Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a3430303a3a2f34382d3438203d3e203631363839.roa
File:                     323830343a316430343a3430303a3a2f34382d3438203d3e203631363839.roa (raw, json)
Hash identifier:          gMpim0DH/HOGTtSrFKqJOPmybNd2pZSh+lULcAQqWX8=
Subject key identifier:   6D:2C:E4:8E:FD:96:6D:F5:1E:7E:CD:A8:CB:C2:E6:8B:6C:80:5F:36
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       0BB3D157D99C336EF78DE4310ADD61DC35A849EF
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a3430303a3a2f34382d3438203d3e203631363839.roa
Signing time:             Fri 23 Aug 2024 19:50:34 +0000
ROA not before:           Fri 23 Aug 2024 19:45:34 +0000
ROA not after:            Fri 22 Aug 2025 19:50:34 +0000
asID:                     61689
IP address blocks:        2804:1d04:400::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b3:d1:57:d9:9c:33:6e:f7:8d:e4:31:0a:dd:61:dc:35:a8:49:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Aug 23 19:45:34 2024 GMT
            Not After : Aug 22 19:50:34 2025 GMT
        Subject: CN=6D2CE48EFD966DF51E7ECDA8CBC2E68B6C805F36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b8:0c:eb:47:5d:a0:e4:fc:61:3b:f3:0f:b1:
                    9b:d3:5e:98:02:0c:76:ae:4d:3a:fa:0c:aa:62:cb:
                    e1:14:2a:55:fc:78:49:f9:48:0e:5c:6c:3b:8e:b1:
                    88:98:aa:85:f7:0b:42:be:0a:4c:62:cc:2d:88:bc:
                    4e:34:41:6f:d1:0c:81:33:a5:3c:b0:58:60:2b:cf:
                    22:3b:74:3b:a5:e2:b7:d2:b2:b7:75:be:4c:14:20:
                    9d:55:34:36:ca:d0:aa:69:d9:3c:5f:bb:98:af:0d:
                    db:ec:b8:31:44:32:16:e3:88:3f:a6:23:85:a2:cc:
                    72:ba:2b:b8:82:2c:60:b1:ac:b7:11:51:b8:37:2f:
                    df:f9:55:94:3e:34:1a:ca:f2:b6:70:7f:22:18:20:
                    f0:90:80:bf:82:09:75:b5:74:9d:5b:87:21:5a:56:
                    c5:5c:82:e5:f3:b4:9a:be:28:65:bc:66:34:f2:dc:
                    9b:75:c4:2f:fb:53:7e:f4:f9:40:0c:a8:92:5d:c8:
                    f9:1f:d0:df:c9:f9:bd:36:36:43:30:85:a4:39:0c:
                    5e:62:9b:10:a0:81:32:49:c6:a1:5f:e9:5f:9a:c4:
                    63:08:26:38:b3:b0:72:ba:50:74:cd:52:2c:40:a4:
                    63:8c:72:d8:37:5f:4b:e5:51:c4:40:9f:79:f8:8b:
                    fc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2C:E4:8E:FD:96:6D:F5:1E:7E:CD:A8:CB:C2:E6:8B:6C:80:5F:36
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a3430303a3a2f34382d3438203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d04:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:be:1e:b7:76:2f:f5:5b:da:1c:ae:a6:57:f9:13:88:c5:8b:
         44:38:27:47:c0:30:ee:19:95:c7:ae:c1:1d:c7:02:f9:50:2e:
         c3:85:b1:cd:c1:e0:bc:05:b2:91:97:05:07:de:04:82:24:1e:
         14:40:20:ca:2f:1f:d7:6a:b1:8a:8f:46:b9:0e:34:e8:2e:06:
         fd:ae:43:e1:9d:00:8a:7a:e1:b0:27:f8:2d:36:6d:c0:e7:85:
         1a:bc:50:f6:a9:31:65:52:40:c8:01:91:d7:52:4f:74:98:5b:
         d8:c1:0c:47:0b:71:7e:37:f3:a3:dc:d5:5b:68:73:18:01:09:
         05:3c:41:0a:19:68:1a:27:47:54:f7:52:d0:b2:ba:98:42:22:
         c8:ab:21:3e:59:be:27:9b:86:e6:99:99:30:a5:5d:64:bf:30:
         db:b1:33:df:95:8f:43:61:5b:71:3f:7e:fe:23:43:c5:ef:7d:
         00:c3:86:ad:11:0d:ed:46:5e:a7:9c:0e:14:71:04:dd:49:a2:
         80:d6:2d:7f:80:29:ec:82:ed:c8:0e:9b:9d:8b:38:e5:92:66:
         55:5f:77:ef:d6:fe:f0:e0:8e:29:a4:f5:67:97:c6:93:ac:05:
         1f:93:2a:d9:33:8d:80:7b:8e:dd:db:25:83:2b:27:fa:99:01:
         70:be:26:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:32 2024 by rpki-client on console-fra.rpki-client.org