Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/323830343a323166383a3a2f33322d3438203d3e20323632323732.roa
File:                     323830343a323166383a3a2f33322d3438203d3e20323632323732.roa (raw, json)
Hash identifier:          M2+koc4Lq/pEzSAC0RgkGObduqd9Tjfw1JOF+vCUoho=
Subject key identifier:   92:52:FD:D7:BE:DD:0F:15:1B:DB:A8:A5:31:DD:61:15:BD:8D:65:45
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       13131CAE6A1E566530990B3C7C2C5B9546D814B9
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/323830343a323166383a3a2f33322d3438203d3e20323632323732.roa
Signing time:             Mon 25 Nov 2024 17:03:53 +0000
ROA not before:           Mon 25 Nov 2024 16:58:53 +0000
ROA not after:            Mon 24 Nov 2025 17:03:53 +0000
asID:                     262272
IP address blocks:        2804:21f8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:13:1c:ae:6a:1e:56:65:30:99:0b:3c:7c:2c:5b:95:46:d8:14:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:58:53 2024 GMT
            Not After : Nov 24 17:03:53 2025 GMT
        Subject: CN=9252FDD7BEDD0F151BDBA8A531DD6115BD8D6545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cb:cf:d3:90:22:fc:2f:d4:d6:c6:a5:df:73:
                    65:6b:bc:42:e7:3d:33:2c:3a:06:cd:35:1a:1e:df:
                    6e:de:76:20:b9:d9:8a:64:de:47:1a:81:15:d6:74:
                    c6:e5:25:e9:0e:60:3e:4a:9a:f9:29:a5:af:4d:1b:
                    f4:d8:85:b3:85:ef:21:e2:c0:73:57:a1:cb:9c:50:
                    b1:85:14:93:f6:f8:91:4d:07:07:d0:4f:2b:fb:6d:
                    e8:b0:5c:6f:56:30:0c:12:1e:b6:51:ab:8d:09:c5:
                    3c:0f:9e:5d:70:da:19:f1:c0:ed:35:c9:54:05:c8:
                    92:a9:44:38:6d:c6:1f:7b:50:ba:bf:24:55:5b:e8:
                    eb:4e:a4:04:7e:9b:a4:ea:2a:cd:c9:91:db:40:69:
                    69:cf:59:2d:22:57:94:96:52:72:3a:45:9c:3e:0b:
                    d3:fe:48:5a:f5:a4:47:e3:56:41:bb:84:f8:91:01:
                    19:d7:69:5c:88:b3:86:05:83:4b:40:7c:c0:29:ff:
                    e4:27:cf:ca:5c:71:57:cd:86:c9:f6:39:bb:6e:d4:
                    ee:be:02:86:25:37:e0:66:b0:da:54:b1:a2:51:f7:
                    69:96:84:71:bb:16:ba:2e:f9:4a:70:bb:36:c8:80:
                    dd:ac:0f:ff:42:86:48:9c:75:6c:79:98:8f:b0:25:
                    43:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:52:FD:D7:BE:DD:0F:15:1B:DB:A8:A5:31:DD:61:15:BD:8D:65:45
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/323830343a323166383a3a2f33322d3438203d3e20323632323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:fb:a0:5d:8d:c7:33:ff:85:1f:10:58:2a:b7:e3:52:65:88:
         c9:6f:e3:87:8f:5f:f4:19:e6:61:7e:77:43:cb:e0:3c:c1:4c:
         f2:79:8f:dc:c2:ed:0e:85:43:c5:46:a1:4c:2b:47:7c:88:de:
         9b:81:55:c5:55:08:07:30:ff:c4:6b:bc:a6:06:0d:1a:fb:72:
         0e:79:2d:01:0c:86:61:46:fc:e6:f5:85:73:ad:98:40:b0:2c:
         4f:9c:d2:7d:23:ff:8a:ad:9b:0f:33:16:18:1f:6e:24:e4:a1:
         7f:a9:ba:bd:99:0f:af:f8:0b:8e:6f:65:98:db:2e:16:c3:21:
         fa:d4:78:3c:53:9e:3e:ba:27:fa:f4:5d:e0:fc:d4:73:c6:d7:
         21:54:ae:18:1b:15:55:7b:df:9d:48:b0:22:66:bc:99:b0:e2:
         e0:01:08:54:60:bb:f5:c9:ac:46:05:4d:14:19:f5:02:76:0e:
         2f:c1:43:a2:24:db:9e:aa:c1:29:cd:b9:de:7a:8c:e8:dd:87:
         51:bc:72:0e:3a:df:85:65:47:a9:74:75:3e:e2:f6:86:6c:63:
         a9:71:7e:31:75:0a:6b:a4:09:05:23:38:2b:0f:78:73:48:47:
         2b:44:69:7b:b5:c0:56:d0:9d:66:7c:85:cd:87:6a:a7:19:f8:
         01:a5:e5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:40 2024 by rpki-client on console-fra.rpki-client.org