Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a3a2f34382d3438203d3e203631363839.roa
File:                     323830343a316430343a3a2f34382d3438203d3e203631363839.roa (raw, json)
Hash identifier:          4GH1IgvWB/thG4qQxf0UN8hHkxsByoKNddytFbzygcA=
Subject key identifier:   84:FE:F8:DC:7C:48:9C:E9:88:82:3C:B7:56:A9:FB:A1:6A:ED:37:4B
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       518AF6B1F583CBE96F2247F6B9DF22330A50641F
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a3a2f34382d3438203d3e203631363839.roa
Signing time:             Fri 23 Aug 2024 19:50:39 +0000
ROA not before:           Fri 23 Aug 2024 19:45:39 +0000
ROA not after:            Fri 22 Aug 2025 19:50:39 +0000
asID:                     61689
IP address blocks:        2804:1d04::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8a:f6:b1:f5:83:cb:e9:6f:22:47:f6:b9:df:22:33:0a:50:64:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Aug 23 19:45:39 2024 GMT
            Not After : Aug 22 19:50:39 2025 GMT
        Subject: CN=84FEF8DC7C489CE988823CB756A9FBA16AED374B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:40:99:79:05:c5:e2:52:a8:70:30:65:61:6e:
                    05:2a:cc:a7:5d:03:96:ca:e1:bc:04:bc:8b:05:ba:
                    18:48:43:74:6f:f9:ae:9e:3d:4c:fb:1b:4b:e6:8d:
                    51:e5:0d:9b:6c:43:5c:3f:d1:26:f2:91:fb:f1:a5:
                    0f:66:06:fc:41:3b:37:68:16:48:27:1b:ff:0e:61:
                    ab:87:23:6d:8b:0e:f1:7f:04:11:96:f5:0e:60:a7:
                    29:16:5b:4e:5c:a3:96:d7:a9:c3:35:d7:ce:3c:17:
                    f2:5c:a6:dc:76:8d:a2:38:6f:15:2e:60:e7:ed:a1:
                    1b:eb:16:cd:2a:13:41:c4:f4:e0:b6:47:5d:12:6c:
                    9a:39:da:bd:85:af:eb:b1:ad:04:af:d7:ac:c7:64:
                    eb:ab:5a:b2:d0:cb:1a:aa:d4:9b:12:f4:7a:0d:ed:
                    34:aa:8b:8b:6a:f4:20:6d:10:0d:44:a2:a7:26:d7:
                    fb:a3:c6:90:e7:c1:01:b3:9f:69:5c:e5:70:1e:33:
                    eb:e8:65:70:cd:b0:6b:0e:8d:a7:b2:31:57:d1:c4:
                    77:ad:f0:86:86:73:2f:ae:f9:94:f8:8c:7a:4a:c7:
                    9e:49:16:b3:c0:f4:7a:34:a2:63:7d:18:0c:1c:c5:
                    c6:d2:b2:c6:6f:1b:e8:22:0e:17:32:5c:78:d7:f3:
                    81:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FE:F8:DC:7C:48:9C:E9:88:82:3C:B7:56:A9:FB:A1:6A:ED:37:4B
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a3a2f34382d3438203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d04::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:03:f3:12:b5:8e:d9:b1:ba:df:14:c8:73:ba:82:6b:ca:09:
         1e:b3:89:e9:13:be:ee:eb:19:68:b1:49:81:4c:93:b1:df:6e:
         ae:74:1e:78:05:1f:d6:39:dc:1d:d6:5d:de:7b:0b:8f:b5:cc:
         67:f6:cd:97:8b:46:9d:12:78:79:23:7f:b2:b9:25:89:4d:83:
         30:0e:0a:d9:b0:cf:0b:bc:58:ec:11:fb:93:d2:6e:16:d8:95:
         26:8a:ee:60:56:19:ad:5f:86:24:d4:4d:7f:c7:d2:ca:52:24:
         58:6f:23:31:ae:09:3c:4c:eb:e4:9c:c4:f1:13:b0:19:5c:b1:
         30:0a:0e:02:53:7b:3a:4e:e5:e3:77:89:6c:c8:4c:cf:09:2b:
         6f:7f:92:d5:05:5f:c8:72:1c:c5:64:4e:22:ae:27:25:f0:8c:
         00:b4:bc:0a:b7:27:4c:52:16:72:0f:db:13:aa:7a:a1:d8:4d:
         b0:78:f7:46:ab:56:41:27:b4:2d:a5:4f:cf:7e:00:31:42:81:
         0a:f0:ff:84:bd:d5:1a:76:20:f2:c9:b9:46:1d:81:94:a5:20:
         04:24:bd:b3:19:77:08:ed:16:41:2d:e5:64:0d:60:06:e8:f9:
         c6:65:1d:8c:3a:69:77:fb:e4:b3:54:86:a1:d1:cb:ab:67:38:
         c8:d2:dd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:02 2024 by rpki-client on console-ams.rpki-client.org