hLPdfiki2q1KueqR9M=
Subject key identifier:   46:03:6E:49:43:9D:73:72:11:05:F9:1A:31:E0:94:C4:AC:80:39:95
Certificate issuer:       /CN=B87CE29C7C1D5FA3C283B0AE0AD75B5364556618
Certificate serial:       241AE60EEF5451020982765E17447508027C2384
Authority key identifier: B8:7C:E2:9C:7C:1D:5F:A3:C2:83:B0:AE:0A:D7:5B:53:64:55:66:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/323830343a343034633a313030313a3a2f34382d3438203d3e20323635393530.roa
Signing time:             Tue 09 Jul 2024 08:16:03 +0000
ROA not before:           Tue 09 Jul 2024 08:11:03 +0000
ROA not after:            Tue 08 Jul 2025 08:16:03 +0000
asID:                     265950
IP address blocks:        2804:404c:1001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1a:e6:0e:ef:54:51:02:09:82:76:5e:17:44:75:08:02:7c:23:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87CE29C7C1D5FA3C283B0AE0AD75B5364556618
        Validity
            Not Before: Jul  9 08:11:03 2024 GMT
            Not After : Jul  8 08:16:03 2025 GMT
        Subject: CN=46036E49439D73721105F91A31E094C4AC803995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:69:eb:da:4e:22:1a:df:f3:12:aa:39:c1:c2:
                    9a:84:d9:40:a3:1f:4b:b9:d1:91:59:c6:7a:98:fa:
                    98:3f:d4:be:be:d1:dd:7b:a6:7b:e2:24:ae:af:a4:
                    dc:9a:d7:20:e8:79:d2:99:7d:6f:fb:68:4b:d8:dc:
                    64:d4:92:12:a0:cb:59:01:1b:8e:1d:f8:47:29:f7:
                    d1:6e:db:de:71:ce:2f:51:32:03:5d:f7:a9:3e:d9:
                    60:08:bf:e4:9e:00:89:dd:f9:c3:6d:b5:3d:32:13:
                    ab:c0:e6:28:07:dc:fa:fe:41:b7:12:68:4a:8d:4b:
                    a5:b9:5a:50:bb:d4:6d:a1:df:8a:97:ea:87:60:34:
                    65:23:05:29:c7:f4:1d:4f:3e:36:a7:9d:3f:14:cd:
                    7b:47:08:39:f9:de:f4:2d:72:10:a0:c7:c3:01:bd:
                    a9:cd:a5:c3:72:b4:c5:09:d1:19:d6:b5:31:ad:9d:
                    89:72:d7:a7:ed:48:67:a3:fd:6e:b2:75:f9:77:c6:
                    f3:05:2d:c3:84:a4:58:df:fd:22:19:d9:fb:a8:a1:
                    d6:06:62:ae:c8:2a:2f:9d:38:40:97:0e:24:ac:66:
                    2b:73:de:43:3c:7f:34:db:c6:5e:e0:1c:e2:59:ea:
                    97:ba:bc:c6:e0:65:22:16:bc:2f:22:43:1e:97:bb:
                    d5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:03:6E:49:43:9D:73:72:11:05:F9:1A:31:E0:94:C4:AC:80:39:95
            X509v3 Authority Key Identifier:
                keyid:B8:7C:E2:9C:7C:1D:5F:A3:C2:83:B0:AE:0A:D7:5B:53:64:55:66:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/323830343a343034633a313030313a3a2f34382d3438203d3e20323635393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:404c:1001::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:7e:85:83:f0:77:53:77:ef:bf:27:ec:f2:7e:a2:eb:a2:4d:
         a4:58:fa:66:9d:a0:a8:30:92:19:c6:ac:9f:ba:d3:e4:cf:53:
         e8:73:01:24:82:55:43:62:15:ff:99:69:32:b1:e3:f7:f8:b6:
         72:44:4d:b8:9d:80:26:67:dd:f4:51:1b:a5:03:a4:0a:2a:92:
         a9:49:b5:af:9f:80:32:bf:94:a7:d4:5c:56:4f:c5:14:5d:e0:
         f6:2a:54:a3:e8:ca:cd:96:b4:84:77:45:9a:c7:f9:01:90:7b:
         9c:52:a2:03:11:7c:18:39:51:4c:3f:64:9b:02:0d:46:26:33:
         bc:85:3c:55:17:2e:cf:f2:5a:1e:b2:8c:73:4d:d6:85:2b:d7:
         8d:c8:8c:23:43:20:3f:9c:dd:64:78:00:03:0a:96:6f:8d:82:
         ac:9f:19:b8:69:b0:af:8a:f2:d8:65:2c:60:c0:b9:ed:55:0d:
         30:a3:3e:e3:a4:c0:94:0b:0a:d7:24:81:86:58:b2:1c:ba:d7:
         9c:c4:33:30:9b:03:b4:b4:87:5d:98:62:e3:12:d1:ab:99:df:
         cd:5e:8d:b9:ff:b3:f3:90:6c:f9:a0:35:e2:7f:91:c9:1a:84:
         79:69:32:c0:de:51:3e:42:3b:27:f6:99:3d:50:3e:1d:a0:39:
         d9:9c:4d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:02 2024 by rpki-client on console-ams.rpki-client.org