Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/323830343a313361343a3a2f33322d313238203d3e20323633353433.roa
File:                     323830343a313361343a3a2f33322d313238203d3e20323633353433.roa (raw, json)
Hash identifier:          1PvI12O/JcW5uKlE1fnnutkDw8XZx5PE9dVr6YUYTGg=
Subject key identifier:   29:DF:F9:8C:C8:2A:D9:92:76:1D:97:04:63:7E:10:30:8F:60:5B:6B
Certificate issuer:       /CN=B3C0ECC43363690F72F949D611EE62DCF8942568
Certificate serial:       60522C6F119CC4E2053D9B779A66CE510B0B5BC4
Authority key identifier: B3:C0:EC:C4:33:63:69:0F:72:F9:49:D6:11:EE:62:DC:F8:94:25:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/323830343a313361343a3a2f33322d313238203d3e20323633353433.roa
Signing time:             Wed 30 Oct 2024 13:53:17 +0000
ROA not before:           Wed 30 Oct 2024 13:48:17 +0000
ROA not after:            Wed 29 Oct 2025 13:53:17 +0000
asID:                     263543
IP address blocks:        2804:13a4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.crl
                          rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:52:2c:6f:11:9c:c4:e2:05:3d:9b:77:9a:66:ce:51:0b:0b:5b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C0ECC43363690F72F949D611EE62DCF8942568
        Validity
            Not Before: Oct 30 13:48:17 2024 GMT
            Not After : Oct 29 13:53:17 2025 GMT
        Subject: CN=29DFF98CC82AD992761D9704637E10308F605B6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:82:3d:5b:56:ed:a4:93:72:18:d0:9e:72:aa:
                    5f:c4:e8:6a:79:c6:ec:3a:fc:c3:53:76:61:4f:45:
                    7e:23:d3:35:a6:aa:f7:87:7b:9f:f4:25:39:9a:e4:
                    65:32:d8:9d:b0:c9:60:64:88:1f:24:26:8e:9b:c6:
                    56:0e:1d:ea:d2:7b:b0:0d:22:e8:29:c4:83:66:81:
                    26:d9:46:9e:3d:82:8a:f4:ce:be:f7:51:f5:48:bf:
                    89:e1:3d:83:27:b0:2f:15:28:c1:7f:7b:5f:29:0e:
                    68:e3:c6:b5:50:ac:f4:b8:47:fc:68:4b:9f:c5:95:
                    b7:b8:f4:8f:40:a5:b7:f6:b9:bb:31:ad:74:65:3a:
                    ee:4c:9a:50:a7:93:a8:3f:6f:76:c5:20:bd:9c:6b:
                    62:a7:24:69:f6:c6:56:86:30:93:17:ff:a4:e2:27:
                    04:71:4d:76:65:05:49:63:ce:e2:17:2d:00:fe:cd:
                    c3:86:17:64:ab:ae:db:ce:9b:53:04:87:ea:1d:3c:
                    ec:95:f0:2c:f6:3a:b4:2b:3e:57:6c:e9:0d:a6:cf:
                    35:42:99:aa:84:06:10:c3:68:c0:36:ec:ab:8a:12:
                    74:54:c2:9d:35:aa:a5:6e:da:64:04:25:ee:5b:be:
                    2e:93:df:f7:d0:55:cd:e6:7b:4d:f7:cd:19:1f:62:
                    c5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DF:F9:8C:C8:2A:D9:92:76:1D:97:04:63:7E:10:30:8F:60:5B:6B
            X509v3 Authority Key Identifier:
                keyid:B3:C0:EC:C4:33:63:69:0F:72:F9:49:D6:11:EE:62:DC:F8:94:25:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/323830343a313361343a3a2f33322d313238203d3e20323633353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:13a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:70:7f:ba:d0:53:9a:26:d6:ca:5f:1e:72:6d:52:7e:27:a6:
         75:0a:cb:e0:d1:65:87:13:ce:80:62:90:0d:d4:28:d3:26:c8:
         5f:7b:e8:e7:1b:98:7d:71:57:b3:c1:f2:c9:6a:3b:ca:83:9b:
         0f:53:9a:e2:0e:01:d0:a5:e3:03:8d:f7:77:3d:89:4b:56:cc:
         06:86:bc:3d:b7:06:7b:ad:47:9d:b7:f4:f7:26:68:4f:14:63:
         3a:f0:74:0d:43:43:ae:09:f9:03:f3:45:82:f8:67:1d:be:b5:
         5f:5c:07:c3:b2:2e:78:50:5a:51:b9:9d:e1:fb:db:7b:f6:3b:
         be:e9:44:41:82:5d:53:e2:66:d1:4b:26:8f:20:63:47:80:89:
         ad:4e:1a:e5:6c:be:dc:1e:b7:e5:f8:c4:67:0d:0d:1b:f5:03:
         f4:c7:07:a2:16:44:3a:d4:a7:98:05:f0:ac:3f:1f:e0:f8:aa:
         2b:10:d0:ec:02:34:a4:fd:ed:70:b5:9d:5d:42:8f:f9:85:57:
         9d:62:12:84:76:85:a7:9d:a0:02:24:9b:4f:99:57:fa:f7:2a:
         2a:87:30:b6:11:52:60:d6:c8:11:0d:22:f1:43:6d:72:40:16:
         87:3d:c2:77:c7:06:7b:8e:cc:be:0b:fa:db:4b:12:f0:30:a5:
         58:27:1d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:33 2024 by rpki-client on console-fra.rpki-client.org