Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/323830313a38303a313932303a3a2f34382d3438203d3e20323634393731.roa
File:                     323830313a38303a313932303a3a2f34382d3438203d3e20323634393731.roa (raw, json)
Hash identifier:          WSE3cZt912miCIkaIMJ78s1ed94zSPT2utyFLSAB6NA=
Subject key identifier:   0D:47:B3:FD:15:F0:CB:CB:E0:DF:D8:DE:F9:3B:8A:30:96:19:D6:FA
Certificate issuer:       /CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92
Certificate serial:       1DEC3A451FA9C1469D8FF17356F5AD32EBA6C3B7
Authority key identifier: 1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/323830313a38303a313932303a3a2f34382d3438203d3e20323634393731.roa
Signing time:             Thu 18 Apr 2024 12:34:20 +0000
ROA not before:           Thu 18 Apr 2024 12:29:20 +0000
ROA not after:            Thu 17 Apr 2025 12:34:20 +0000
asID:                     264971
IP address blocks:        2801:80:1920::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl
                          rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ec:3a:45:1f:a9:c1:46:9d:8f:f1:73:56:f5:ad:32:eb:a6:c3:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92
        Validity
            Not Before: Apr 18 12:29:20 2024 GMT
            Not After : Apr 17 12:34:20 2025 GMT
        Subject: CN=0D47B3FD15F0CBCBE0DFD8DEF93B8A309619D6FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:08:0a:09:6f:5d:79:69:76:7a:51:e1:21:01:
                    30:58:c0:b4:32:21:5e:fb:06:35:92:8a:f1:44:08:
                    ac:b9:ec:f6:7d:e6:0b:c4:a1:fe:15:df:bf:cb:4c:
                    6b:69:32:d5:ac:58:d0:d4:f3:2b:47:8d:48:33:86:
                    47:ca:6d:34:05:e7:28:7a:07:14:67:b8:89:63:1b:
                    b6:12:b0:ca:39:2c:e0:62:2e:e7:7e:5b:dc:e9:6a:
                    44:b2:9a:c8:b2:17:99:0d:a2:5f:cf:36:ad:e5:9a:
                    0d:06:d9:b3:b2:71:17:43:a5:b3:e4:65:bb:d2:d1:
                    ff:52:bf:7b:1d:f2:b3:ea:e6:51:51:8b:56:73:f9:
                    5d:5d:af:28:7d:6e:d1:00:65:a9:a8:6a:c0:a6:3a:
                    28:a6:d9:d3:fa:22:d3:49:5c:44:2c:43:86:35:2d:
                    91:ef:44:18:cd:ea:25:2b:9e:61:44:b1:c4:64:73:
                    8e:45:9d:66:a3:e7:2d:d0:f9:5e:66:0c:5a:4b:65:
                    69:06:94:87:a1:f2:9b:3c:aa:9d:95:be:89:18:15:
                    69:f3:25:32:84:3c:77:e6:44:a9:3d:79:2d:c9:b7:
                    f8:20:52:8b:49:d8:79:ad:b2:fd:03:4b:21:dd:0b:
                    4c:fd:77:4e:5f:82:0c:f7:46:8a:af:6c:1a:f6:d8:
                    45:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:47:B3:FD:15:F0:CB:CB:E0:DF:D8:DE:F9:3B:8A:30:96:19:D6:FA
            X509v3 Authority Key Identifier:
                keyid:1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/323830313a38303a313932303a3a2f34382d3438203d3e20323634393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:1920::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:54:9b:be:a7:ae:3b:1a:ba:46:16:16:33:91:de:da:74:b7:
         e7:58:e8:d1:48:3c:ea:21:ef:8b:a4:d4:93:02:b4:6e:b5:57:
         dd:20:5d:79:83:f5:b8:30:40:de:16:c9:a5:89:58:7b:88:c7:
         07:d3:96:db:8c:b7:81:b1:4e:37:ba:53:68:dd:30:9c:63:95:
         66:65:57:1c:23:e6:53:99:92:16:51:14:82:58:f2:dd:cb:41:
         b6:25:fc:cb:00:fe:37:d6:d1:7a:ca:ad:17:bd:62:1b:40:dd:
         c5:40:66:79:b9:7d:9f:46:de:a8:53:67:3e:6a:67:ec:b6:f4:
         2e:a7:90:0e:77:2e:fa:aa:3c:b2:de:66:ca:d5:d8:8c:a3:5f:
         8a:e4:78:cb:08:2a:28:07:9e:55:9d:2a:5a:df:75:a2:4e:16:
         4b:21:a9:24:ea:c4:09:20:9e:33:39:fa:1c:72:76:a4:0d:04:
         d2:d0:d6:91:13:dd:d9:28:5b:22:99:1d:10:45:d3:66:da:24:
         32:f6:09:02:a5:ef:1c:9f:92:d2:10:dc:4f:c3:1b:07:af:25:
         81:f0:83:6e:c1:5c:3f:4f:de:ee:a6:35:4b:66:54:e0:4f:81:
         49:1d:81:26:31:e0:57:10:22:bf:f0:9d:b6:13:b1:84:2b:b9:
         e8:78:d6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:39 2024 by rpki-client on console-fra.rpki-client.org