Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a3a2f33322d3332203d3e203631363839.roa
File:                     323830343a316430343a3a2f33322d3332203d3e203631363839.roa (raw, json)
Hash identifier:          4YDGbkUAN4WJZSxpxc0gK8gHNH/Tnk+yS4i3mY2n4UY=
Subject key identifier:   56:5E:0C:2C:2C:73:A2:F8:64:52:83:59:46:23:38:60:D0:19:91:80
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       246489E06D90E4F2B1DF98ABF424C95CF9BFEA57
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a3a2f33322d3332203d3e203631363839.roa
Signing time:             Fri 23 Aug 2024 19:50:45 +0000
ROA not before:           Fri 23 Aug 2024 19:45:45 +0000
ROA not after:            Fri 22 Aug 2025 19:50:45 +0000
asID:                     61689
IP address blocks:        2804:1d04::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:64:89:e0:6d:90:e4:f2:b1:df:98:ab:f4:24:c9:5c:f9:bf:ea:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Aug 23 19:45:45 2024 GMT
            Not After : Aug 22 19:50:45 2025 GMT
        Subject: CN=565E0C2C2C73A2F86452835946233860D0199180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:98:bb:99:98:59:7b:d4:d9:28:02:00:a8:4e:
                    57:20:24:2e:3c:a0:2f:12:75:b7:27:e1:65:f9:fa:
                    d1:0e:92:62:e2:ad:cd:e0:a7:82:1e:60:7d:33:8a:
                    f2:76:b8:f5:5a:4b:d3:f6:13:ac:4c:7d:86:e4:01:
                    de:bd:4b:b2:d9:e9:66:4f:04:86:17:3f:99:d2:81:
                    0b:6b:cb:61:33:eb:d0:5c:ac:89:d4:a8:75:0b:9d:
                    3b:20:6b:6f:59:81:e2:a4:85:94:bf:a8:96:da:6d:
                    88:30:33:c9:a5:dc:77:97:c8:4d:bc:72:45:8e:87:
                    96:8a:b3:5a:fa:52:2b:14:bc:92:b0:65:6f:e6:65:
                    cb:c2:78:ed:15:0f:46:f0:dc:12:05:0d:63:4d:24:
                    50:4e:b8:db:52:77:23:f6:ab:3f:78:7c:bc:25:ea:
                    25:03:a4:be:a8:7f:aa:bb:70:77:75:3f:8c:92:36:
                    79:de:96:e9:06:15:b6:ab:fd:b6:0a:c0:38:91:43:
                    9f:4d:0c:d3:1b:1e:d1:6e:c1:cd:4f:15:22:5c:34:
                    72:95:ae:ef:93:9e:92:9c:ff:41:b6:42:f4:88:45:
                    de:b1:0d:92:ed:7f:33:9f:8c:79:83:75:1e:79:71:
                    af:6c:cc:08:5f:74:55:01:40:a3:8c:35:b3:ad:dc:
                    f1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5E:0C:2C:2C:73:A2:F8:64:52:83:59:46:23:38:60:D0:19:91:80
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a3a2f33322d3332203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d04::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:89:81:a2:01:fc:50:6f:1a:20:49:32:6f:d7:bb:ce:52:45:
         2b:9f:fa:16:df:f9:b4:dd:e4:d8:63:21:23:71:17:16:4d:a8:
         b3:9b:a5:12:d8:6a:bf:ba:f3:9c:c4:c2:c7:f3:5a:59:05:c6:
         ff:b5:64:f0:90:50:69:f7:63:93:ec:63:de:7c:38:b5:ab:e1:
         79:e5:b8:ff:f9:2d:c1:ba:41:d7:e0:62:bf:e9:c1:88:a9:3c:
         50:e7:2d:75:fc:ea:6c:bf:8f:e6:5a:40:ad:96:69:21:75:15:
         fe:2e:3b:a3:7d:3a:72:a3:fe:d5:ab:f6:de:a6:24:85:61:12:
         ff:cd:c7:d2:91:68:00:11:b3:66:5d:7e:b9:1d:56:6b:11:73:
         d0:e5:64:83:cf:14:b6:10:fe:94:42:7c:35:d6:59:94:40:93:
         be:91:87:89:dd:62:97:bc:49:d6:1c:f7:e5:e4:4c:46:9b:fb:
         2d:f1:2e:aa:16:c0:d4:42:8a:7d:98:42:fc:f7:8e:c6:16:4b:
         36:a2:1c:00:78:26:86:04:cf:25:d7:c3:fe:19:e4:7d:48:90:
         1f:4e:b4:a8:ba:86:40:2c:7b:8a:15:a0:ba:d5:b6:2a:3a:6e:
         f7:c0:10:87:c4:18:87:06:ca:b1:46:37:b6:eb:b9:07:fb:ca:
         34:e6:5d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:02 2024 by rpki-client on console-ams.rpki-client.org