Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a323030303a3a2f33352d3335203d3e203533303532.roa
File:                     323830343a326634383a323030303a3a2f33352d3335203d3e203533303532.roa (raw, json)
Hash identifier:          Fku8fSFSjTjgUrDTuLacXNvmZvcYQsU9Y2CMeXUU3VY=
Subject key identifier:   D7:CA:EE:C6:63:F1:5B:09:1B:3E:9F:D4:09:6E:97:01:F4:E7:15:08
Certificate issuer:       /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial:       D6BD138B53BE5206462DF69E6B7810A68BA1B6
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a323030303a3a2f33352d3335203d3e203533303532.roa
Signing time:             Thu 10 Oct 2024 17:11:59 +0000
ROA not before:           Thu 10 Oct 2024 17:06:59 +0000
ROA not after:            Thu 09 Oct 2025 17:11:59 +0000
asID:                     53052
IP address blocks:        2804:2f48:2000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
                          rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 20:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d6:bd:13:8b:53:be:52:06:46:2d:f6:9e:6b:78:10:a6:8b:a1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
        Validity
            Not Before: Oct 10 17:06:59 2024 GMT
            Not After : Oct  9 17:11:59 2025 GMT
        Subject: CN=D7CAEEC663F15B091B3E9FD4096E9701F4E71508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:64:9b:b7:b1:ef:5b:d6:22:6b:98:91:e3:72:
                    b3:6a:1b:1c:2b:42:13:67:5f:05:df:16:1a:83:13:
                    57:fd:55:88:35:b9:77:1c:50:b8:d6:7f:f5:5f:24:
                    d4:96:81:73:8a:62:50:b0:b6:26:5d:b0:16:f6:86:
                    4c:65:05:06:18:81:b6:e3:fb:52:77:80:f0:b3:5d:
                    f0:6f:16:75:d7:ee:43:c2:25:0a:9f:a8:3c:6b:2e:
                    e3:da:9e:9c:f3:0a:cc:38:a1:44:e8:7b:c9:ea:da:
                    2d:72:5a:92:e4:89:23:f4:78:27:fe:97:d1:12:31:
                    df:1c:19:f6:3a:ab:3e:d6:02:69:79:79:56:01:70:
                    f6:bb:51:cf:25:9b:64:86:d9:3d:d5:86:e3:63:73:
                    22:17:f3:ba:8f:e1:23:a0:ac:7a:40:9f:9c:6b:84:
                    9d:74:86:15:92:e8:00:62:44:18:8c:b4:a5:07:7d:
                    89:51:b0:78:fd:b0:4b:d2:7a:ec:b2:d6:ad:cf:18:
                    8f:da:89:fb:dc:fa:9b:02:1e:f3:39:d3:ca:bd:de:
                    50:49:36:15:50:1e:77:5c:6f:17:16:bc:a6:c4:0f:
                    e0:c3:ba:5f:6c:79:fc:df:bd:d3:40:0d:a7:5a:23:
                    25:e1:12:66:16:82:e2:e7:b0:8c:60:79:5f:06:54:
                    56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CA:EE:C6:63:F1:5B:09:1B:3E:9F:D4:09:6E:97:01:F4:E7:15:08
            X509v3 Authority Key Identifier:
                keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a323030303a3a2f33352d3335203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f48:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         5d:54:f7:ee:2d:eb:36:0b:ec:ca:8b:fc:13:8f:ea:aa:f3:5f:
         77:a0:45:f1:98:b1:b8:0b:38:24:1a:66:b5:73:c2:5c:00:66:
         2a:90:e8:cb:db:09:28:a0:29:52:df:cd:66:30:28:ad:79:38:
         dc:c8:d6:4b:59:22:66:43:3e:2e:d1:3e:9a:e4:0b:d8:64:dc:
         09:cc:65:0c:11:58:e5:01:50:56:9f:11:7e:07:0d:e2:33:10:
         23:8c:0d:35:82:a8:9a:83:6d:67:f0:e1:8e:e3:56:da:5e:a2:
         c0:69:e1:e1:ed:18:c9:26:eb:76:64:c0:79:6a:99:a0:c3:e1:
         01:03:47:70:2f:1b:a4:b9:68:0a:05:4b:ee:5a:c3:21:dc:d2:
         e2:58:3b:70:6a:1d:8f:36:a5:8c:4d:df:41:d5:63:10:0c:d0:
         e9:a0:a7:6d:76:28:6f:40:ba:d8:4f:d0:be:b7:3d:70:76:64:
         9f:1d:2e:b9:3c:9d:8a:ca:7e:0f:b0:20:8e:9e:96:bb:a1:aa:
         37:2d:3e:51:7b:7f:2b:fe:95:08:5b:1c:dd:8c:c5:93:10:78:
         d2:62:6f:16:b9:58:3f:a1:8d:3e:e8:6c:17:b1:2d:53:21:5b:
         22:04:0c:aa:05:5e:68:a6:91:19:7b:08:31:9b:23:c1:07:37:
         f0:57:b9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:36 2024 by rpki-client on console-fra.rpki-client.org