Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/323830343a363563383a343030303a3a2f33342d3334203d3e20323639353134.roa
File:                     323830343a363563383a343030303a3a2f33342d3334203d3e20323639353134.roa (raw, json)
Hash identifier:          ECLAOBCzKxZIlRct7UDeUOI/430+tLB2HWX7C85novs=
Subject key identifier:   B4:48:81:8A:22:D4:07:B9:66:A8:51:A4:2F:35:01:68:6E:E0:5B:02
Certificate issuer:       /CN=05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96
Certificate serial:       5057552157EFF2A9370565AE85C1B301D960CFB8
Authority key identifier: 05:A8:5F:FC:2E:60:C3:11:7B:A8:B9:EC:C5:DC:DE:E8:91:37:DF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/323830343a363563383a343030303a3a2f33342d3334203d3e20323639353134.roa
Signing time:             Fri 08 Nov 2024 01:22:38 +0000
ROA not before:           Fri 08 Nov 2024 01:17:38 +0000
ROA not after:            Fri 07 Nov 2025 01:22:38 +0000
asID:                     269514
IP address blocks:        2804:65c8:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.crl
                          rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:57:55:21:57:ef:f2:a9:37:05:65:ae:85:c1:b3:01:d9:60:cf:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96
        Validity
            Not Before: Nov  8 01:17:38 2024 GMT
            Not After : Nov  7 01:22:38 2025 GMT
        Subject: CN=B448818A22D407B966A851A42F3501686EE05B02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:14:00:1e:ce:ba:7e:00:f5:23:6d:d9:a1:35:
                    30:3c:95:95:7a:57:d1:83:06:47:52:12:4a:01:2b:
                    ec:75:ef:c6:3b:89:72:1e:28:5e:b5:15:cd:d6:c5:
                    3e:d8:b4:2b:84:82:ff:0a:74:50:07:4b:38:e2:44:
                    09:2e:d1:56:47:2e:73:53:27:e7:9f:23:8b:49:ca:
                    bc:78:9d:bb:78:0b:a0:53:f5:6b:39:d5:cf:e3:e7:
                    43:66:82:d2:36:22:27:b6:ca:46:b5:93:d3:5d:ba:
                    c7:a4:e3:82:f6:9b:cd:14:ea:d0:14:d9:03:68:72:
                    db:09:9f:9d:4e:92:b4:96:48:23:80:04:66:79:d9:
                    f4:e5:56:03:ca:47:ce:f8:0f:ab:a1:9d:99:81:41:
                    fe:54:16:a3:60:44:32:99:92:27:7d:b4:9f:aa:46:
                    79:50:f5:a9:2f:b5:48:b4:9e:6a:66:cd:7d:af:ab:
                    6f:12:be:3b:b6:69:73:29:29:02:04:35:97:6d:b5:
                    a6:fb:09:61:89:0d:9e:ee:a2:da:e4:10:54:7d:a7:
                    9a:dc:e3:01:e8:58:55:80:0e:82:48:b6:39:86:88:
                    e7:1b:80:01:33:fe:92:a1:07:bb:41:ca:88:e2:65:
                    33:40:23:64:0e:01:59:74:cf:9f:d6:13:10:72:23:
                    84:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:48:81:8A:22:D4:07:B9:66:A8:51:A4:2F:35:01:68:6E:E0:5B:02
            X509v3 Authority Key Identifier:
                keyid:05:A8:5F:FC:2E:60:C3:11:7B:A8:B9:EC:C5:DC:DE:E8:91:37:DF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/323830343a363563383a343030303a3a2f33342d3334203d3e20323639353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65c8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8b:f5:9e:51:11:45:53:cc:fd:47:9a:29:6d:e2:28:5e:1d:0b:
         1e:b1:bc:da:65:0e:a4:50:4c:65:4c:83:d1:fb:d8:46:3a:41:
         56:4d:85:17:c7:db:ae:d3:41:3d:75:05:32:f4:d1:98:78:95:
         f4:a0:77:97:ec:d8:67:f6:91:b9:88:ea:8d:56:b6:3a:5a:ca:
         3f:a2:5b:7b:77:2b:76:b8:21:c5:e6:a9:32:03:f6:38:61:1f:
         4c:9a:67:0f:aa:d0:de:1a:a3:01:3b:97:36:41:02:ba:22:bb:
         c1:5e:04:64:6c:c3:a4:c3:84:69:8e:43:50:11:3e:ed:88:11:
         72:81:c7:66:08:90:77:d2:9f:73:63:b6:71:64:4e:0a:1c:26:
         22:cd:a1:49:b9:23:95:75:ec:56:1f:68:d7:bd:6d:e9:7a:28:
         f1:6e:e5:41:e3:1b:59:5a:a9:f6:4f:4e:c3:3a:d0:35:ca:88:
         20:92:2a:f7:ab:3f:39:cb:3e:2e:29:72:d2:01:fe:b1:49:5b:
         0b:5b:5c:f7:fd:91:e7:cf:45:6e:38:c3:3a:fa:17:2c:1d:70:
         97:13:1b:e5:4e:ea:30:f1:9c:c4:2b:22:de:8f:18:88:a2:95:
         31:42:32:bb:e2:84:9f:fc:64:6d:6a:45:28:cc:0e:99:7c:09:
         c1:5d:de:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:10 2024 by rpki-client on console-fra.rpki-client.org