Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/323830343a313432343a3a2f33322d3438203d3e203532393430.roa
File:                     323830343a313432343a3a2f33322d3438203d3e203532393430.roa (raw, json)
Hash identifier:          FpPO+bcHUH1Fb/SRnwHuWn+Aa10Ff65OnOeVonoMJCw=
Subject key identifier:   D1:47:96:F1:07:D4:FE:8A:41:0D:E4:26:D3:8B:EE:6C:C5:1D:B8:54
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       131B6D3C6DEA74ABCCE1B18BAC17C7599A0BBAF1
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/323830343a313432343a3a2f33322d3438203d3e203532393430.roa
Signing time:             Mon 25 Nov 2024 17:04:02 +0000
ROA not before:           Mon 25 Nov 2024 16:59:02 +0000
ROA not after:            Mon 24 Nov 2025 17:04:02 +0000
asID:                     52940
IP address blocks:        2804:1424::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1b:6d:3c:6d:ea:74:ab:cc:e1:b1:8b:ac:17:c7:59:9a:0b:ba:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:02 2024 GMT
            Not After : Nov 24 17:04:02 2025 GMT
        Subject: CN=D14796F107D4FE8A410DE426D38BEE6CC51DB854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:b4:0b:bd:a6:25:7c:19:c4:3d:a4:5d:9a:
                    f3:74:24:f7:9c:35:be:7a:66:ca:d3:a2:66:d0:3c:
                    24:f2:65:14:e3:45:fa:d1:4d:40:eb:5d:f7:73:04:
                    76:78:28:a5:61:5f:3e:5a:1d:74:fe:29:5a:f6:e7:
                    1e:1b:4e:ae:e5:ff:c1:37:6f:69:7c:f6:57:5a:7d:
                    7c:80:dd:30:9e:72:36:cf:70:1a:fd:48:d3:2a:fb:
                    c5:80:e1:5c:a9:a8:7a:a4:b6:48:6f:3a:fe:ce:97:
                    a8:11:a8:1a:4c:bf:c0:da:02:30:a0:30:e8:4a:a1:
                    ea:a7:49:b2:7e:aa:cb:c3:31:70:10:f3:ea:d9:ae:
                    eb:07:c7:b3:18:72:38:aa:c3:eb:c3:0d:5e:81:78:
                    62:47:2e:4a:a3:60:88:21:6b:39:be:ea:4c:95:c1:
                    23:38:82:57:1e:00:54:74:9e:7f:50:65:23:6f:04:
                    2d:cf:e6:9c:15:c9:16:52:c1:c6:c5:b5:64:80:88:
                    18:57:d5:17:c7:e1:0b:b3:cc:d6:9d:ea:6b:94:51:
                    7d:15:a0:82:99:04:a7:cb:a6:6e:26:f6:b6:83:56:
                    13:05:d3:e6:80:c4:d0:9a:b1:5b:a3:a9:78:b6:47:
                    6e:5f:73:d8:81:40:e6:6f:0c:b2:d7:ed:cd:80:7f:
                    0e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:47:96:F1:07:D4:FE:8A:41:0D:E4:26:D3:8B:EE:6C:C5:1D:B8:54
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/323830343a313432343a3a2f33322d3438203d3e203532393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1424::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:8c:4d:79:8f:8b:f0:a2:81:a3:db:53:11:71:80:88:b5:64:
         03:90:15:e0:30:7c:fd:3b:fa:ab:f8:24:f2:ec:75:99:92:56:
         20:2d:0b:53:49:8c:2b:87:3d:61:7b:73:f8:cd:14:55:cf:7d:
         60:bd:99:f9:7d:2d:c8:81:c1:30:12:f7:19:ec:fd:d5:fc:2c:
         b6:7b:2a:9d:f3:83:4e:9c:9f:b6:3b:56:e0:78:85:df:91:e5:
         54:e2:9b:ff:06:a7:7e:ea:94:16:a5:da:59:ef:18:2f:d8:94:
         ad:0a:41:1f:a3:fa:42:06:1c:22:65:81:24:34:90:ff:0a:60:
         00:95:5b:de:13:10:05:cb:7f:ca:15:1a:22:83:70:f6:ba:30:
         1c:fa:54:05:23:9c:fe:3a:af:8a:60:62:aa:54:4f:4b:82:ef:
         85:cf:e8:04:35:4d:16:eb:07:87:21:95:e7:f8:16:e4:11:f1:
         e1:68:1f:7d:f6:c5:a8:ab:4f:c0:fc:f9:53:e0:62:41:f6:6c:
         fd:71:8f:d8:ca:44:ee:a7:5f:5d:a0:68:97:88:46:d1:61:4c:
         ef:e7:8c:ab:62:f9:b7:17:5a:39:ae:b3:2b:6c:3c:64:a0:35:
         01:cd:af:da:55:5a:75:25:d2:f4:f5:36:4b:4c:f0:c9:8b:94:
         68:a8:46:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:35 2024 by rpki-client on console-fra.rpki-client.org