Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a353031303a3a2f34382d3438203d3e20323637303234.roa
File:                     323830343a343666633a353031303a3a2f34382d3438203d3e20323637303234.roa (raw, json)
Hash identifier:          jCKKydIXqCjiox9RMokVzkVowctnUZ3TgF9TV60ZPzc=
Subject key identifier:   66:7D:D2:4C:B7:68:26:99:68:1B:EA:51:1D:91:DD:A7:A1:6F:AE:7A
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       41ED81B6C982EF902A7C447954E3B84D734CF9
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a353031303a3a2f34382d3438203d3e20323637303234.roa
Signing time:             Thu 04 Apr 2024 07:18:04 +0000
ROA not before:           Thu 04 Apr 2024 07:13:04 +0000
ROA not after:            Thu 03 Apr 2025 07:18:04 +0000
asID:                     267024
IP address blocks:        2804:46fc:5010::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
                          rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ed:81:b6:c9:82:ef:90:2a:7c:44:79:54:e3:b8:4d:73:4c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: Apr  4 07:13:04 2024 GMT
            Not After : Apr  3 07:18:04 2025 GMT
        Subject: CN=667DD24CB7682699681BEA511D91DDA7A16FAE7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4a:46:c0:44:95:1f:58:a5:5d:8b:c4:71:b4:
                    55:e0:ac:9c:0f:52:48:e8:c9:48:6e:32:6f:34:bc:
                    a4:85:6f:7a:31:f8:6f:23:e7:d7:68:95:bd:1d:80:
                    7d:d3:b2:c3:1e:01:be:39:ca:df:94:b7:03:be:d0:
                    da:32:e1:c8:37:5f:48:56:ca:96:00:ac:40:39:25:
                    47:c5:0b:80:8e:2d:02:6e:7d:e0:5b:00:e6:68:f8:
                    64:80:9c:a1:d0:f6:6f:ee:d2:0f:99:b0:91:f3:41:
                    3e:85:d6:99:9a:66:e2:fa:a4:a8:6a:7c:ae:84:49:
                    1b:34:ea:1d:29:a4:d5:29:39:8b:74:fe:f5:21:56:
                    ce:ba:fc:30:29:62:95:00:92:24:82:ab:4a:9b:93:
                    81:bb:54:d4:dc:27:ed:c4:9c:e1:85:39:2d:49:c9:
                    6f:73:72:27:d5:10:e3:5b:00:2b:8b:2c:51:31:1b:
                    c9:e0:16:a9:10:ff:42:0c:46:d3:c2:e5:31:b9:bb:
                    8c:16:47:7f:a1:7c:88:b0:bc:6c:b4:e2:2c:de:89:
                    9b:91:4e:72:7b:35:8c:75:3b:6e:35:61:42:55:8a:
                    0e:4e:4c:90:84:a8:84:f5:8c:65:40:64:ff:87:a4:
                    11:ab:ef:3d:13:de:21:4b:6b:a3:56:d9:63:9b:b3:
                    16:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7D:D2:4C:B7:68:26:99:68:1B:EA:51:1D:91:DD:A7:A1:6F:AE:7A
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a353031303a3a2f34382d3438203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46fc:5010::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:fc:26:af:72:61:a1:dc:6c:fa:50:5f:9b:f5:e3:d4:a3:ef:
         7c:94:14:4e:0a:6b:6f:26:f2:49:21:88:c0:c7:81:5c:d8:ad:
         0d:77:d8:ed:29:d0:df:59:50:e0:b3:f9:67:60:d8:89:c2:b3:
         9d:05:92:46:31:e0:75:18:0a:86:44:a2:33:b1:df:39:58:33:
         1b:d2:a7:d8:82:4f:7c:1b:05:7a:ad:27:47:5b:32:21:f4:6d:
         33:91:f8:7e:b4:33:f8:ca:bf:12:0a:32:88:26:47:93:03:1c:
         3f:40:91:63:22:f6:49:95:58:0d:70:68:08:4d:fb:4b:cb:62:
         5e:6f:0e:2f:fc:02:f7:9f:ef:1c:11:e1:8b:0f:b9:72:f0:54:
         99:29:c5:dc:60:4b:41:1e:29:dd:0b:c3:57:02:7d:d7:18:e0:
         02:87:88:84:c3:1f:2b:ce:16:34:3a:78:03:42:08:b4:18:bc:
         26:f4:46:53:c4:02:02:94:5d:66:2c:02:55:ac:ae:a3:aa:27:
         77:56:b3:f2:c1:36:24:53:80:98:96:41:55:98:a7:92:76:2e:
         77:1d:43:b9:45:41:41:dd:28:d3:7b:0e:e5:d7:45:75:5c:92:
         34:34:b5:68:57:b8:27:1b:ca:4a:57:ce:5c:c6:ea:ea:5c:06:
         97:2a:d4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:02 2024 by rpki-client on console-ams.rpki-client.org