Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/323830343a386563303a3a2f33322d3332203d3e203532353837.roa
File:                     323830343a386563303a3a2f33322d3332203d3e203532353837.roa (raw, json)
Hash identifier:          0wX5Hjwz17G8iWZ+tz2QUZ20OXKosVrjBaeAU75yuzA=
Subject key identifier:   14:21:EF:58:EA:5D:DA:C8:56:33:0E:A4:8B:D3:D2:D9:4E:1A:D2:FB
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       2820669A84F5F20E0A594A1006ACD1C3CD4B7FAA
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/323830343a386563303a3a2f33322d3332203d3e203532353837.roa
Signing time:             Wed 12 Jun 2024 23:54:51 +0000
ROA not before:           Wed 12 Jun 2024 23:49:51 +0000
ROA not after:            Wed 11 Jun 2025 23:54:51 +0000
asID:                     52587
IP address blocks:        2804:8ec0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl
                          rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:20:66:9a:84:f5:f2:0e:0a:59:4a:10:06:ac:d1:c3:cd:4b:7f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: Jun 12 23:49:51 2024 GMT
            Not After : Jun 11 23:54:51 2025 GMT
        Subject: CN=1421EF58EA5DDAC856330EA48BD3D2D94E1AD2FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b7:0e:80:af:c1:5c:1f:e6:fc:93:eb:bf:52:
                    03:60:2d:4b:45:2c:07:b9:5c:9d:a7:13:39:4c:a3:
                    48:1b:9a:98:3b:df:19:2e:c9:9e:ff:54:f2:70:b4:
                    09:d9:29:40:01:ae:64:f8:bf:8a:0d:88:22:0e:1a:
                    f9:a9:6f:1e:91:9b:c8:a6:a1:1c:1b:e5:62:38:51:
                    5e:83:1b:31:ab:5b:35:6d:87:ab:7e:69:5b:c7:ac:
                    79:0c:a4:91:da:5f:c1:db:6f:4f:03:96:b1:f7:0b:
                    d9:ca:aa:73:d0:05:ef:07:20:7f:f6:56:19:29:b6:
                    ae:74:52:5b:f0:f7:43:79:17:bf:c9:89:2e:75:c5:
                    43:13:81:4e:88:6c:20:a7:22:32:96:0a:a4:d4:28:
                    ba:e3:7b:c0:2f:22:f9:35:dc:43:bf:30:ed:95:85:
                    66:da:85:5b:91:4d:a8:db:aa:13:2a:07:60:bb:f0:
                    c5:4a:7b:e2:b5:26:80:a6:c6:8e:9a:27:3a:93:9d:
                    df:0f:22:ce:4d:12:f6:9e:bc:c6:fb:81:52:c0:21:
                    39:d7:d3:f5:41:3a:e8:0b:a9:50:a6:fb:69:e1:c6:
                    d8:cf:de:83:76:4c:5b:02:10:58:54:4e:96:41:20:
                    d6:60:0c:bb:88:a5:a8:cd:fe:95:7f:f2:d0:23:ce:
                    67:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:21:EF:58:EA:5D:DA:C8:56:33:0E:A4:8B:D3:D2:D9:4E:1A:D2:FB
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/323830343a386563303a3a2f33322d3332203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         da:50:72:c4:81:fb:e4:5d:e9:e6:2d:a1:46:a3:b6:dc:33:48:
         24:74:0c:26:8e:87:52:69:36:71:dd:5e:23:a4:7a:cc:a0:36:
         c1:ae:6b:9c:2a:e4:05:1d:52:83:0f:37:6f:23:17:eb:9d:17:
         86:cc:e4:f9:88:a3:6e:28:ce:b3:06:16:3f:84:97:c4:77:bf:
         31:b0:ac:80:7f:fe:cf:e8:cd:99:a8:b4:bf:79:f3:ce:35:b8:
         ad:50:b6:d4:0a:96:cf:35:4c:99:c2:39:35:ce:a8:de:cd:ed:
         14:c3:93:bb:b0:8d:c2:b7:bc:54:05:fc:91:fe:8b:ca:72:fc:
         1e:ab:8b:3d:1b:3c:19:76:31:26:a6:f3:c7:3a:36:13:f0:ed:
         41:95:b6:b0:66:d6:ff:c0:0c:d4:52:c0:e2:87:29:1f:bc:bb:
         58:bf:e2:eb:e2:b7:38:3d:87:b8:44:6a:92:a8:bc:dd:42:49:
         af:29:ae:fe:eb:9b:22:fc:24:8d:da:85:dc:2c:12:9d:f9:eb:
         42:74:df:2d:84:e8:9b:bf:48:4f:12:b3:1d:43:f4:d9:c6:dd:
         1f:91:7f:fb:4d:9c:21:72:6a:0f:ec:c4:82:67:47:2f:63:6f:
         57:dd:15:c9:8b:d7:bf:87:c1:27:57:c1:80:ad:db:1a:0f:c2:
         7d:36:9b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:31 2024 by rpki-client on console-fra.rpki-client.org