Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/323830343a3466383a3a2f33322d3438203d3e203238323633.roa
File:                     323830343a3466383a3a2f33322d3438203d3e203238323633.roa (raw, json)
Hash identifier:          Pm5fXL06MAnf3caWCUB31axtmzeNiSpVSwI3GEKkjUI=
Subject key identifier:   05:41:1D:BC:1E:EA:50:B1:43:91:6C:C6:67:F7:0C:48:7D:5A:67:DF
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       1075944EB5D815927817A7815D40748DE8CE670A
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/323830343a3466383a3a2f33322d3438203d3e203238323633.roa
Signing time:             Mon 25 Nov 2024 17:18:05 +0000
ROA not before:           Mon 25 Nov 2024 17:13:05 +0000
ROA not after:            Mon 24 Nov 2025 17:18:05 +0000
asID:                     28263
IP address blocks:        2804:4f8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:75:94:4e:b5:d8:15:92:78:17:a7:81:5d:40:74:8d:e8:ce:67:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 17:13:05 2024 GMT
            Not After : Nov 24 17:18:05 2025 GMT
        Subject: CN=05411DBC1EEA50B143916CC667F70C487D5A67DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d3:5c:4c:43:c7:ba:d5:70:bc:ac:47:74:1d:
                    45:42:4e:e1:60:f5:65:87:24:16:7a:27:14:b0:79:
                    94:fb:15:26:9f:fc:36:1b:62:9c:c6:ac:04:fe:52:
                    f1:c4:cd:7d:c6:ca:b0:34:ec:69:08:17:cb:88:5a:
                    7e:af:da:1f:4e:dc:eb:fa:f0:c6:32:00:e9:bc:4e:
                    b2:50:45:f3:a4:bc:94:a2:6e:b0:1a:d4:bc:85:22:
                    30:f2:1b:a3:fc:b2:54:1c:10:e3:3b:2b:13:f5:06:
                    23:98:9c:63:2e:55:80:15:c9:bb:2d:68:f0:a4:df:
                    d0:81:27:bc:e6:97:33:99:75:8b:b2:43:c0:88:9a:
                    d6:b9:4b:37:62:9c:b7:f5:e5:81:f1:27:c9:41:f0:
                    bf:14:ed:6d:8c:8f:9c:31:68:86:65:35:a1:47:ca:
                    bb:d2:9d:9c:95:18:a8:c3:aa:55:3c:4b:23:b6:96:
                    42:47:37:73:fd:1e:85:d2:f0:ba:32:55:49:3b:67:
                    1d:c4:d2:c1:3c:d5:b2:ba:68:62:de:bf:7c:a5:bb:
                    08:bc:79:ed:18:f3:e1:16:8c:f7:83:dd:9b:db:c6:
                    db:6e:d3:9c:1f:58:79:bc:28:02:41:b3:e3:38:1f:
                    4d:ac:66:c3:cc:9e:fa:83:a7:d5:a9:a9:d5:82:6a:
                    8d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:41:1D:BC:1E:EA:50:B1:43:91:6C:C6:67:F7:0C:48:7D:5A:67:DF
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/323830343a3466383a3a2f33322d3438203d3e203238323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:0f:27:17:56:3c:c9:20:8f:bc:41:6a:6c:53:06:49:a8:aa:
         13:46:37:68:12:b6:dc:15:b3:8b:b2:b5:44:22:a7:26:2c:cb:
         92:50:08:d9:79:c8:73:c5:f3:db:be:c8:15:34:28:ec:54:9d:
         00:21:24:6b:3f:ba:fd:5b:7a:4b:80:c1:05:b0:e0:7f:9a:be:
         77:2c:b8:76:ec:9a:53:6f:14:9d:87:07:77:50:f2:94:f0:9c:
         fd:f2:cd:07:f3:b5:27:3b:c1:94:f2:30:f8:e0:a4:12:83:39:
         a4:03:3e:23:0f:91:cf:27:91:fc:0c:b0:a6:fa:04:cb:c7:03:
         3b:19:5f:53:59:4f:e9:e0:77:93:51:06:93:bb:c9:3d:48:62:
         c2:d3:6e:09:42:fe:f4:df:7c:c3:34:10:46:74:f4:3c:0c:23:
         a5:30:34:ad:36:46:ec:cc:74:0a:48:78:9b:14:28:4e:82:3d:
         6f:c2:19:93:5b:6a:23:86:5e:be:8a:a2:8f:f3:5f:cf:00:72:
         d9:2a:82:4a:0c:47:83:8d:de:1e:92:0d:99:40:fa:b7:18:11:
         be:78:cc:6a:5c:53:be:81:be:45:1b:2c:06:2f:53:76:a7:a3:
         9a:45:e6:28:25:6f:83:d1:ce:3e:8d:70:7f:ce:f6:85:73:51:
         61:af:4c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:40 2024 by rpki-client on console-fra.rpki-client.org