Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/323830343a363563383a3a2f33342d3334203d3e20323639353134.roa
File:                     323830343a363563383a3a2f33342d3334203d3e20323639353134.roa (raw, json)
Hash identifier:          kFl4KVZZjQOzRuIZWIq1xaKAV66QHYugGUZ8BRCd6Zc=
Subject key identifier:   C2:80:5E:6A:46:BD:17:C4:65:91:44:61:B1:D8:2F:66:A8:C3:ED:51
Certificate issuer:       /CN=05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96
Certificate serial:       3EA863FC1990EF1385588538CE82D157E8F8D8E4
Authority key identifier: 05:A8:5F:FC:2E:60:C3:11:7B:A8:B9:EC:C5:DC:DE:E8:91:37:DF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/323830343a363563383a3a2f33342d3334203d3e20323639353134.roa
Signing time:             Fri 08 Nov 2024 01:22:37 +0000
ROA not before:           Fri 08 Nov 2024 01:17:37 +0000
ROA not after:            Fri 07 Nov 2025 01:22:37 +0000
asID:                     269514
IP address blocks:        2804:65c8::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.crl
                          rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a8:63:fc:19:90:ef:13:85:58:85:38:ce:82:d1:57:e8:f8:d8:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96
        Validity
            Not Before: Nov  8 01:17:37 2024 GMT
            Not After : Nov  7 01:22:37 2025 GMT
        Subject: CN=C2805E6A46BD17C465914461B1D82F66A8C3ED51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c0:94:2f:79:41:4d:77:4f:18:01:7f:ca:da:
                    7e:be:22:14:06:dd:5d:3c:2f:95:53:a8:d8:cb:58:
                    c3:c2:72:61:5c:e1:90:e6:b5:34:e2:67:c6:8b:c6:
                    97:d0:8c:96:f3:dd:28:ac:8c:bb:2d:ff:92:8c:a5:
                    46:af:c7:8a:c5:4d:3d:f3:60:6e:92:7e:a3:5a:b2:
                    9e:86:a3:6a:9a:51:4d:f2:05:fa:4e:c8:1a:e5:73:
                    6e:5c:17:63:c1:46:6a:7c:8a:03:e0:17:25:c8:c4:
                    28:cc:4f:1b:7e:bd:d1:4a:39:a0:02:25:18:ed:75:
                    04:05:1d:9e:27:bd:d2:90:bb:b4:66:cb:f6:22:b8:
                    b7:fc:b1:df:96:8a:90:3d:7b:82:99:b9:04:4d:ac:
                    36:02:8c:56:a9:97:91:31:4e:07:39:b0:15:55:d6:
                    70:9b:7f:aa:03:89:4c:66:23:8e:5c:62:24:2a:53:
                    31:9c:51:b8:58:ae:b1:ae:38:4f:d9:e3:4b:45:a4:
                    fd:5f:02:0b:56:9e:96:d8:e5:f2:01:84:ba:6a:36:
                    67:a8:ec:97:58:a1:4b:12:e6:40:6f:1c:df:b0:a1:
                    60:0b:f4:f5:24:ef:66:46:f7:2e:d2:f1:6d:7a:27:
                    3a:71:73:ab:45:f2:0c:f0:72:00:51:77:4a:88:01:
                    c3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:80:5E:6A:46:BD:17:C4:65:91:44:61:B1:D8:2F:66:A8:C3:ED:51
            X509v3 Authority Key Identifier:
                keyid:05:A8:5F:FC:2E:60:C3:11:7B:A8:B9:EC:C5:DC:DE:E8:91:37:DF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/323830343a363563383a3a2f33342d3334203d3e20323639353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65c8::/34

    Signature Algorithm: sha256WithRSAEncryption
         1d:65:46:6e:78:9e:f3:a3:1c:04:55:74:0f:6d:77:b9:b0:b9:
         5f:ef:c4:e3:79:d8:63:a5:91:45:a9:e6:2f:52:9e:4f:92:cd:
         d5:40:ac:59:31:66:fc:77:3e:07:42:25:07:76:45:ef:3c:42:
         30:1c:7f:d7:1c:19:e8:c1:0a:61:bf:49:5a:9c:41:97:a5:e2:
         cc:6d:2f:58:5e:4f:7c:98:38:9b:f0:39:53:73:8a:47:51:4f:
         72:9d:21:1c:9a:73:7f:8d:e9:e3:21:5c:60:bf:78:0f:0d:4e:
         27:b2:d3:e5:01:6c:39:24:d3:91:a0:37:40:06:c3:59:1e:0b:
         be:65:5a:ca:87:cd:8d:f4:ad:53:31:6b:89:4f:c0:c6:7b:a3:
         ef:cb:e2:58:d2:a8:55:4b:64:b5:92:d1:c4:a9:85:0d:8b:1b:
         0f:ce:be:c7:9a:8e:bb:6c:cc:6c:72:fb:cc:2b:80:c6:ca:2c:
         f3:96:80:29:0a:b4:d9:c5:af:87:0f:36:43:b1:3f:29:75:f7:
         80:8f:4a:3d:84:6d:d7:fe:6f:f5:fb:dd:94:ef:02:78:ee:04:
         07:a6:bd:7c:2c:97:80:ca:99:1b:6d:74:a6:9c:44:9c:01:92:
         3a:82:b1:54:2e:ee:d9:aa:45:9a:28:2c:64:0a:4d:6f:78:05:
         de:7a:f3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:49 2024 by rpki-client on console-fra.rpki-client.org