Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/323830343a3731633a3a2f33322d3438203d3e203533303830.roa
File:                     323830343a3731633a3a2f33322d3438203d3e203533303830.roa (raw, json)
Hash identifier:          3Gcl8PDVawr5cXH8kPrTqHqmVXqi3R5k4A0S4A5wMNY=
Subject key identifier:   01:77:63:7A:44:D1:7D:1F:03:DD:3F:89:DA:DA:77:63:C2:9A:7E:7E
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       78A0729593259E7C1E0F7FBCEABB441919A8B6C9
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/323830343a3731633a3a2f33322d3438203d3e203533303830.roa
Signing time:             Mon 25 Nov 2024 17:04:15 +0000
ROA not before:           Mon 25 Nov 2024 16:59:15 +0000
ROA not after:            Mon 24 Nov 2025 17:04:15 +0000
asID:                     53080
IP address blocks:        2804:71c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a0:72:95:93:25:9e:7c:1e:0f:7f:bc:ea:bb:44:19:19:a8:b6:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:15 2024 GMT
            Not After : Nov 24 17:04:15 2025 GMT
        Subject: CN=0177637A44D17D1F03DD3F89DADA7763C29A7E7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d3:02:5e:30:6f:56:58:b3:40:c1:65:0b:b7:
                    cd:4b:bf:f5:af:9a:ad:9b:5b:2f:06:c8:67:40:2c:
                    18:b3:fa:46:90:92:13:bf:69:0f:d0:ab:d7:2c:ee:
                    ca:bf:03:4b:61:9e:a8:03:1a:7a:e1:dd:b2:61:d0:
                    e0:53:73:18:dd:1a:b5:91:01:32:e2:a2:18:ff:79:
                    54:2b:6e:7a:7e:f7:d3:70:5d:0d:e9:c5:ce:26:b4:
                    09:f0:8f:ab:d1:7d:4a:7f:72:0f:44:88:76:a4:53:
                    5d:4f:e2:b2:90:68:c0:0c:bc:b1:e7:b9:f2:c4:aa:
                    58:1d:2e:2a:1b:43:9b:cb:0e:bb:36:f8:f9:1d:99:
                    87:e1:63:2d:ba:0a:7e:18:05:2a:13:80:ed:f6:24:
                    63:29:a6:62:30:2e:36:80:c9:7f:b6:49:02:8b:8f:
                    46:e3:d5:5d:86:f8:f6:fb:0e:f1:1e:ca:cc:29:19:
                    c7:31:37:b3:65:62:e1:40:4c:2c:fc:ab:1a:89:1b:
                    fd:ae:db:a5:f7:e3:0d:26:77:fc:9a:59:dd:4f:53:
                    2b:fd:4d:11:fb:96:e8:b1:29:b3:6f:79:0a:c8:d1:
                    31:fd:99:fc:43:84:e0:5e:1e:cd:ce:e0:59:2b:3a:
                    a2:af:bc:40:c5:bc:8d:e9:30:b1:51:0b:8b:e1:b8:
                    0f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:77:63:7A:44:D1:7D:1F:03:DD:3F:89:DA:DA:77:63:C2:9A:7E:7E
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/323830343a3731633a3a2f33322d3438203d3e203533303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71c::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:49:db:5c:e4:2a:5c:ba:d9:6e:c7:69:a9:64:0d:ad:c8:5a:
         20:b7:ea:b7:41:ad:c6:92:f7:97:e1:b5:bf:4a:db:81:cd:b4:
         dd:3d:36:07:51:0b:43:37:d7:4a:d8:9f:03:65:e8:a2:e6:17:
         80:ef:91:22:f7:d1:c2:82:91:46:d2:63:1e:0d:c4:e6:3b:01:
         ff:98:68:fb:05:37:e0:d3:44:c8:e5:eb:73:43:47:ab:a1:96:
         0d:64:f0:80:74:4e:1c:40:83:20:50:dd:22:48:83:c5:a3:24:
         4e:c2:d4:8c:b1:2f:e0:a4:83:91:1b:1e:56:ed:7d:06:fb:4b:
         38:05:59:bb:43:c8:71:d3:43:2c:0c:3a:50:a9:e3:b8:d0:81:
         49:83:0b:ce:89:e2:3f:d7:ea:f2:cf:5a:55:cb:2e:8a:f3:46:
         82:88:d9:91:8e:03:33:99:ba:86:94:2d:47:cb:21:1d:ae:3a:
         8e:32:4f:21:4a:39:1f:d7:5e:98:f2:97:f9:82:f9:80:b0:35:
         81:f5:21:96:a5:4f:c0:fa:79:35:cd:43:fc:3f:73:c6:5f:3d:
         51:31:cd:8d:c8:65:63:f6:9b:38:5a:4d:b2:3d:cc:bb:3d:43:
         cc:23:d5:4e:44:78:76:a8:59:da:3d:eb:25:f5:18:af:85:7d:
         34:19:d9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:40 2024 by rpki-client on console-fra.rpki-client.org