Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/323830343a373431303a3a2f33322d313238203d3e20323730393536.roa
File:                     323830343a373431303a3a2f33322d313238203d3e20323730393536.roa (raw, json)
Hash identifier:          xpsUUg000pVSrUVcd0uouQCDQ8ge5aU1OuYkKxpWKpU=
Subject key identifier:   9E:52:ED:05:06:25:64:FC:10:49:BB:44:39:2E:D7:06:F2:E6:38:06
Certificate issuer:       /CN=CF357620357B25129A68E7D55D716CED7E4E1516
Certificate serial:       2C64DDAE89C36B4AA49F893CA99F87D21DD6BD2F
Authority key identifier: CF:35:76:20:35:7B:25:12:9A:68:E7:D5:5D:71:6C:ED:7E:4E:15:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/323830343a373431303a3a2f33322d313238203d3e20323730393536.roa
Signing time:             Wed 30 Oct 2024 17:04:51 +0000
ROA not before:           Wed 30 Oct 2024 16:59:51 +0000
ROA not after:            Wed 29 Oct 2025 17:04:51 +0000
asID:                     270956
IP address blocks:        2804:7410::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.crl
                          rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:64:dd:ae:89:c3:6b:4a:a4:9f:89:3c:a9:9f:87:d2:1d:d6:bd:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF357620357B25129A68E7D55D716CED7E4E1516
        Validity
            Not Before: Oct 30 16:59:51 2024 GMT
            Not After : Oct 29 17:04:51 2025 GMT
        Subject: CN=9E52ED05062564FC1049BB44392ED706F2E63806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4a:06:15:07:e0:39:9b:bd:5e:bd:0e:ec:90:
                    3c:ec:e3:bf:71:92:93:c4:d9:09:1f:ba:e1:24:4f:
                    d3:c1:cc:b6:0b:ab:c1:f4:d9:6e:88:42:38:98:b0:
                    e2:83:23:4e:86:f4:9d:d2:c1:94:49:24:5c:94:02:
                    8b:09:44:69:94:d9:e9:85:69:d9:24:68:f7:eb:29:
                    fd:bc:b2:1a:a4:b0:ca:b5:82:21:ab:f8:e8:ff:88:
                    39:db:e4:ea:c1:0a:50:3b:6d:da:8a:17:9a:48:88:
                    1f:a2:77:ca:b7:69:5d:d7:94:2a:72:da:13:93:00:
                    77:b1:72:d9:67:b4:5f:6f:60:49:07:ea:95:33:12:
                    e6:db:bd:10:f8:6c:07:cf:3f:0c:cf:b7:5a:9d:a5:
                    d1:d0:8b:e3:e0:4d:7b:3b:ae:c5:f6:f6:10:ad:43:
                    d2:c7:fe:b1:85:ab:5c:00:c5:68:ce:3e:55:4e:fa:
                    b8:25:0c:b3:de:b3:80:64:3a:ff:09:fa:4d:73:84:
                    79:26:1a:6b:13:b7:db:58:47:83:46:7b:d0:c9:94:
                    d4:8e:e3:89:c2:b7:a6:d4:16:02:e5:53:b0:0b:42:
                    08:19:fa:10:ef:f5:d4:3b:c7:6b:e4:ed:f6:df:3a:
                    30:5f:e6:22:8c:ed:64:23:00:35:1d:08:f4:c3:f9:
                    3d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:52:ED:05:06:25:64:FC:10:49:BB:44:39:2E:D7:06:F2:E6:38:06
            X509v3 Authority Key Identifier:
                keyid:CF:35:76:20:35:7B:25:12:9A:68:E7:D5:5D:71:6C:ED:7E:4E:15:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/323830343a373431303a3a2f33322d313238203d3e20323730393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7410::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:28:07:eb:dd:d3:3a:62:06:10:1b:d3:4a:7f:87:9d:2e:e1:
         91:19:aa:12:5e:99:cc:42:54:2d:1b:06:15:1a:60:81:f0:f3:
         bb:34:93:4e:30:b1:50:9a:82:51:bc:48:39:5f:18:fd:74:81:
         65:71:0a:d8:2f:d8:12:10:d2:6f:d6:39:17:f2:6b:1f:3f:4d:
         2b:ca:8f:ac:34:33:e7:d6:14:85:08:b2:a6:f4:b5:0a:39:18:
         3a:d6:28:4e:7e:45:bb:17:3c:3d:6e:8c:64:07:a5:6f:fc:1c:
         9d:32:ad:79:83:5c:86:ac:e2:e0:b4:2c:70:38:90:04:a3:95:
         45:0b:ec:b7:4c:75:55:ab:76:fe:78:16:df:a6:15:65:18:b7:
         1a:69:9a:a6:ba:ec:a3:e4:43:55:f4:47:35:ac:c6:ad:8f:aa:
         84:6e:0a:a8:43:21:f1:18:be:88:04:3b:4f:36:a1:1f:75:03:
         e7:cc:05:0d:15:9b:d0:b5:81:af:02:73:bb:dd:f9:c8:bd:d7:
         4b:5c:fd:f9:36:11:bc:b9:c2:a5:f8:1c:3d:cb:9c:2c:54:4c:
         cd:5d:7a:7a:9b:7f:64:e0:7a:62:53:fb:d5:f3:cb:a2:f7:74:
         32:ec:fe:d0:cb:01:25:b0:95:2e:dd:57:fb:5d:23:5a:2a:53:
         62:9b:fc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:07 2024 by rpki-client on console-ams.rpki-client.org