Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/323830343a343034633a3a2f33322d3332203d3e20323635393530.roa
File:                     323830343a343034633a3a2f33322d3332203d3e20323635393530.roa (raw, json)
Hash identifier:          u5zXlo4mefN16glqReZm9A64YXFfEdrSYQQsbm5zP2c=
Subject key identifier:   1B:EE:9E:93:81:FD:19:79:37:97:CF:C3:DB:13:6E:4F:95:FC:A0:42
Certificate issuer:       /CN=B87CE29C7C1D5FA3C283B0AE0AD75B5364556618
Certificate serial:       41199849909235F646D1F484AFEBC8BE28F12487
Authority key identifier: B8:7C:E2:9C:7C:1D:5F:A3:C2:83:B0:AE:0A:D7:5B:53:64:55:66:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/323830343a343034633a3a2f33322d3332203d3e20323635393530.roa
Signing time:             Thu 04 Jul 2024 07:56:00 +0000
ROA not before:           Thu 04 Jul 2024 07:51:00 +0000
ROA not after:            Thu 03 Jul 2025 07:56:00 +0000
asID:                     265950
IP address blocks:        2804:404c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:19:98:49:90:92:35:f6:46:d1:f4:84:af:eb:c8:be:28:f1:24:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87CE29C7C1D5FA3C283B0AE0AD75B5364556618
        Validity
            Not Before: Jul  4 07:51:00 2024 GMT
            Not After : Jul  3 07:56:00 2025 GMT
        Subject: CN=1BEE9E9381FD19793797CFC3DB136E4F95FCA042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0c:e2:11:6c:17:e8:4e:90:aa:b3:00:ad:ea:
                    3c:0b:0a:31:00:a0:b4:7b:a8:24:bf:a1:8e:76:75:
                    71:40:36:73:23:11:77:03:4c:cf:99:d8:20:0f:98:
                    ff:ff:3e:1d:c2:ca:ed:21:91:33:05:fa:56:7c:b2:
                    f8:e0:d6:74:0e:6c:6a:1e:08:cd:59:03:b4:14:92:
                    7c:56:d1:c1:2f:59:38:d3:05:66:68:53:87:bb:5c:
                    68:bb:1a:f3:fa:40:17:c2:b3:05:85:14:d4:89:7e:
                    d5:96:8f:19:0e:87:35:76:4a:3f:b5:f0:53:a3:19:
                    25:f9:e5:3f:5c:45:fc:a4:91:47:5d:10:bf:ef:a0:
                    33:c8:76:43:86:94:37:d4:32:f0:f6:42:0d:f7:b8:
                    6c:34:37:ec:88:d9:c2:10:2b:6c:7b:ab:10:a5:8f:
                    4c:0b:a1:b1:ff:19:09:a1:68:f8:8c:7b:dd:cc:70:
                    a7:ca:de:73:d7:c6:87:b7:1c:b7:bd:7e:11:f7:f8:
                    1c:5d:e4:8c:2a:87:12:6b:2d:15:da:24:d5:cb:0c:
                    99:6d:a0:62:49:44:49:4f:02:10:00:88:20:20:2b:
                    d9:3a:4d:36:cf:7f:77:65:52:2c:47:96:e6:e0:95:
                    7e:37:94:88:a7:20:a2:fc:3d:5a:88:76:05:3b:92:
                    bb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EE:9E:93:81:FD:19:79:37:97:CF:C3:DB:13:6E:4F:95:FC:A0:42
            X509v3 Authority Key Identifier:
                keyid:B8:7C:E2:9C:7C:1D:5F:A3:C2:83:B0:AE:0A:D7:5B:53:64:55:66:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/323830343a343034633a3a2f33322d3332203d3e20323635393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:404c::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:96:56:d3:2f:94:e9:1a:9f:a8:b9:43:d6:88:dd:71:10:38:
         4d:01:06:87:7f:67:4d:36:68:6a:b6:77:71:16:16:61:f4:ed:
         df:ff:41:3b:5a:74:aa:80:0a:02:66:2e:7a:2a:35:9e:f2:e9:
         95:ff:dc:43:6f:c7:45:1f:02:1d:28:f0:4d:36:f8:c9:36:69:
         c4:44:67:77:17:2c:1b:af:1a:f0:d2:d7:e8:dc:fc:f4:12:64:
         8a:04:bf:70:f9:a1:bb:a7:3e:08:ab:02:0e:aa:7b:69:c9:3b:
         d6:4d:82:4a:45:2c:11:5a:23:13:7d:94:ca:f9:6f:b9:6c:d2:
         ef:cf:e5:d9:9b:02:1a:df:9c:ce:39:d7:e7:f8:52:93:09:c5:
         54:4a:e7:2e:5c:fc:88:ca:24:3f:ba:bb:86:f1:9c:59:6b:be:
         15:03:19:4a:c6:bc:b4:7d:2b:06:29:52:69:55:30:6b:67:81:
         0f:44:76:a0:21:6d:12:a0:7f:c3:72:bd:d8:1c:5a:6c:f0:c3:
         73:7a:56:f3:7f:e3:bb:64:71:1b:aa:4d:e5:3d:f2:bd:dd:9b:
         fd:91:28:ed:20:f5:01:59:0a:b9:c0:4a:82:52:c8:5b:a1:77:
         0e:40:48:12:78:e6:04:fe:d4:00:d6:89:07:64:cb:ed:2e:f1:
         a7:f3:9d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:07 2024 by rpki-client on console-fra.rpki-client.org