Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/323830343a363563383a3a2f33332d3333203d3e20323639353134.roa
File:                     323830343a363563383a3a2f33332d3333203d3e20323639353134.roa (raw, json)
Hash identifier:          +ttOwmAhHInBjPwPypVSks3X29oXvAHL72rzZmE9dUg=
Subject key identifier:   58:77:BE:E7:C1:9F:3F:30:92:44:29:A9:C2:78:BB:6E:F4:A6:81:78
Certificate issuer:       /CN=05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96
Certificate serial:       60C3895FBD7D1D3DF153FEF08D2635FCA5A1F4BA
Authority key identifier: 05:A8:5F:FC:2E:60:C3:11:7B:A8:B9:EC:C5:DC:DE:E8:91:37:DF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/323830343a363563383a3a2f33332d3333203d3e20323639353134.roa
Signing time:             Fri 08 Nov 2024 01:22:38 +0000
ROA not before:           Fri 08 Nov 2024 01:17:38 +0000
ROA not after:            Fri 07 Nov 2025 01:22:38 +0000
asID:                     269514
IP address blocks:        2804:65c8::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.crl
                          rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c3:89:5f:bd:7d:1d:3d:f1:53:fe:f0:8d:26:35:fc:a5:a1:f4:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96
        Validity
            Not Before: Nov  8 01:17:38 2024 GMT
            Not After : Nov  7 01:22:38 2025 GMT
        Subject: CN=5877BEE7C19F3F30924429A9C278BB6EF4A68178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4e:d6:fc:59:43:ff:e3:cc:46:a9:13:fc:c5:
                    ff:0e:c3:c9:6e:8c:a0:4e:65:d0:09:26:b3:a2:3f:
                    b2:1c:6b:f0:21:9e:e0:aa:1e:e8:75:99:df:71:f4:
                    2f:41:60:7f:b6:42:13:44:a4:56:8a:35:19:c1:c4:
                    58:3a:e7:02:25:b9:df:38:b6:a7:b0:d6:e6:52:77:
                    48:9c:e2:c5:93:a7:be:ae:c3:24:b0:d5:a0:d7:0e:
                    9a:c2:ce:da:68:8c:81:c5:9c:69:61:33:c8:d6:34:
                    be:0f:11:c3:42:4c:ef:a4:24:10:19:c6:60:79:c6:
                    48:19:93:63:34:8a:85:b2:de:6f:6b:8b:44:2c:fd:
                    3f:1e:f2:3a:41:f0:bc:82:57:dd:f9:2f:15:73:29:
                    08:c5:3a:5a:b3:f2:c3:a2:1a:20:07:c3:c3:e2:13:
                    e2:fb:2d:b3:b2:e1:89:fd:44:1b:a2:1b:65:bc:4a:
                    46:57:89:03:f5:40:ec:8a:2f:38:80:1a:ca:f1:36:
                    bb:53:e5:4c:47:58:8d:f3:3a:2f:7f:22:ab:16:5c:
                    b2:9a:0f:96:db:89:b6:9e:ec:e4:5b:b0:f7:62:25:
                    89:8a:e1:99:52:25:51:15:a6:c6:6a:93:87:93:f3:
                    fb:cc:28:42:5b:81:bc:76:26:9b:8c:7d:69:a0:9e:
                    25:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:77:BE:E7:C1:9F:3F:30:92:44:29:A9:C2:78:BB:6E:F4:A6:81:78
            X509v3 Authority Key Identifier:
                keyid:05:A8:5F:FC:2E:60:C3:11:7B:A8:B9:EC:C5:DC:DE:E8:91:37:DF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/323830343a363563383a3a2f33332d3333203d3e20323639353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65c8::/33

    Signature Algorithm: sha256WithRSAEncryption
         75:f8:31:c1:c6:4b:b7:b1:28:cc:48:0a:4c:29:9c:12:31:f1:
         b7:6f:0d:04:33:01:3f:8a:c4:3b:1e:d8:72:1c:6a:fa:c7:b8:
         18:74:ec:6c:bb:35:6c:8a:e7:90:15:78:52:d7:34:c9:bd:0e:
         a9:51:5c:77:a5:f1:f0:4c:2b:bc:a0:b6:72:b0:e0:a5:e5:98:
         80:fe:6d:9a:28:56:56:10:55:dd:ee:51:07:cd:1b:ae:e3:c2:
         28:96:e1:3d:8b:fe:43:cf:ba:ad:e0:71:60:65:35:fc:77:b4:
         bc:71:56:40:fb:72:25:78:f4:b2:6e:fb:91:cd:22:2b:97:09:
         33:c3:43:fb:f6:06:e0:bb:dd:10:2b:81:44:77:c3:85:0d:e3:
         98:b5:e7:92:9f:eb:97:53:3d:d3:f7:de:4b:9e:b1:2c:f9:31:
         d2:42:2d:8f:eb:8c:86:fe:3f:10:1a:e6:23:d5:e3:6c:89:1c:
         57:df:61:6e:1a:a8:21:09:27:b7:16:b7:4f:36:5c:b5:75:fc:
         ac:84:5f:93:51:26:e9:fe:ee:fb:01:dc:5a:d0:eb:d8:7b:62:
         2a:b5:92:a2:4e:fe:1e:c5:c9:f0:60:7c:25:22:f5:c6:89:d0:
         16:9a:e9:51:51:16:88:c6:b0:36:85:53:0b:5c:c7:98:0a:de:
         fb:43:87:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:49 2024 by rpki-client on console-fra.rpki-client.org