Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/323830343a316133303a3a2f33322d3438203d3e203631383434.roa
File:                     323830343a316133303a3a2f33322d3438203d3e203631383434.roa (raw, json)
Hash identifier:          nvhdRNSUgFMRKKuZsguKk7amTZSXLxGtzxYF7SqJNtM=
Subject key identifier:   69:0D:32:B2:08:3A:39:7A:81:84:D4:B0:F5:2D:93:5A:80:82:47:3D
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       55A547FC24C40E87856018FDD8A8969925B25CD0
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/323830343a316133303a3a2f33322d3438203d3e203631383434.roa
Signing time:             Mon 25 Nov 2024 17:04:12 +0000
ROA not before:           Mon 25 Nov 2024 16:59:12 +0000
ROA not after:            Mon 24 Nov 2025 17:04:12 +0000
asID:                     61844
IP address blocks:        2804:1a30::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a5:47:fc:24:c4:0e:87:85:60:18:fd:d8:a8:96:99:25:b2:5c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:12 2024 GMT
            Not After : Nov 24 17:04:12 2025 GMT
        Subject: CN=690D32B2083A397A8184D4B0F52D935A8082473D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5b:c1:97:8c:5c:ac:d2:8b:8c:2e:b6:3e:9a:
                    19:3b:a3:e1:99:57:72:e5:d7:cc:c5:64:ac:3f:29:
                    65:b2:0d:c3:c9:3b:54:5c:f0:95:20:54:dd:09:a5:
                    8c:74:cd:a8:d1:12:95:93:94:e8:f9:3d:0b:4c:d6:
                    8c:44:4a:49:ae:6d:1d:db:e2:72:d8:63:d5:3f:42:
                    2e:24:40:4f:2d:f3:48:3f:e6:da:a5:53:98:bf:40:
                    99:8c:5a:3d:eb:4e:f9:4b:89:d0:cf:2e:72:c2:ac:
                    13:53:a2:f6:dd:6f:f3:26:0a:e0:36:67:ff:18:f3:
                    a8:81:11:00:dc:6f:b8:41:54:54:bb:c1:60:00:69:
                    5f:47:73:95:8b:e4:8b:11:10:7c:67:c1:17:d6:d0:
                    b1:c0:a4:ce:70:fb:4c:0e:a7:08:05:7d:7e:ca:aa:
                    18:47:5e:d2:8c:e8:01:35:7f:47:87:d4:9f:b7:8a:
                    c4:ad:72:37:d6:b9:a7:98:77:25:0c:8b:b4:ca:5e:
                    5a:cf:f0:ff:0b:db:7f:84:eb:a4:64:85:9d:0b:a1:
                    3d:0b:04:83:7b:0e:0e:70:5e:a2:da:0e:82:4d:f2:
                    aa:37:6d:c3:cd:4e:9e:ed:92:ef:cf:5d:36:1e:bb:
                    9d:5e:58:51:69:01:dd:69:80:15:54:3d:99:b2:73:
                    eb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0D:32:B2:08:3A:39:7A:81:84:D4:B0:F5:2D:93:5A:80:82:47:3D
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/323830343a316133303a3a2f33322d3438203d3e203631383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a30::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:95:03:20:71:c2:47:09:74:02:30:51:fb:1c:44:a2:4b:4f:
         ea:e4:03:11:38:8d:04:bf:18:3b:67:a9:a7:5f:b5:aa:ab:9b:
         33:ba:e5:e0:27:f3:3e:44:d4:6a:30:8e:42:e1:6c:43:2b:fb:
         f8:e2:60:86:52:90:08:9c:01:28:a7:7f:e0:3e:5d:9f:e1:a8:
         16:96:e5:f5:fa:3d:35:1f:44:30:5b:05:bb:db:5e:14:46:32:
         32:a0:ac:7c:79:e7:b2:0f:5d:a1:8e:cb:17:36:1c:a5:83:c1:
         58:5e:6d:ae:cc:f2:17:01:a7:2c:0e:f6:89:3d:c3:d8:ac:e6:
         1a:28:82:b1:db:20:d1:63:f9:72:26:6d:47:3e:83:12:57:9b:
         1e:50:8c:80:48:f0:63:48:dc:98:84:22:08:92:89:7a:15:1f:
         ec:16:ed:03:a4:b0:c5:fe:4d:ed:d8:d5:03:a4:a9:56:6d:a4:
         3c:2a:5b:80:45:05:69:b7:e4:cd:7e:b9:63:22:2b:3b:40:cc:
         43:6b:24:9e:2c:37:2d:21:b7:ae:90:15:90:6e:12:7a:62:5a:
         8c:53:51:dd:e7:e5:f8:57:d9:83:d4:b8:58:55:a1:ab:1a:f4:
         a0:e6:4f:c6:1c:c2:bc:50:32:64:37:e4:77:41:e6:44:7d:fc:
         9d:11:00:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:34 2024 by rpki-client on console-ams.rpki-client.org