Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/323830343a313462633a3131303a3a2f34352d3435203d3e20323633333437.roa
File:                     323830343a313462633a3131303a3a2f34352d3435203d3e20323633333437.roa (raw, json)
Hash identifier:          AAvUcHsqU89UTNQTIXfA4A6l7bcv+qhobvyasGHB+q8=
Subject key identifier:   2F:A7:D0:45:1A:37:1B:B4:AB:78:F5:65:2C:E6:BB:88:C6:6C:8E:2B
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       2BB0B2DDEE5F2AAFA22A41FE11EF3A985C96880F
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/323830343a313462633a3131303a3a2f34352d3435203d3e20323633333437.roa
Signing time:             Sat 09 Nov 2024 13:43:01 +0000
ROA not before:           Sat 09 Nov 2024 13:38:01 +0000
ROA not after:            Sat 08 Nov 2025 13:43:01 +0000
asID:                     263347
IP address blocks:        2804:14bc:110::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b0:b2:dd:ee:5f:2a:af:a2:2a:41:fe:11:ef:3a:98:5c:96:88:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Nov  9 13:38:01 2024 GMT
            Not After : Nov  8 13:43:01 2025 GMT
        Subject: CN=2FA7D0451A371BB4AB78F5652CE6BB88C66C8E2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:83:1f:9d:46:b7:5f:fb:46:9a:9f:96:3c:98:
                    f4:77:79:55:c3:5d:a6:a1:bb:0a:1e:48:83:fc:77:
                    8d:0a:92:91:02:8a:1c:3f:71:34:9a:e6:f8:f7:cb:
                    2d:5c:e1:6c:bf:c7:5e:2b:f1:ac:97:ed:9b:23:7b:
                    86:e7:9b:0e:75:10:24:7f:cc:60:3f:3d:0d:58:40:
                    85:84:13:d6:17:4d:62:84:5b:b2:9c:28:81:48:1b:
                    b2:e3:1a:78:76:c8:12:f7:96:a8:df:53:e7:a5:a3:
                    a9:65:0d:71:e0:ea:a7:46:c0:9f:e7:93:45:cf:1e:
                    a4:48:cf:e0:16:d5:0a:61:2d:1e:e0:ef:f0:cc:c2:
                    e6:47:96:83:78:44:46:0c:0e:6a:11:c8:1e:43:2f:
                    d0:5d:0c:47:82:d5:6e:64:85:54:39:63:ec:16:5e:
                    b1:60:91:03:a3:1d:18:30:d3:3e:2a:68:96:bc:51:
                    4c:cc:88:81:43:37:74:42:28:b4:d4:2d:d1:2e:cc:
                    ea:d8:bb:0e:62:0a:30:ec:ed:5b:57:ad:50:1d:c3:
                    7c:99:13:a4:99:49:83:03:1d:da:00:56:30:f2:61:
                    4e:9b:e5:5e:e8:cb:10:57:99:9f:ea:3e:57:25:d9:
                    6a:f9:fa:09:8d:5c:08:4d:be:3f:73:41:8e:e7:50:
                    4a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A7:D0:45:1A:37:1B:B4:AB:78:F5:65:2C:E6:BB:88:C6:6C:8E:2B
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/323830343a313462633a3131303a3a2f34352d3435203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14bc:110::/45

    Signature Algorithm: sha256WithRSAEncryption
         47:49:d1:24:fb:7d:c7:a3:21:12:af:ce:d6:b3:a2:b1:c1:5e:
         58:71:6c:d1:ae:b0:d8:9e:10:c9:71:c7:d2:7b:e8:b8:7a:ff:
         8c:76:a3:0f:65:a5:b4:08:b2:59:a2:78:45:11:6a:59:31:9b:
         4f:34:07:d5:08:50:39:04:aa:c8:69:0a:3c:d4:9b:be:88:82:
         4c:77:62:45:95:76:8f:cf:c8:ce:f0:1a:3a:85:30:0a:61:84:
         03:a6:59:dc:5a:f0:c4:43:0e:71:ef:27:20:24:ec:26:82:67:
         97:27:19:d3:2a:a3:57:c7:52:fe:e4:a1:47:fa:1e:aa:e2:c1:
         20:4f:5b:df:67:d2:f5:d9:5f:e0:88:64:0b:99:c0:d7:ed:32:
         8c:ca:d1:b3:95:58:82:6c:e6:76:2e:28:5b:e6:95:b7:eb:87:
         41:bc:26:d3:8a:29:34:2a:10:28:9f:a1:b5:a8:3e:d9:da:6c:
         8e:5e:25:a1:f7:a6:51:66:c5:a8:00:13:50:29:b3:63:39:60:
         2f:d6:d7:15:35:70:05:99:e5:68:4b:d3:0d:78:11:9e:0c:59:
         73:83:37:f2:cc:bc:b2:5a:5f:9a:55:9c:db:05:4b:64:1d:1a:
         3e:dc:63:21:d0:31:67:5d:01:df:f3:b5:81:be:0f:4b:36:2a:
         e0:ac:d0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:26 2024 by rpki-client on console-fra.rpki-client.org