Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/323830343a3239303a3a2f33322d3438203d3e203238363639.roa
File:                     323830343a3239303a3a2f33322d3438203d3e203238363639.roa (raw, json)
Hash identifier:          SmIWuvAYRCcLTj18TcAxXH9Mq81u0d7CqzBx2mcOwlI=
Subject key identifier:   BA:DC:C1:0D:C5:BE:4C:96:0B:13:1C:C8:E3:5E:F3:88:7A:6B:97:24
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       33A8F64BB593DBC85FABE32FD86FA6935495577D
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/323830343a3239303a3a2f33322d3438203d3e203238363639.roa
Signing time:             Mon 25 Nov 2024 17:04:26 +0000
ROA not before:           Mon 25 Nov 2024 16:59:26 +0000
ROA not after:            Mon 24 Nov 2025 17:04:26 +0000
asID:                     28669
IP address blocks:        2804:290::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a8:f6:4b:b5:93:db:c8:5f:ab:e3:2f:d8:6f:a6:93:54:95:57:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:26 2024 GMT
            Not After : Nov 24 17:04:26 2025 GMT
        Subject: CN=BADCC10DC5BE4C960B131CC8E35EF3887A6B9724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:bc:70:de:53:46:9e:81:45:d3:94:d0:3f:
                    b0:a1:fc:95:9d:f9:e9:71:c3:5b:0c:0b:14:af:d6:
                    2c:e1:08:aa:7d:b4:9a:c4:f6:6a:c4:a8:9b:ef:48:
                    d9:4f:87:6c:2e:1c:f4:d1:bc:16:da:d5:2e:a0:98:
                    7f:b2:a6:96:ca:05:f9:8d:44:05:64:f6:6e:5d:6a:
                    b3:8c:67:32:fd:99:01:12:28:18:62:28:9a:67:3e:
                    40:d4:61:c7:61:13:ce:95:40:42:09:06:99:67:3d:
                    c4:d4:17:b9:83:4a:ce:a7:18:3b:0e:2c:f8:61:2b:
                    c4:6a:9c:f9:b8:ea:79:db:9d:7f:00:9e:20:99:1f:
                    9f:55:85:10:ce:d8:e1:7f:29:c8:23:ee:2e:58:1f:
                    d4:1d:23:52:aa:ae:bb:f0:ef:e4:cc:34:96:d5:62:
                    79:c8:e0:24:e4:30:2c:2e:66:37:fe:90:cc:78:91:
                    c6:67:ef:15:c0:ba:3e:d3:df:94:8b:a8:50:e0:69:
                    48:c1:ea:23:7b:3b:40:3d:75:1a:9f:53:af:e2:3c:
                    2f:a3:bf:20:ce:ba:f4:3f:6a:86:fd:ab:e9:39:78:
                    7e:d0:d9:e9:fb:08:0b:80:a6:eb:75:24:c3:53:4b:
                    eb:a5:7b:34:6e:3e:7d:f4:d6:4e:c5:c4:67:2b:05:
                    52:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DC:C1:0D:C5:BE:4C:96:0B:13:1C:C8:E3:5E:F3:88:7A:6B:97:24
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/323830343a3239303a3a2f33322d3438203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:290::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:b1:58:a2:43:6d:e7:75:e9:b6:5a:cc:1a:d9:e8:76:00:95:
         5a:5f:eb:19:d4:f1:97:54:5e:ab:80:1b:05:70:be:ef:49:84:
         35:06:fc:3f:9c:ae:66:d1:ac:3d:b2:eb:aa:6e:70:14:14:2e:
         08:d2:ef:30:c6:1c:36:9b:77:ff:9d:7b:c8:58:65:5f:39:d8:
         10:e7:9a:48:40:14:33:61:f8:54:24:36:80:9d:03:13:29:03:
         81:6c:4e:eb:5f:51:07:7f:e4:c5:fc:0c:09:0b:e4:e6:b4:df:
         32:39:c4:d2:9f:87:78:c9:5d:44:a2:04:d6:0f:7d:30:53:16:
         f2:09:1e:85:8b:89:be:11:38:82:89:cc:4d:ce:65:1f:cc:0c:
         53:29:df:9e:84:58:2a:40:03:0a:b1:b2:d4:7a:25:c9:fb:34:
         a6:cc:87:da:17:62:78:11:03:1a:40:65:ea:b1:79:61:26:b2:
         08:a6:77:c5:15:9f:93:4e:e0:1f:ea:96:13:ac:a8:fd:70:b6:
         8e:38:be:58:7d:ae:90:7f:0b:66:57:98:4e:1c:b8:83:bb:28:
         d4:f7:58:72:d2:4f:b6:2c:8a:6c:2f:e9:12:53:02:07:46:66:
         6f:b8:fd:c1:20:26:8a:95:42:c0:7e:67:8b:b1:e8:db:c3:14:
         5f:83:91:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:40 2024 by rpki-client on console-fra.rpki-client.org