Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/323830343a343034633a31313a3a2f34382d3438203d3e20323635393530.roa
File:                     323830343a343034633a31313a3a2f34382d3438203d3e20323635393530.roa (raw, json)
Hash identifier:          6eQiSeaeudYgcjrhSHCc1hujmJo1xZYMoTchidulA/c=
Subject key identifier:   AA:42:52:A3:C0:D4:B4:37:56:30:B9:08:D5:40:C3:37:10:05:0A:79
Certificate issuer:       /CN=B87CE29C7C1D5FA3C283B0AE0AD75B5364556618
Certificate serial:       4474A331D55052783ED625AEE4EC2D88F2129B3B
Authority key identifier: B8:7C:E2:9C:7C:1D:5F:A3:C2:83:B0:AE:0A:D7:5B:53:64:55:66:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/323830343a343034633a31313a3a2f34382d3438203d3e20323635393530.roa
Signing time:             Thu 04 Jul 2024 07:56:34 +0000
ROA not before:           Thu 04 Jul 2024 07:51:34 +0000
ROA not after:            Thu 03 Jul 2025 07:56:34 +0000
asID:                     265950
IP address blocks:        2804:404c:11::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:74:a3:31:d5:50:52:78:3e:d6:25:ae:e4:ec:2d:88:f2:12:9b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87CE29C7C1D5FA3C283B0AE0AD75B5364556618
        Validity
            Not Before: Jul  4 07:51:34 2024 GMT
            Not After : Jul  3 07:56:34 2025 GMT
        Subject: CN=AA4252A3C0D4B4375630B908D540C33710050A79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f7:30:5e:31:b5:a5:46:2b:cd:c7:b5:c8:37:
                    bd:7b:ef:75:3e:88:59:8c:76:ab:6b:23:0b:d6:fd:
                    56:56:96:f9:4d:4c:3c:5c:35:c9:af:6a:12:40:39:
                    d1:78:2a:2c:04:a3:b3:7e:46:27:17:0a:84:0a:55:
                    e1:75:e6:cf:b7:00:1f:ec:0f:c3:30:ba:3c:62:85:
                    65:9d:e4:a2:56:90:db:11:43:f2:00:3e:2b:b3:29:
                    00:f0:42:47:cf:95:65:cd:4d:33:4f:da:ab:3f:73:
                    e5:9e:26:d2:0e:6a:8c:29:44:ce:b3:17:4a:37:0c:
                    57:d1:a4:46:9e:6f:58:62:c2:1f:ab:ad:5b:43:dd:
                    51:eb:55:b4:d3:17:f6:65:3a:4b:92:25:01:98:ee:
                    c5:d6:44:5f:b5:a0:5e:9c:ff:d6:59:51:3c:07:48:
                    4d:65:7a:71:49:1a:65:a3:72:31:c7:98:88:56:45:
                    76:92:30:04:33:c7:bb:f0:98:aa:d2:06:26:34:dd:
                    be:cc:fe:94:54:ac:ee:be:00:89:c6:31:cf:98:7c:
                    26:90:27:c4:38:b4:26:8e:34:d4:f6:f7:58:5b:fa:
                    be:88:2a:78:9b:05:21:d7:37:29:70:65:a9:f2:86:
                    48:c0:66:9f:49:9f:26:64:61:f6:d8:9e:fe:7d:07:
                    86:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:42:52:A3:C0:D4:B4:37:56:30:B9:08:D5:40:C3:37:10:05:0A:79
            X509v3 Authority Key Identifier:
                keyid:B8:7C:E2:9C:7C:1D:5F:A3:C2:83:B0:AE:0A:D7:5B:53:64:55:66:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/323830343a343034633a31313a3a2f34382d3438203d3e20323635393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:404c:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:57:0b:73:8d:4f:3c:11:2d:f5:51:24:4b:16:5f:78:e7:c7:
         92:3f:45:bd:2c:34:a1:4d:bf:66:9d:97:08:23:46:36:c7:e1:
         1b:dc:14:20:ed:28:7e:6f:67:ff:fd:20:38:bd:24:0b:d1:fe:
         91:3e:4d:8b:15:93:47:cb:95:b4:32:38:10:cb:f0:04:6d:1c:
         a5:25:78:70:aa:cf:3b:a1:4e:bc:24:8b:11:c6:32:91:76:4a:
         8c:dc:7a:4c:e3:66:cf:fc:36:7e:ed:33:8c:b7:c0:fc:c5:9a:
         5e:99:d3:1e:ed:a0:57:58:16:1c:84:4b:af:7c:f5:aa:ff:46:
         bb:ae:39:40:f2:c8:e4:6d:f1:b7:b3:51:df:c0:7d:55:cf:6e:
         98:fd:85:d1:f3:5c:d8:1b:8c:a4:e0:7c:0b:af:cf:13:49:12:
         71:12:a4:2e:2a:00:78:4e:06:27:9f:a8:71:82:0d:35:3b:26:
         f2:ef:bd:d6:6b:47:78:ab:b1:bd:3d:e0:5a:b8:a7:11:ab:71:
         42:08:d6:d1:6e:21:6d:fb:f0:e9:be:d0:2b:2c:a8:46:be:eb:
         59:08:d5:1d:6e:5e:4c:88:71:cc:b9:29:d0:79:fc:8a:bb:f7:
         0e:95:ee:90:94:d2:bd:f1:98:35:9d:b3:e7:4e:58:f5:c2:1d:
         29:45:4e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:07 2024 by rpki-client on console-fra.rpki-client.org