Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a363030363a3a2f34382d3438203d3e20323637303234.roa
File:                     323830343a343666633a363030363a3a2f34382d3438203d3e20323637303234.roa (raw, json)
Hash identifier:          NEuA+0ru6+el+k3h2VZkGTfzSMFdfaLH/5ouICDEXE0=
Subject key identifier:   7B:89:41:D9:82:8A:BC:89:BC:51:61:B8:DA:90:0C:43:E5:52:3B:D8
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       41F5F4205D1899BDDA6CB63E5F49AF1F8ACEC0C2
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a363030363a3a2f34382d3438203d3e20323637303234.roa
Signing time:             Thu 04 Apr 2024 07:18:07 +0000
ROA not before:           Thu 04 Apr 2024 07:13:07 +0000
ROA not after:            Thu 03 Apr 2025 07:18:07 +0000
asID:                     267024
IP address blocks:        2804:46fc:6006::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
                          rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f5:f4:20:5d:18:99:bd:da:6c:b6:3e:5f:49:af:1f:8a:ce:c0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: Apr  4 07:13:07 2024 GMT
            Not After : Apr  3 07:18:07 2025 GMT
        Subject: CN=7B8941D9828ABC89BC5161B8DA900C43E5523BD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:63:94:bc:ac:00:7f:cd:ea:5f:68:69:de:71:
                    63:76:bf:88:71:17:b0:4c:a0:50:3d:99:d3:0b:d9:
                    4a:f9:99:f5:19:02:4a:8e:b1:ce:f1:ac:91:d8:1a:
                    5c:d4:66:63:b1:8d:74:d8:52:b8:ff:c5:09:98:a4:
                    5f:34:fa:69:2e:00:fd:d6:bf:af:03:ec:4a:b2:bf:
                    96:96:7d:9e:37:9e:d3:09:84:1f:16:a9:2c:19:94:
                    f1:cd:aa:37:48:61:08:db:66:01:4b:e7:00:24:f5:
                    28:88:f1:78:47:74:90:1f:d0:e1:b4:4d:0d:2f:5a:
                    d4:f9:28:41:78:a5:b5:df:e4:83:3e:04:2f:fb:be:
                    e1:b3:f6:c3:8d:80:17:9a:b1:90:60:f0:8a:e7:66:
                    38:e0:ca:cb:17:87:e0:1b:a1:81:24:c0:9b:c9:db:
                    a9:07:ca:cf:5b:15:aa:c3:49:44:b2:2b:7f:cf:b6:
                    cc:15:b6:46:65:09:d5:14:ab:bb:8a:43:5f:3a:44:
                    ba:f2:aa:9f:14:72:3e:c2:a6:df:af:e0:03:74:6f:
                    82:ae:31:44:5e:4b:a6:ad:1a:fe:f5:6d:61:99:57:
                    f9:f1:67:c2:df:97:88:be:a8:b7:be:26:9f:6d:41:
                    f2:12:a1:92:d8:5d:df:31:09:69:1e:96:2e:52:88:
                    02:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:89:41:D9:82:8A:BC:89:BC:51:61:B8:DA:90:0C:43:E5:52:3B:D8
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a363030363a3a2f34382d3438203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46fc:6006::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:3f:c8:a9:c1:62:9c:5a:ef:b5:86:1f:c0:cb:16:d5:78:a2:
         42:9e:8a:0c:45:e0:4f:2f:ec:c7:0d:27:1c:b0:f2:64:aa:b3:
         6f:25:6b:28:e8:2d:64:00:f7:a1:18:f6:91:9a:d8:67:0f:fb:
         eb:0d:00:a8:e5:7d:25:82:7d:2a:8d:c3:16:d1:03:f9:24:36:
         47:19:aa:75:cf:8f:e2:77:d8:1b:3d:31:e3:34:49:f1:cc:21:
         15:34:9e:db:0a:8e:bd:17:06:21:09:85:6c:e1:9c:92:c6:b3:
         c1:f6:64:c1:81:00:b6:b5:61:fd:f4:76:7c:98:43:a5:eb:82:
         99:1f:ac:67:1c:cd:ea:5b:09:30:a0:f7:2e:73:21:b2:30:66:
         2a:ec:07:af:54:0e:fe:c3:d3:c6:fd:09:46:97:3a:b2:ca:8b:
         89:43:37:5a:a4:8c:81:f5:7b:d6:4b:bf:29:43:4e:93:8c:f5:
         44:3b:d4:ed:6b:90:f9:d2:22:1f:d8:fe:cd:1a:41:25:8e:9a:
         c9:63:5a:c7:35:a1:d4:28:ad:35:f2:44:34:23:ab:74:95:29:
         f4:06:81:73:d6:44:86:05:20:3f:c0:ec:77:85:75:2b:bf:fd:
         63:45:44:cb:f9:3c:60:0f:01:12:d1:da:f2:42:71:68:bb:50:
         f1:40:d7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:39 2024 by rpki-client on console-fra.rpki-client.org