Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/323830343a313464633a3a2f33322d3332203d3e20323633333535.roa
File:                     323830343a313464633a3a2f33322d3332203d3e20323633333535.roa (raw, json)
Hash identifier:          5s52OaFEgazax6yMn7i2mDqy/eHI9svQrg5vRzUsags=
Subject key identifier:   00:FE:39:CC:77:17:10:04:A8:68:BA:94:DC:FA:B5:F4:1E:67:56:40
Certificate issuer:       /CN=2A6676986C812A17B00635484B147B51B75ADD4B
Certificate serial:       0A40B630090D95617ABB3BD839412EE58A164BFB
Authority key identifier: 2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/323830343a313464633a3a2f33322d3332203d3e20323633333535.roa
Signing time:             Tue 22 Oct 2024 17:52:15 +0000
ROA not before:           Tue 22 Oct 2024 17:47:15 +0000
ROA not after:            Tue 21 Oct 2025 17:52:15 +0000
asID:                     263355
IP address blocks:        2804:14dc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl
                          rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:40:b6:30:09:0d:95:61:7a:bb:3b:d8:39:41:2e:e5:8a:16:4b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6676986C812A17B00635484B147B51B75ADD4B
        Validity
            Not Before: Oct 22 17:47:15 2024 GMT
            Not After : Oct 21 17:52:15 2025 GMT
        Subject: CN=00FE39CC77171004A868BA94DCFAB5F41E675640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f0:ab:58:87:29:e2:98:45:03:78:e6:d8:9d:
                    53:7c:60:54:45:ca:4f:78:a0:cb:e5:d4:79:6b:d7:
                    58:f0:e7:e7:43:35:d0:fe:5c:e6:a9:ab:33:a0:b9:
                    0d:2a:6c:c8:87:eb:c6:f9:15:19:62:44:d7:62:8d:
                    62:23:05:83:2e:b4:45:c6:ea:6c:ee:f9:b2:cd:fc:
                    f8:a8:06:87:99:21:d7:bb:ec:3b:2a:8b:73:00:be:
                    b9:23:d4:c2:e7:97:7c:75:f4:2e:40:81:f3:cd:14:
                    d5:35:b4:ff:0e:ea:48:3f:ac:d8:5b:3c:77:05:2b:
                    7a:0e:74:95:8b:31:78:c5:6c:60:8e:22:fb:95:3b:
                    fd:05:f1:91:49:78:a2:58:a1:04:3f:53:46:ad:1d:
                    6b:51:8a:c7:c9:47:ed:96:a5:35:4f:1a:a4:87:5f:
                    6b:c6:ff:17:6c:a5:be:d8:a0:b8:64:08:d5:63:7b:
                    a6:d5:e2:28:49:f6:64:30:92:83:b3:de:79:4e:14:
                    87:d3:00:f5:45:2f:16:54:0a:33:fe:e6:9b:17:b7:
                    3c:d3:4c:96:d2:ce:b6:6f:8c:f0:94:bb:ab:3f:51:
                    3b:5b:45:b4:08:5e:14:2d:3c:f5:31:96:ab:dc:95:
                    a6:a1:67:14:82:87:76:04:62:e7:b9:84:74:d2:88:
                    78:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FE:39:CC:77:17:10:04:A8:68:BA:94:DC:FA:B5:F4:1E:67:56:40
            X509v3 Authority Key Identifier:
                keyid:2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/323830343a313464633a3a2f33322d3332203d3e20323633333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:0a:8b:0e:f0:06:ce:9a:d4:8e:b0:9b:89:4a:79:76:e3:27:
         68:5d:3d:43:a7:13:37:49:25:7d:5f:3e:be:d6:38:51:51:56:
         d0:35:17:12:9f:ca:3a:8e:eb:09:8c:60:29:5b:77:e4:90:18:
         08:ba:33:24:20:ae:09:bc:b0:d0:09:2a:d6:b1:35:01:83:02:
         9b:72:af:ad:87:c3:ed:a6:0a:ca:a9:f6:58:5a:97:fe:3f:8a:
         13:1a:c4:ef:0d:60:0f:30:ca:3c:84:a3:97:21:6d:20:2a:7d:
         f9:d6:18:18:09:97:74:20:0a:3d:c1:48:09:4a:4b:19:04:6a:
         a9:a4:30:7c:bb:fc:64:c0:a8:fe:9d:6f:ce:c1:36:92:f3:b0:
         51:02:8e:e9:05:b8:9e:4b:f0:89:14:16:aa:37:24:dc:8f:69:
         3f:8a:e8:66:a9:76:4c:cb:08:9a:1d:76:85:48:17:44:f0:3f:
         2e:12:41:8d:62:f9:47:05:96:fe:e1:f0:77:98:7b:97:22:7c:
         81:d9:92:cf:f2:71:b6:76:4b:c3:de:ae:1a:65:c4:96:47:f9:
         d9:fb:f9:b9:b6:46:fa:24:59:39:98:04:c7:c3:b3:24:2e:49:
         6a:bd:1a:5e:d1:de:08:a7:61:84:3e:a9:e4:67:f7:b5:7f:e3:
         05:78:d5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:49 2024 by rpki-client on console-fra.rpki-client.org