Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/323830343a343034633a3130333a3a2f34382d3438203d3e20323635393530.roa
File:                     323830343a343034633a3130333a3a2f34382d3438203d3e20323635393530.roa (raw, json)
Hash identifier:          Ti8Z5cIxc8gd1/g2IynQvsHWBprG3xqbLuYKmmYo9RA=
Subject key identifier:   56:BB:F1:76:2E:6A:29:C6:DA:1C:1D:1B:BB:69:91:F0:78:DA:6D:F9
Certificate issuer:       /CN=B87CE29C7C1D5FA3C283B0AE0AD75B5364556618
Certificate serial:       620EE83C9D9F3748AEBB4C606F54669AC9DA3407
Authority key identifier: B8:7C:E2:9C:7C:1D:5F:A3:C2:83:B0:AE:0A:D7:5B:53:64:55:66:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/323830343a343034633a3130333a3a2f34382d3438203d3e20323635393530.roa
Signing time:             Sun 07 Jul 2024 12:43:18 +0000
ROA not before:           Sun 07 Jul 2024 12:38:18 +0000
ROA not after:            Sun 06 Jul 2025 12:43:18 +0000
asID:                     265950
IP address blocks:        2804:404c:103::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0e:e8:3c:9d:9f:37:48:ae:bb:4c:60:6f:54:66:9a:c9:da:34:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87CE29C7C1D5FA3C283B0AE0AD75B5364556618
        Validity
            Not Before: Jul  7 12:38:18 2024 GMT
            Not After : Jul  6 12:43:18 2025 GMT
        Subject: CN=56BBF1762E6A29C6DA1C1D1BBB6991F078DA6DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:75:a8:1c:70:fd:2f:d4:7f:cd:8f:ba:89:37:
                    00:02:04:17:93:9d:7e:8b:3e:0f:ec:6f:70:d0:5f:
                    ff:e5:69:3c:85:a4:0a:a0:69:97:d3:c3:76:b5:ff:
                    c4:a2:e7:61:30:0b:1d:30:2d:cf:c4:01:a9:1e:8b:
                    91:0d:fa:13:b7:91:13:23:d4:63:a7:fa:c8:d3:03:
                    9b:59:73:64:8f:9a:60:97:00:33:5d:d9:41:36:bc:
                    4a:9d:7f:88:9e:c3:b7:79:36:f1:e6:3d:95:ab:11:
                    73:e5:f2:8d:1e:f6:f6:cb:c2:6d:d4:de:0e:95:37:
                    a6:87:28:ba:ba:54:a9:3f:b5:cb:00:aa:b9:47:c9:
                    ac:6c:4a:11:10:c6:39:e8:ab:96:9f:9f:b5:9c:3b:
                    d2:2c:be:03:5f:6b:0c:ce:e2:2c:98:dc:62:30:d6:
                    58:a4:59:65:a8:b5:c2:22:3c:40:e7:c7:d2:8d:b0:
                    ed:3b:73:7e:ee:df:05:ee:95:48:ae:71:0e:49:a5:
                    fa:25:84:de:77:5a:68:b3:12:d9:92:dd:e2:3b:31:
                    88:5e:96:e5:15:d3:b2:d5:5a:3d:c8:c2:cd:b7:6b:
                    9e:db:92:18:e7:dd:fa:b4:a0:cc:c5:23:ad:04:fd:
                    cd:7c:6f:b9:ef:83:47:0a:d5:7d:b4:7f:48:e0:cb:
                    a9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BB:F1:76:2E:6A:29:C6:DA:1C:1D:1B:BB:69:91:F0:78:DA:6D:F9
            X509v3 Authority Key Identifier:
                keyid:B8:7C:E2:9C:7C:1D:5F:A3:C2:83:B0:AE:0A:D7:5B:53:64:55:66:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/323830343a343034633a3130333a3a2f34382d3438203d3e20323635393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:404c:103::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:e9:81:89:4f:dd:28:9d:2f:71:3f:97:eb:72:34:c4:85:30:
         b4:e2:02:8f:5a:7f:04:98:4d:0d:6a:84:9a:70:de:7d:df:ce:
         c3:f9:05:af:0a:e4:53:c1:0f:bb:b0:f4:0c:4e:06:29:64:76:
         0d:15:45:6d:92:ce:c7:39:e7:f0:66:f6:a9:04:0c:ec:a6:95:
         95:71:f3:5f:66:0a:02:33:18:4b:8a:74:ff:4c:3c:3f:25:2a:
         ed:55:ef:7c:84:70:ec:ff:31:3f:c2:ea:15:23:c1:24:d6:5e:
         89:65:11:5e:8b:ea:9d:75:6c:59:54:70:42:65:e4:4a:f1:18:
         cd:6e:cc:b5:6c:05:59:96:8c:f2:ca:da:62:2e:18:68:39:45:
         73:1f:f1:18:82:f5:93:82:45:12:8f:1c:cd:00:b0:80:ed:08:
         8e:2e:e3:e5:74:93:cb:5d:26:72:ba:51:db:7d:82:97:d2:46:
         40:94:5c:f8:b9:01:84:71:63:5a:d0:ff:dd:2f:60:ca:2e:c3:
         e2:9d:1c:0d:53:61:02:d4:22:cd:b7:d2:b6:dd:a6:94:d9:20:
         b3:0c:e6:2f:da:db:32:eb:de:b0:96:23:83:be:5e:2d:1f:df:
         32:8c:56:05:44:22:d5:b9:76:82:64:4c:e0:f7:2e:90:bf:3e:
         1f:98:a8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:07 2024 by rpki-client on console-fra.rpki-client.org