Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a343763303a3a2f33322d3332203d3e20323633363635.roa
File:                     323830343a343763303a3a2f33322d3332203d3e20323633363635.roa (raw, json)
Hash identifier:          GAtsz+Cq6Pd/UxzyOVQ7WYBO6cxw3kDHRQpnyI13C1E=
Subject key identifier:   5D:EA:6E:F1:89:6B:CE:76:E8:0B:68:C4:D8:78:90:FD:B2:39:C8:82
Certificate issuer:       /CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Certificate serial:       68FFB77B04251E3536BFA07D22B569808FAD7074
Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a343763303a3a2f33322d3332203d3e20323633363635.roa
Signing time:             Thu 07 Nov 2024 20:54:50 +0000
ROA not before:           Thu 07 Nov 2024 20:49:50 +0000
ROA not after:            Thu 06 Nov 2025 20:54:50 +0000
asID:                     263665
IP address blocks:        2804:47c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ff:b7:7b:04:25:1e:35:36:bf:a0:7d:22:b5:69:80:8f:ad:70:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E
        Validity
            Not Before: Nov  7 20:49:50 2024 GMT
            Not After : Nov  6 20:54:50 2025 GMT
        Subject: CN=5DEA6EF1896BCE76E80B68C4D87890FDB239C882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9f:91:4a:b2:ad:9a:df:93:54:20:46:e1:d8:
                    24:7f:df:a4:b3:ad:7a:e3:2e:da:ce:01:ed:c2:63:
                    de:09:9f:a6:45:a3:08:e9:98:75:9b:5f:12:72:3e:
                    b6:9b:db:8f:96:7f:4a:34:71:e0:57:2e:13:f2:98:
                    47:8c:d6:84:69:9d:78:f9:26:06:69:a4:5a:e1:b5:
                    27:e9:d0:50:da:f7:43:1e:cf:8d:ae:e2:7b:36:2e:
                    99:f2:2a:1e:83:c3:9c:22:74:57:af:76:78:0e:a4:
                    84:1e:a7:18:48:c0:a6:84:d8:ef:80:4c:26:2d:6d:
                    86:10:da:21:99:79:0f:17:b4:93:26:bf:58:d6:70:
                    bd:da:9b:3d:eb:b7:23:d2:22:b6:6c:8a:27:27:b2:
                    ed:ed:ce:7a:16:a0:a2:92:82:ed:7a:ea:c8:d4:e4:
                    0e:dd:66:78:7a:fc:2c:95:de:e2:f2:79:43:be:65:
                    0a:55:08:1a:e7:b0:47:2d:6e:5f:06:b0:d8:5a:45:
                    49:c4:8e:30:ae:97:63:ce:20:e8:81:71:3f:c3:dc:
                    fc:f0:44:43:d7:f4:27:c8:05:f7:0f:b5:f0:57:23:
                    76:3c:fc:9f:bc:86:a8:cd:58:db:2d:ac:42:06:d0:
                    12:72:f8:12:7c:7a:a9:48:d1:e2:1d:22:f6:c1:c4:
                    14:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:EA:6E:F1:89:6B:CE:76:E8:0B:68:C4:D8:78:90:FD:B2:39:C8:82
            X509v3 Authority Key Identifier:
                keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a343763303a3a2f33322d3332203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:18:14:f9:d0:67:0d:ba:82:25:c4:56:c9:80:09:16:b5:9c:
         f5:1e:9b:d4:22:a9:3d:c4:71:53:0d:f9:02:7b:24:a7:61:41:
         56:dd:c0:95:41:e9:8d:39:94:28:fa:b5:df:bc:f9:af:e5:3f:
         ce:ef:68:51:65:6f:0f:7c:0f:24:98:56:df:ce:32:fd:49:55:
         79:4e:a5:7b:67:d6:c9:42:ac:6d:29:7c:2a:9e:ee:5e:55:b9:
         8e:9a:b6:4b:c2:21:9b:30:bb:eb:1c:f5:fe:5d:c7:5d:34:28:
         3a:ac:45:6c:03:2c:e3:01:8b:58:3a:0e:14:33:2e:4a:5b:31:
         03:e3:a5:50:4f:34:6b:77:63:78:76:76:8b:fc:78:bb:2e:bd:
         53:a4:5b:c5:f3:7d:e4:4a:37:69:eb:76:e2:8a:11:7d:59:39:
         51:16:e4:3f:ab:b0:8a:12:e8:d4:78:80:60:c2:8e:2a:36:45:
         6c:a5:5a:7c:d6:c3:cb:d9:23:dd:81:8d:45:2b:4c:bc:1e:72:
         99:e8:26:3c:38:78:24:c7:25:a2:25:79:4b:86:c9:9b:3b:c3:
         6e:b1:22:c6:f2:e6:88:be:26:2f:c7:c4:5b:4f:52:84:56:20:
         a4:f2:23:88:34:da:22:56:b9:6b:96:7d:48:7b:f6:6f:61:53:
         b2:f4:80:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:17 2024 by rpki-client on console-fra.rpki-client.org