Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/323830343a336431383a3a2f33322d3438203d3e20323636323533.roa
File:                     323830343a336431383a3a2f33322d3438203d3e20323636323533.roa (raw, json)
Hash identifier:          bkc7PD/eoMEAwVgn7rQvXWlY3Vh94NdNwzo2VtWfGSs=
Subject key identifier:   FF:80:A7:35:AB:B1:36:D9:E4:35:91:7E:CC:7B:8A:3A:CB:1F:DD:69
Certificate issuer:       /CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0
Certificate serial:       1F8858D320F3BE9A2D85576AD67662489D85A7A2
Authority key identifier: D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/323830343a336431383a3a2f33322d3438203d3e20323636323533.roa
Signing time:             Tue 02 Jul 2024 14:40:45 +0000
ROA not before:           Tue 02 Jul 2024 14:35:45 +0000
ROA not after:            Tue 01 Jul 2025 14:40:45 +0000
asID:                     266253
IP address blocks:        2804:3d18::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl
                          rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:88:58:d3:20:f3:be:9a:2d:85:57:6a:d6:76:62:48:9d:85:a7:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0
        Validity
            Not Before: Jul  2 14:35:45 2024 GMT
            Not After : Jul  1 14:40:45 2025 GMT
        Subject: CN=FF80A735ABB136D9E435917ECC7B8A3ACB1FDD69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5a:3f:2a:39:1a:6e:ab:19:5f:8b:51:a7:11:
                    e6:13:b4:a9:3c:43:89:39:a1:a0:7c:52:75:f7:71:
                    d7:42:94:93:ce:97:e8:af:b8:c5:30:42:b5:ea:17:
                    b4:d8:29:42:d2:1b:1e:01:59:64:06:12:33:cb:a5:
                    d0:8d:a8:6a:7e:0f:bf:e3:dc:d5:8e:cd:13:6b:fe:
                    b3:4b:c8:98:98:6e:37:30:c7:01:64:e9:05:3c:64:
                    bb:ea:b8:a9:7e:15:80:da:e9:13:e9:37:87:47:f0:
                    0c:1b:92:cd:70:85:8e:21:c3:1f:01:96:86:30:0a:
                    2e:02:98:88:74:ee:a4:23:11:c0:07:03:02:c1:d3:
                    e8:c9:10:cf:00:b6:5c:5d:63:39:a9:5c:48:be:37:
                    8e:f4:2a:93:60:58:1e:96:6e:64:cb:79:8b:bd:c9:
                    e2:9b:fc:d6:84:3d:f5:51:51:38:d7:5d:58:b4:3a:
                    46:f4:d8:e9:4a:3f:7b:ed:c1:54:ab:88:f3:01:4c:
                    13:47:26:b3:0f:a8:14:bb:b8:b4:35:5e:1c:5d:a9:
                    57:2e:53:4a:7a:f7:b5:6c:54:76:73:82:0e:8e:93:
                    a7:12:62:bc:2c:99:d2:e8:d5:0d:ac:13:8a:e2:12:
                    ac:f5:b3:11:57:e3:b0:39:cf:77:22:b1:72:bc:0c:
                    c6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:80:A7:35:AB:B1:36:D9:E4:35:91:7E:CC:7B:8A:3A:CB:1F:DD:69
            X509v3 Authority Key Identifier:
                keyid:D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/323830343a336431383a3a2f33322d3438203d3e20323636323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d18::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:ab:ff:09:50:e2:b1:ed:32:26:8f:7a:13:4f:c9:15:a7:80:
         d0:8e:dd:26:5c:68:cc:c6:a6:6d:64:1b:43:65:90:83:28:7f:
         56:cb:27:31:a5:5a:23:5f:f5:b8:11:91:76:93:af:6e:54:bc:
         5b:ba:99:c0:e1:f6:00:a7:3a:5c:f7:b8:33:d0:4b:73:8e:08:
         6f:16:c4:9c:36:9d:fa:e4:63:f6:2f:3e:ea:2a:80:d4:87:c1:
         59:2d:b0:3d:74:54:dc:00:4b:a6:85:00:af:a6:f3:c8:5c:71:
         07:93:64:6d:24:f4:73:3f:ee:aa:02:91:a0:9c:2b:2e:a9:0a:
         32:54:9d:3f:c9:1a:02:73:d4:12:56:89:13:db:c9:f6:74:47:
         c5:b7:ae:9b:97:e1:f8:1a:9f:fd:d3:1b:ca:88:67:83:0c:ed:
         25:c3:bd:8c:29:8e:e0:a4:81:69:31:ce:68:36:ca:29:ef:27:
         e8:70:ec:7e:75:39:6e:83:cc:36:32:1e:ff:ca:d1:6f:1e:87:
         37:47:b5:83:25:a4:44:df:a5:f8:72:59:ec:46:bb:fe:b4:aa:
         8d:d4:7e:83:67:4b:45:48:40:ce:75:a0:7e:55:e4:f7:e1:ff:
         f2:77:7d:d1:21:62:43:27:07:ad:64:fb:d9:c3:6b:74:6f:94:
         a6:59:68:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:04 2024 by rpki-client on console-fra.rpki-client.org