Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/323830313a38303a3a2f34382d3438203d3e203238363436.roa
File:                     323830313a38303a3a2f34382d3438203d3e203238363436.roa (raw, json)
Hash identifier:          CyuwoawztGd4mci7Do8nk0GB00XxIqjpNOMzHMqbm1s=
Subject key identifier:   45:66:D0:77:9D:64:D8:6C:76:EE:F3:DE:68:D8:E6:8C:D9:FC:96:F0
Certificate issuer:       /CN=8D41CABF9128C1CBAC4BB641E77B86D13098BC6D
Certificate serial:       56B756DAA5A6FED0830AEE1E7B21ADBD8F3DCEE3
Authority key identifier: 8D:41:CA:BF:91:28:C1:CB:AC:4B:B6:41:E7:7B:86:D1:30:98:BC:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/323830313a38303a3a2f34382d3438203d3e203238363436.roa
Signing time:             Thu 04 Apr 2024 11:18:15 +0000
ROA not before:           Thu 04 Apr 2024 11:13:15 +0000
ROA not after:            Thu 03 Apr 2025 11:18:15 +0000
asID:                     28646
IP address blocks:        2801:80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.crl
                          rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b7:56:da:a5:a6:fe:d0:83:0a:ee:1e:7b:21:ad:bd:8f:3d:ce:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D41CABF9128C1CBAC4BB641E77B86D13098BC6D
        Validity
            Not Before: Apr  4 11:13:15 2024 GMT
            Not After : Apr  3 11:18:15 2025 GMT
        Subject: CN=4566D0779D64D86C76EEF3DE68D8E68CD9FC96F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0a:83:19:2c:37:4b:51:d6:20:d6:9a:7d:b6:
                    a6:55:6a:98:c5:a7:18:cb:3f:02:92:c8:f2:7d:b5:
                    c8:b7:38:af:65:2e:75:de:fa:12:71:95:51:7c:b9:
                    f7:73:76:80:af:f1:50:37:24:a6:17:13:c6:f9:ff:
                    74:5b:a5:6f:a5:4a:39:58:7b:80:2c:93:d8:fe:64:
                    b4:29:39:92:83:4f:d8:bd:1f:d6:7c:f7:0f:9d:db:
                    20:4c:07:cd:29:24:2e:23:3f:8e:85:24:60:2c:3a:
                    b7:5b:91:17:fe:41:b6:e1:b0:d0:17:73:d3:65:ef:
                    af:1b:1d:ee:b9:ef:a8:5e:16:b0:a8:6b:03:cf:bf:
                    0b:93:29:54:8f:a4:47:7d:45:d9:a7:5d:18:7b:44:
                    f2:a6:55:93:76:ba:0d:3e:2d:77:44:e9:27:b1:e5:
                    09:45:de:3b:a3:f1:6a:94:ab:46:23:eb:1d:67:91:
                    ad:5e:99:57:25:bb:51:28:4c:f0:6e:6a:ee:55:e0:
                    ef:55:7e:a9:45:d3:2e:85:78:f7:28:66:1e:00:f1:
                    6a:79:c8:8c:9e:07:11:c2:88:69:b6:cf:4c:6a:4f:
                    0b:af:21:f8:3d:20:2e:c5:2d:82:b3:13:43:53:b1:
                    ce:fc:a7:7a:44:1b:8e:a0:d3:01:f0:00:3e:eb:f8:
                    dd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:66:D0:77:9D:64:D8:6C:76:EE:F3:DE:68:D8:E6:8C:D9:FC:96:F0
            X509v3 Authority Key Identifier:
                keyid:8D:41:CA:BF:91:28:C1:CB:AC:4B:B6:41:E7:7B:86:D1:30:98:BC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/323830313a38303a3a2f34382d3438203d3e203238363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:2c:5a:b2:e7:ad:8a:e0:e3:a3:d8:07:c7:d3:26:49:8c:4f:
         78:8b:52:f9:48:c4:90:1f:87:8f:03:5d:2e:e9:3e:18:b5:9e:
         73:7e:da:e9:c0:21:21:0d:77:fa:ec:a0:85:cf:aa:4a:9e:17:
         e3:93:70:ac:4e:d6:1a:45:87:95:8d:17:9b:a9:6e:cd:72:88:
         49:77:ca:26:67:11:49:be:ba:79:0c:1f:b5:d8:0f:74:a9:10:
         80:1a:ea:2f:d0:12:ba:24:58:60:df:3b:87:94:44:3f:94:c9:
         4d:23:56:46:24:d5:66:10:4c:51:f0:e2:89:c4:b2:e0:26:0e:
         d4:6f:2d:e4:a8:94:b7:46:33:13:d3:0f:02:ce:08:1c:43:a8:
         01:07:24:c6:26:5d:ce:b1:96:21:97:b9:ee:9b:ba:44:68:41:
         a5:21:a6:08:42:ca:ae:42:fe:ac:74:7c:86:3f:6e:1c:04:5b:
         b1:a4:40:e5:32:0c:d8:ae:a4:96:30:54:16:6e:55:5c:72:e7:
         64:ca:4e:cc:58:5a:9f:a8:d5:a3:17:eb:2a:3e:25:f8:18:07:
         62:f1:1f:c9:2f:85:4a:37:f2:ee:03:dc:7a:e4:65:bf:40:18:
         2e:cc:46:c1:29:9b:d1:81:7d:c7:e7:af:c8:99:f1:d7:50:9e:
         05:9a:d6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org