Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/323830343a376236303a3a2f33322d3438203d3e20323731343238.roa
File:                     323830343a376236303a3a2f33322d3438203d3e20323731343238.roa (raw, json)
Hash identifier:          Nr/x8y8sW6Tm+gw7O5l2QZsco+zG7pYc4lEsx+P0qdQ=
Subject key identifier:   40:D7:CA:9A:9F:CF:45:FD:8A:75:97:0B:B7:3C:83:C2:0B:26:8F:F2
Certificate issuer:       /CN=56408CF7DF116EE4E113500E26DC94A8E8F490CF
Certificate serial:       354C1147C50EC3D9CC1FE6D517BEEBA3D03C3A8E
Authority key identifier: 56:40:8C:F7:DF:11:6E:E4:E1:13:50:0E:26:DC:94:A8:E8:F4:90:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56408CF7DF116EE4E113500E26DC94A8E8F490CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/323830343a376236303a3a2f33322d3438203d3e20323731343238.roa
Signing time:             Wed 02 Oct 2024 20:47:16 +0000
ROA not before:           Wed 02 Oct 2024 20:42:16 +0000
ROA not after:            Wed 01 Oct 2025 20:47:16 +0000
asID:                     271428
IP address blocks:        2804:7b60::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/56408CF7DF116EE4E113500E26DC94A8E8F490CF.crl
                          rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/56408CF7DF116EE4E113500E26DC94A8E8F490CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56408CF7DF116EE4E113500E26DC94A8E8F490CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:4c:11:47:c5:0e:c3:d9:cc:1f:e6:d5:17:be:eb:a3:d0:3c:3a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56408CF7DF116EE4E113500E26DC94A8E8F490CF
        Validity
            Not Before: Oct  2 20:42:16 2024 GMT
            Not After : Oct  1 20:47:16 2025 GMT
        Subject: CN=40D7CA9A9FCF45FD8A75970BB73C83C20B268FF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8f:f4:ad:b2:4a:a8:e1:c9:2b:a2:d7:6b:15:
                    e9:ce:33:e5:46:d3:e2:73:80:f4:f0:92:b8:f7:bd:
                    f5:22:a2:ef:04:c3:5a:f7:5b:55:06:d3:28:1a:26:
                    b2:ee:ac:1f:2d:4b:53:bf:7d:52:17:cf:91:bf:55:
                    82:b5:33:18:e2:ca:40:e9:08:2b:95:b3:b3:ed:c3:
                    0a:ec:0b:66:8d:b6:07:22:df:4f:e7:3b:12:e5:62:
                    91:dc:b5:6b:ba:d1:e8:d3:f7:45:93:3d:21:18:d0:
                    cc:16:b7:19:19:6d:91:85:f7:41:f4:a0:d7:b3:82:
                    0b:47:c8:54:97:ec:30:56:e0:8d:c8:ce:ca:e6:ee:
                    d7:ad:89:6c:42:3c:2e:89:b0:c8:db:f4:b4:5a:20:
                    41:fa:d5:22:44:7f:0c:67:20:55:21:49:dd:d0:c9:
                    d4:ff:7a:79:20:d3:31:48:3a:c2:3c:45:f1:dd:60:
                    1a:33:10:32:df:c0:7d:cf:c3:51:bf:97:11:25:6c:
                    d7:94:a4:41:5f:c0:98:ea:c1:50:f1:c9:9f:6d:9a:
                    ee:25:7b:8b:bd:18:06:89:22:80:67:b8:7b:ca:3e:
                    54:83:76:b9:6a:01:03:fa:a8:52:b3:3f:ca:a5:8f:
                    75:05:8b:88:80:ea:f6:50:43:e5:34:d5:3b:c1:1a:
                    f8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D7:CA:9A:9F:CF:45:FD:8A:75:97:0B:B7:3C:83:C2:0B:26:8F:F2
            X509v3 Authority Key Identifier:
                keyid:56:40:8C:F7:DF:11:6E:E4:E1:13:50:0E:26:DC:94:A8:E8:F4:90:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/56408CF7DF116EE4E113500E26DC94A8E8F490CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56408CF7DF116EE4E113500E26DC94A8E8F490CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/323830343a376236303a3a2f33322d3438203d3e20323731343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:88:0a:01:af:3a:87:6f:9d:c0:03:11:81:e4:88:be:1e:bf:
         43:32:40:f1:c4:53:a7:78:46:cf:ac:11:fa:f5:e7:09:34:2c:
         4a:98:d2:53:56:c5:d3:2e:b2:86:be:34:33:63:ac:b7:3f:c8:
         00:74:31:ad:e3:6c:ff:9c:18:cd:ae:1d:c4:bd:86:a7:a0:04:
         20:1b:68:6c:fd:a4:7e:40:91:fe:03:ac:e0:2f:d2:43:a5:02:
         a0:76:b1:96:19:d3:9a:df:32:7e:cb:64:cb:95:b6:8f:f5:d2:
         ae:24:72:2f:29:49:b7:73:ed:6a:f8:d0:e1:2f:5d:06:ce:64:
         33:5c:3b:fa:d0:34:e7:e4:59:9f:bf:b9:93:84:69:5b:8d:d1:
         73:27:2e:09:34:13:12:6c:45:31:88:8f:9f:57:01:5e:bd:5b:
         85:41:ac:60:8c:bd:4c:5e:f8:7d:a7:fe:17:46:c7:b9:3f:20:
         c3:a5:b2:da:a7:eb:99:d2:a3:96:02:5b:fa:41:e8:4b:c6:66:
         7e:bf:25:cb:0b:8f:48:f5:b8:24:e0:4c:56:2a:7c:24:90:73:
         f3:99:44:81:14:fb:ea:43:dc:e9:e4:6a:f5:bb:70:db:ba:a4:
         08:36:96:4e:4a:23:bf:54:83:8e:cb:47:8d:f3:3f:9f:29:0d:
         16:c5:ba:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:49 2024 by rpki-client on console-fra.rpki-client.org