Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/323830343a356561383a3a2f33322d3333203d3e20323639303438.roa
File:                     323830343a356561383a3a2f33322d3333203d3e20323639303438.roa (raw, json)
Hash identifier:          GgtRGQ+G7xLYqBBzca1A3eA60BC07dtjMTY0g32MMLE=
Subject key identifier:   F1:19:79:64:C5:97:A6:1F:E2:ED:BD:A9:7B:AB:76:38:F4:38:8D:04
Certificate issuer:       /CN=0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E
Certificate serial:       130EFFD3AADABD2BFD106D6E2B3B18243FA6DF32
Authority key identifier: 03:96:D7:1A:C4:DB:6D:BB:AE:1F:49:1E:E5:7B:3C:FF:D8:08:D7:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/323830343a356561383a3a2f33322d3333203d3e20323639303438.roa
Signing time:             Tue 24 Sep 2024 16:28:39 +0000
ROA not before:           Tue 24 Sep 2024 16:23:39 +0000
ROA not after:            Tue 23 Sep 2025 16:28:39 +0000
asID:                     269048
IP address blocks:        2804:5ea8::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.crl
                          rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:0e:ff:d3:aa:da:bd:2b:fd:10:6d:6e:2b:3b:18:24:3f:a6:df:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E
        Validity
            Not Before: Sep 24 16:23:39 2024 GMT
            Not After : Sep 23 16:28:39 2025 GMT
        Subject: CN=F1197964C597A61FE2EDBDA97BAB7638F4388D04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a2:50:9f:72:ac:19:df:52:aa:7d:ea:33:b9:
                    3d:fb:05:b7:b9:12:26:fc:37:fd:da:3a:15:5d:fe:
                    85:1b:82:7f:f8:1e:ba:9e:15:94:3e:78:41:3c:52:
                    3f:1d:02:f1:7c:a1:fe:34:d3:5a:6e:bb:e2:92:d3:
                    82:62:c4:18:b4:fe:fc:3b:dc:df:e0:55:20:1a:11:
                    83:58:ae:89:2e:bb:b4:e1:98:44:3d:ed:a5:ff:f3:
                    df:98:b1:50:1a:cd:89:9d:82:6a:a3:20:33:6c:03:
                    95:a2:91:33:db:77:df:3d:8f:69:02:2c:13:90:b7:
                    04:51:b3:65:ea:6f:cb:24:1f:99:4b:f2:e2:5b:bc:
                    1e:e9:f0:4b:8c:fd:c8:b8:7d:16:ce:89:7e:b5:3e:
                    39:1d:4b:67:82:2a:9d:86:73:32:d8:5c:d5:5d:bc:
                    9c:a4:22:2b:63:a6:f9:73:de:9d:f1:16:38:a6:c8:
                    3b:2b:af:1e:ce:a1:c9:32:3b:3d:04:85:ac:22:fd:
                    b9:b5:2c:67:64:42:da:93:f2:88:65:0d:bc:9d:77:
                    ad:e7:8d:69:50:51:3f:3c:04:ad:a7:36:14:45:4e:
                    b3:7b:7f:70:63:fe:10:86:ed:52:ec:c2:7f:57:e4:
                    6d:74:05:2c:05:85:3c:ce:0b:bd:c1:99:c3:8e:27:
                    7e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:19:79:64:C5:97:A6:1F:E2:ED:BD:A9:7B:AB:76:38:F4:38:8D:04
            X509v3 Authority Key Identifier:
                keyid:03:96:D7:1A:C4:DB:6D:BB:AE:1F:49:1E:E5:7B:3C:FF:D8:08:D7:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/323830343a356561383a3a2f33322d3333203d3e20323639303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ea8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:54:72:84:57:04:0d:af:16:66:63:e1:a8:da:69:a6:3e:e9:
         45:93:d2:a3:6f:8a:e9:ca:8f:d5:c0:77:da:e3:2d:15:f4:8e:
         9a:24:86:c7:ae:a4:94:5a:5b:84:8b:60:4a:b4:0e:d0:a8:8e:
         5e:a1:9e:0a:0c:4c:60:5d:f9:fc:a2:1f:3c:b3:7f:41:41:f6:
         ed:87:f3:a0:81:bd:e3:9c:b9:47:a0:d5:f4:14:0d:d2:7b:4d:
         76:4c:38:66:40:5d:4d:aa:b1:13:35:e2:51:31:9e:a7:2a:d2:
         f4:b8:3f:73:42:ce:46:cb:82:f4:f7:13:39:7f:32:d5:3f:9a:
         3d:92:1b:f3:e6:8d:4c:97:92:cd:71:5b:08:6d:7f:18:e9:fd:
         3e:8f:80:b6:9f:af:9c:36:29:3b:58:dc:23:6d:52:96:8a:4d:
         b3:21:bd:9f:c3:25:90:e1:07:6e:29:1f:a9:09:40:2d:5a:30:
         e6:22:17:95:6e:59:36:8a:9a:c9:c6:0e:b7:56:36:97:b4:7c:
         06:fc:ee:bd:ce:55:ef:98:b5:d8:30:c3:d7:06:52:1a:0e:d5:
         3f:db:eb:04:c0:8b:8f:f3:6f:77:75:00:64:5f:4c:0d:f4:1d:
         9b:9b:2f:ee:4f:04:e3:42:85:a3:1a:9e:3e:a8:50:a1:19:49:
         6a:f6:e7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:32 2024 by rpki-client on console-ams.rpki-client.org