Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/323830343a313434303a3a2f33322d3430203d3e20323633333231.roa
File:                     323830343a313434303a3a2f33322d3430203d3e20323633333231.roa (raw, json)
Hash identifier:          4zy1wfhCDfCEc1joqTfUw3AH6G7CAwgUFDHcwplid3k=
Subject key identifier:   FF:41:94:B8:04:DE:FC:87:C5:DE:20:4B:17:CF:A3:84:56:7B:A5:D1
Certificate issuer:       /CN=B8BF0367B559121777A21A84D953A717D6E82AEA
Certificate serial:       782321AAA9F19111D5A51C8A62703220A9405A83
Authority key identifier: B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/323830343a313434303a3a2f33322d3430203d3e20323633333231.roa
Signing time:             Thu 25 Jul 2024 13:47:53 +0000
ROA not before:           Thu 25 Jul 2024 13:42:53 +0000
ROA not after:            Thu 24 Jul 2025 13:47:53 +0000
asID:                     263321
IP address blocks:        2804:1440::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl
                          rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:23:21:aa:a9:f1:91:11:d5:a5:1c:8a:62:70:32:20:a9:40:5a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF0367B559121777A21A84D953A717D6E82AEA
        Validity
            Not Before: Jul 25 13:42:53 2024 GMT
            Not After : Jul 24 13:47:53 2025 GMT
        Subject: CN=FF4194B804DEFC87C5DE204B17CFA384567BA5D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5d:6d:ff:3b:90:cd:98:7f:ea:5d:df:32:56:
                    16:fa:f1:06:2b:e8:7c:ef:38:79:ba:68:0d:29:93:
                    98:fd:e3:7a:7a:02:81:ab:09:2a:0f:bb:71:40:d8:
                    4a:4d:db:b2:00:cc:a0:b1:33:70:e8:de:c1:1d:7c:
                    7a:a4:46:8a:3a:6a:1c:eb:a2:08:a5:ae:e6:8d:3f:
                    b4:18:76:36:11:9f:0d:5a:a7:33:99:b2:82:d4:06:
                    7a:84:46:ed:6c:65:48:6e:02:4a:ad:6b:4d:06:fc:
                    49:21:6f:c2:76:3c:0c:0e:49:ab:a6:d1:08:08:4e:
                    44:88:88:e0:ac:2c:39:03:98:49:71:06:ec:45:e3:
                    52:d0:d0:f7:17:ba:c0:a2:a4:63:62:02:5f:9e:f5:
                    8a:02:ec:4c:44:4e:84:d3:28:80:d2:af:0c:bf:e2:
                    60:a5:be:b7:00:ec:18:f2:5b:b9:85:d8:b5:15:8d:
                    d4:96:05:8d:4e:8c:ee:aa:15:89:0d:6b:ed:4a:12:
                    7a:8c:07:f2:fe:60:8f:3f:ec:40:58:43:47:e1:55:
                    69:a4:07:18:1e:fb:e9:95:dd:74:e9:2d:22:5e:44:
                    84:6f:4c:87:d3:4a:f5:00:0f:7d:b2:b2:b6:c3:f0:
                    20:d9:9c:38:6d:73:74:66:49:f3:93:86:79:db:4c:
                    51:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:41:94:B8:04:DE:FC:87:C5:DE:20:4B:17:CF:A3:84:56:7B:A5:D1
            X509v3 Authority Key Identifier:
                keyid:B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/323830343a313434303a3a2f33322d3430203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1440::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:24:d5:f0:ee:cc:00:e7:88:2b:24:63:37:39:02:03:4a:1d:
         74:bf:c9:cf:96:d4:5a:d5:5f:00:c0:38:48:67:dc:0e:0c:dc:
         11:d1:bc:e8:56:9a:17:36:28:7c:04:fd:e1:50:63:8e:89:2d:
         37:d5:f5:6c:17:af:68:3b:6a:0d:a9:fc:ef:cb:42:0e:ca:d2:
         07:e2:78:de:91:ce:31:76:9b:08:39:fd:26:d5:1d:d2:de:0d:
         c0:e6:24:3f:6f:66:75:b2:e6:1a:99:8c:cf:55:a4:85:06:66:
         5d:3f:cf:3d:a4:3d:76:a7:b9:08:27:19:91:bd:25:f3:0b:ca:
         79:8f:72:92:ed:8a:63:88:b8:6f:42:4d:ea:4b:73:9b:76:1f:
         ae:5e:de:d9:9a:78:c6:e0:24:b8:f2:39:fb:93:c8:2d:b1:12:
         a9:a9:c8:e1:ab:51:ad:57:eb:01:5e:8d:f5:a4:d2:7c:61:cf:
         89:c0:d7:ee:5a:7d:87:16:64:2b:4f:4f:ee:f1:f2:8d:57:11:
         a4:b9:35:59:63:49:11:aa:88:0a:15:35:56:a3:99:c8:0a:68:
         cf:bc:89:e4:de:dd:5b:e1:a7:45:71:ad:a0:d3:9a:63:19:f8:
         a0:2f:fe:07:20:87:2e:f7:21:3d:35:24:a3:03:03:f3:81:5a:
         f1:7b:80:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:52 2024 by rpki-client on console-fra.rpki-client.org