Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a353030303a3a2f33362d3336203d3e203631363839.roa
File:                     323830343a316430343a353030303a3a2f33362d3336203d3e203631363839.roa (raw, json)
Hash identifier:          51RxEGZgXeUM8N9LVHt0FkGQHEB0gVCSw3W34k6to/0=
Subject key identifier:   71:2B:32:A2:F9:8F:E5:11:91:9F:BC:96:58:17:AB:33:79:C5:4C:36
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       6362EC8B94758ABEAB26A2EA42A3303AF2946C5C
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a353030303a3a2f33362d3336203d3e203631363839.roa
Signing time:             Fri 23 Aug 2024 19:50:26 +0000
ROA not before:           Fri 23 Aug 2024 19:45:26 +0000
ROA not after:            Fri 22 Aug 2025 19:50:26 +0000
asID:                     61689
IP address blocks:        2804:1d04:5000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:62:ec:8b:94:75:8a:be:ab:26:a2:ea:42:a3:30:3a:f2:94:6c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Aug 23 19:45:26 2024 GMT
            Not After : Aug 22 19:50:26 2025 GMT
        Subject: CN=712B32A2F98FE511919FBC965817AB3379C54C36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:21:7b:04:77:15:b1:f5:9e:92:65:18:02:cc:
                    6a:48:e6:fb:42:0e:95:4c:8d:9c:de:c2:ec:9f:c3:
                    eb:89:60:6b:e3:74:03:b3:38:6a:39:ed:40:82:00:
                    50:d7:27:cd:03:15:14:88:fc:9e:72:1d:c1:4c:90:
                    6f:00:2a:a1:0c:01:0b:10:59:68:a8:51:10:ea:b4:
                    6e:3c:cc:3d:fc:c0:d5:9e:9d:7b:e7:6e:13:25:f3:
                    b2:22:2e:ce:73:ca:98:1b:e7:50:3a:5a:5b:f5:b2:
                    67:5a:b5:5e:48:f5:70:e5:17:9d:a7:8b:86:42:0f:
                    3e:99:91:7b:07:9a:00:6e:c5:92:8a:fc:47:ba:12:
                    94:60:99:6e:9d:0e:62:a8:51:2c:c2:9d:6e:e7:11:
                    88:ef:1c:74:3e:32:d9:55:5f:de:95:d9:70:5f:ab:
                    a8:bd:a2:c7:09:de:f1:9a:e4:4a:1b:06:28:ba:34:
                    e9:ea:aa:e2:24:67:72:9c:df:fa:b9:e2:ce:72:a1:
                    98:91:80:76:a0:c7:95:bb:3f:e2:1e:d7:08:8d:31:
                    9b:25:d6:0c:3e:88:3c:99:eb:eb:d8:c4:2d:50:ba:
                    ba:1e:d3:4a:3c:2e:75:ce:c5:c8:b5:e5:1b:05:2e:
                    04:87:e7:b5:94:a1:71:77:ec:bc:70:ac:a3:f9:80:
                    d3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2B:32:A2:F9:8F:E5:11:91:9F:BC:96:58:17:AB:33:79:C5:4C:36
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a353030303a3a2f33362d3336203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d04:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         86:1c:65:37:0f:6c:5e:19:f8:9e:ea:b7:78:dd:45:c5:d0:6f:
         9f:32:5a:60:63:70:e7:2b:d4:fe:a1:d3:a6:dc:20:b7:b4:4c:
         c5:73:29:2d:a3:a7:00:fd:8b:fb:ce:b1:9a:4c:e5:5b:31:1e:
         7a:3d:9c:ce:3d:63:8b:14:33:43:72:72:46:08:08:34:6e:fc:
         37:7a:bc:6d:d0:37:92:64:2e:c0:24:df:2c:77:84:35:4b:18:
         75:6e:f7:ba:c2:38:cc:cb:7b:09:47:5d:8e:e0:24:84:25:6a:
         b3:a4:7f:6a:0a:36:ee:3f:1b:20:6e:a9:a7:bd:8f:a7:a3:77:
         e8:bc:ff:69:6e:fa:6c:50:f7:06:0d:5f:76:02:38:8c:51:8d:
         e6:7e:a6:07:57:a5:91:56:29:ef:ad:03:d5:fa:7d:76:c2:f3:
         5f:d4:cc:91:f2:d0:69:b9:60:55:32:01:4f:9c:23:99:a1:72:
         4e:dc:f6:1e:5b:b5:50:7b:4e:4a:5d:b1:21:e6:4a:55:ea:05:
         53:b9:1f:92:38:9b:d7:7c:49:de:1c:ec:3c:97:4c:1b:6d:76:
         f7:00:80:6f:c8:8d:25:25:43:54:0f:87:16:79:a3:73:da:8b:
         6b:43:36:37:b5:70:0e:d7:cd:3a:10:7f:1e:ad:87:f1:da:46:
         58:a9:78:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:02 2024 by rpki-client on console-ams.rpki-client.org