Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/323830343a346231343a3a2f33322d3336203d3e20323637323832.roa
File:                     323830343a346231343a3a2f33322d3336203d3e20323637323832.roa (raw, json)
Hash identifier:          7bUdqrvGDydVk56j6hDqt1HK+L22QyKEk9ExR5NrLRY=
Subject key identifier:   85:25:82:3D:45:97:53:C6:12:65:11:68:F1:40:BA:93:FE:02:78:66
Certificate issuer:       /CN=24C90100868CC7E5E4ADB4222503286F7BF449AA
Certificate serial:       3F23D27EC08287FCFC850093396BEF5701F8734A
Authority key identifier: 24:C9:01:00:86:8C:C7:E5:E4:AD:B4:22:25:03:28:6F:7B:F4:49:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/323830343a346231343a3a2f33322d3336203d3e20323637323832.roa
Signing time:             Mon 15 Apr 2024 12:54:13 +0000
ROA not before:           Mon 15 Apr 2024 12:49:13 +0000
ROA not after:            Mon 14 Apr 2025 12:54:13 +0000
asID:                     267282
IP address blocks:        2804:4b14::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.crl
                          rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:23:d2:7e:c0:82:87:fc:fc:85:00:93:39:6b:ef:57:01:f8:73:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24C90100868CC7E5E4ADB4222503286F7BF449AA
        Validity
            Not Before: Apr 15 12:49:13 2024 GMT
            Not After : Apr 14 12:54:13 2025 GMT
        Subject: CN=8525823D459753C612651168F140BA93FE027866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ad:a1:17:72:2e:36:5f:af:2e:9b:a0:58:71:
                    2e:f7:5a:aa:31:77:b4:14:87:90:69:62:d6:48:14:
                    9f:b0:cf:0e:2a:55:47:87:6a:11:a4:a4:36:8b:57:
                    7c:39:47:ac:f0:18:0e:e0:b6:ec:6f:fc:51:ae:85:
                    35:bb:29:a6:02:12:ef:d2:e6:37:df:c1:80:33:ba:
                    b9:b5:43:c0:da:cf:3c:b9:91:41:22:4a:7d:00:d3:
                    30:87:32:c0:e3:01:5f:3e:ba:e8:14:dd:fc:35:b4:
                    a4:6f:0f:f2:cc:15:0a:f7:cc:7c:ba:d7:2a:7d:01:
                    b6:e6:43:74:53:69:a0:0f:44:f8:db:af:5d:ef:b9:
                    2d:b1:e6:de:91:ee:0d:84:fc:bc:ed:77:2b:38:7c:
                    f2:37:26:67:17:68:84:35:e5:51:f4:d5:a7:70:a3:
                    0c:18:ee:15:38:c3:0c:49:a6:7d:74:e6:38:c3:64:
                    9d:8b:93:c4:01:ff:50:0f:5b:bc:f5:21:fd:f3:49:
                    a5:03:5a:31:6d:0a:0f:74:37:71:27:cd:0e:ba:2c:
                    17:32:f2:d0:bb:37:ea:db:e8:d4:92:d1:62:f5:8a:
                    06:db:8d:21:00:71:42:ed:c1:61:0d:eb:81:ef:c3:
                    9c:0d:82:90:4a:0d:6f:f9:46:17:e8:8c:bc:ff:00:
                    cd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:25:82:3D:45:97:53:C6:12:65:11:68:F1:40:BA:93:FE:02:78:66
            X509v3 Authority Key Identifier:
                keyid:24:C9:01:00:86:8C:C7:E5:E4:AD:B4:22:25:03:28:6F:7B:F4:49:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/323830343a346231343a3a2f33322d3336203d3e20323637323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b14::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:e6:9a:ca:f9:92:9b:f9:3f:a5:fb:93:f3:6e:d5:46:20:6b:
         91:72:3e:cb:08:28:65:c4:ef:4b:25:cf:4d:a6:33:e6:2e:f5:
         ee:f3:0e:01:4d:0a:a0:14:9a:52:29:8f:2b:e1:6d:f2:88:e3:
         0d:28:51:b4:21:dc:20:7d:33:bd:67:7e:53:f4:01:0c:dc:25:
         78:51:d1:fe:52:78:5e:ab:a5:1e:e7:83:15:d5:8c:0d:90:b5:
         d2:64:18:af:d2:da:5f:73:5b:12:9f:19:a2:13:3a:82:15:94:
         31:95:08:1a:03:51:d6:86:9d:75:e5:ba:4c:67:0c:98:f8:b0:
         f4:4c:a3:3f:08:a4:67:c9:57:1d:e5:cf:d3:b4:5f:96:bc:38:
         89:c7:39:78:f1:32:1c:3d:ee:e9:03:d7:40:4c:04:44:a6:14:
         7c:8f:e0:f0:cb:a4:d4:92:df:2e:30:ff:19:23:74:5a:74:9c:
         10:9f:99:65:ea:d3:38:8b:3b:c1:63:54:b5:85:cc:13:2a:bd:
         77:79:ff:a4:ac:76:00:b3:53:29:14:c8:5d:80:80:2f:1d:7d:
         af:5f:cc:c0:5d:7d:02:3f:f6:69:28:5e:dc:3e:e1:b7:a5:cc:
         36:3b:28:7a:25:e6:2f:66:06:6a:b5:1a:1a:ca:97:fd:c8:31:
         56:e5:fb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:09 2024 by rpki-client on console-fra.rpki-client.org