Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Zp1nAbzKGfDUwHH3pVdmu8LcSZV6HKxh5Lu1JiwBfAB/0/323830313a38303a323565303a3a2f34382d3438203d3e20323638313738.roa
File:                     323830313a38303a323565303a3a2f34382d3438203d3e20323638313738.roa (raw, json)
Hash identifier:          vzI6BFOcnYITIt903RFK6hIk5MJpiZgIQZflywcZVXc=
Subject key identifier:   DF:46:85:B4:35:B3:0F:0C:77:D5:74:2B:F7:91:2F:81:1B:B3:E2:09
Certificate issuer:       /CN=DD03EB79FF5CF57286D6113E3E194B78A347552C
Certificate serial:       25FB30A57F015274DC03039E0B6AD02E2F1A894B
Authority key identifier: DD:03:EB:79:FF:5C:F5:72:86:D6:11:3E:3E:19:4B:78:A3:47:55:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD03EB79FF5CF57286D6113E3E194B78A347552C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Zp1nAbzKGfDUwHH3pVdmu8LcSZV6HKxh5Lu1JiwBfAB/0/323830313a38303a323565303a3a2f34382d3438203d3e20323638313738.roa
Signing time:             Tue 10 Sep 2024 11:17:40 +0000
ROA not before:           Tue 10 Sep 2024 11:12:40 +0000
ROA not after:            Tue 09 Sep 2025 11:17:40 +0000
asID:                     268178
IP address blocks:        2801:80:25e0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Zp1nAbzKGfDUwHH3pVdmu8LcSZV6HKxh5Lu1JiwBfAB/0/DD03EB79FF5CF57286D6113E3E194B78A347552C.crl
                          rsync://rpki-repo.registro.br/repo/9Zp1nAbzKGfDUwHH3pVdmu8LcSZV6HKxh5Lu1JiwBfAB/0/DD03EB79FF5CF57286D6113E3E194B78A347552C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD03EB79FF5CF57286D6113E3E194B78A347552C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fb:30:a5:7f:01:52:74:dc:03:03:9e:0b:6a:d0:2e:2f:1a:89:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD03EB79FF5CF57286D6113E3E194B78A347552C
        Validity
            Not Before: Sep 10 11:12:40 2024 GMT
            Not After : Sep  9 11:17:40 2025 GMT
        Subject: CN=DF4685B435B30F0C77D5742BF7912F811BB3E209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:84:77:12:a7:ad:7a:e6:eb:03:fc:32:4a:da:
                    58:b9:97:69:33:0b:b4:f9:6f:66:2e:89:d1:42:62:
                    e0:9b:e0:39:90:80:49:a7:d5:74:e4:0e:b2:00:1c:
                    6f:36:52:1e:6c:16:34:25:c8:07:44:8d:e2:d8:9e:
                    5d:72:e9:0d:b1:89:a0:ca:52:4b:45:16:41:60:fc:
                    10:55:18:18:4c:3d:01:f7:f3:d5:6f:23:ee:b4:42:
                    23:32:a6:45:0d:0e:46:48:a6:b1:f8:ae:86:44:31:
                    f1:70:68:53:26:79:94:9f:e8:e4:bf:60:39:69:20:
                    b1:65:66:ca:c8:f5:59:50:79:c3:87:6b:b8:ea:99:
                    cb:8f:2f:f3:47:66:c2:05:8b:c5:31:b4:47:f4:89:
                    c1:46:da:8d:8a:3e:4c:d9:54:5e:83:a6:dc:4b:3f:
                    45:6f:ce:2a:f6:cc:98:99:24:82:9f:49:72:c0:93:
                    b8:c0:6b:58:7b:6f:44:31:73:88:9f:65:b9:98:ab:
                    ed:4c:30:99:da:a1:e1:e0:a0:0a:a4:2b:9b:fe:c6:
                    01:be:26:e8:57:e8:29:c9:11:4c:63:38:5f:7d:6d:
                    62:bf:4a:61:79:b0:ca:94:47:6b:d2:89:f5:b5:eb:
                    72:7f:d1:81:81:25:04:bc:a1:a9:47:c9:86:9f:26:
                    00:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:46:85:B4:35:B3:0F:0C:77:D5:74:2B:F7:91:2F:81:1B:B3:E2:09
            X509v3 Authority Key Identifier:
                keyid:DD:03:EB:79:FF:5C:F5:72:86:D6:11:3E:3E:19:4B:78:A3:47:55:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Zp1nAbzKGfDUwHH3pVdmu8LcSZV6HKxh5Lu1JiwBfAB/0/DD03EB79FF5CF57286D6113E3E194B78A347552C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD03EB79FF5CF57286D6113E3E194B78A347552C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Zp1nAbzKGfDUwHH3pVdmu8LcSZV6HKxh5Lu1JiwBfAB/0/323830313a38303a323565303a3a2f34382d3438203d3e20323638313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:25e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:fd:5a:b5:3e:e7:8b:54:11:c7:bf:76:f3:26:70:3f:7f:54:
         83:7b:74:bb:e8:fb:fd:bd:b0:34:b0:f2:5b:1c:e3:5a:28:ff:
         f1:53:78:89:cd:61:3c:73:a2:5c:9e:5d:3b:fd:e4:be:26:15:
         f0:4f:91:2f:56:ab:ae:bc:4f:c2:7c:67:f1:08:c4:dd:bc:ef:
         6f:53:53:6b:b9:30:90:52:69:bc:b7:de:4b:ef:6f:13:9b:a5:
         5a:3d:f6:50:f2:ee:82:5b:e2:d9:4c:4d:f2:29:5e:b3:ef:75:
         d0:03:cc:be:8f:0d:db:0f:16:4a:d2:d7:32:2e:74:b6:86:9f:
         fb:b9:b4:cf:23:c5:a8:f1:11:a5:cf:e7:08:61:0b:65:04:91:
         7c:29:1e:28:5a:3b:47:95:bc:9c:61:ac:13:7f:73:e4:c5:e3:
         dc:fd:07:dc:56:b3:00:7f:0f:74:0a:c0:0c:2b:da:d0:2a:da:
         07:9e:e6:f0:0e:8d:7e:2f:92:62:79:2f:31:70:ba:e2:1e:e0:
         b7:7c:6c:45:59:bf:5f:62:e2:83:3d:d1:b9:6b:99:a7:d9:cb:
         90:a7:9d:07:25:07:38:71:41:3f:8b:55:72:86:a5:1a:56:2c:
         ec:24:24:dd:d4:de:77:43:2f:fd:1e:12:54:a1:9e:69:cb:dc:
         a7:24:d0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:12 2024 by rpki-client on console-ams.rpki-client.org