Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a313030303a3a2f33362d3336203d3e20323633343434.roa
File:                     323830343a313164633a313030303a3a2f33362d3336203d3e20323633343434.roa (raw, json)
Hash identifier:          16mOhy4bvkXmdlClKoTQMbPaaURmMhOaSJmfbWlC56s=
Subject key identifier:   2C:4C:B0:3C:79:C0:B0:FF:84:EA:0C:AE:B0:7C:D4:D8:26:95:4C:CF
Certificate issuer:       /CN=414013A25F77129C74B069C1772DF23C085FA9FC
Certificate serial:       225E47FA1D4FE8158081F2BBA36DD56979FED813
Authority key identifier: 41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a313030303a3a2f33362d3336203d3e20323633343434.roa
Signing time:             Thu 07 Nov 2024 01:23:51 +0000
ROA not before:           Thu 07 Nov 2024 01:18:51 +0000
ROA not after:            Thu 06 Nov 2025 01:23:51 +0000
asID:                     263444
IP address blocks:        2804:11dc:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 20:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:5e:47:fa:1d:4f:e8:15:80:81:f2:bb:a3:6d:d5:69:79:fe:d8:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414013A25F77129C74B069C1772DF23C085FA9FC
        Validity
            Not Before: Nov  7 01:18:51 2024 GMT
            Not After : Nov  6 01:23:51 2025 GMT
        Subject: CN=2C4CB03C79C0B0FF84EA0CAEB07CD4D826954CCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e2:bb:3d:b9:c6:fb:db:ff:ca:5c:c1:ed:3b:
                    fc:99:de:46:be:40:54:ae:16:ff:77:f4:63:1a:06:
                    30:86:b0:4f:5f:92:f8:63:e8:c7:87:13:42:12:08:
                    39:d7:41:5c:62:fc:1c:32:d9:a9:c3:02:54:c8:8c:
                    68:5b:13:90:66:10:50:7f:76:96:b2:24:62:f0:2e:
                    32:64:24:b4:42:f9:d2:8c:25:e3:fc:17:88:ba:32:
                    97:94:13:4b:a1:dd:37:30:75:13:68:4f:08:0c:2f:
                    e0:7f:07:0e:7f:9f:7d:a8:0a:f9:80:de:8d:9b:49:
                    d1:42:16:ad:d5:b1:91:f1:62:ae:77:6f:2b:5e:ea:
                    59:f8:60:8a:20:7e:e5:2b:d9:88:c3:35:58:08:27:
                    e3:47:62:c8:b3:68:30:6e:d8:09:61:1c:b8:d3:c5:
                    ec:80:b7:d0:70:54:14:28:96:cd:f7:67:e4:78:ff:
                    9c:cf:89:81:ec:45:06:5b:23:1b:28:81:02:f8:34:
                    b7:8d:40:23:ce:29:e3:2b:92:e9:4e:d2:b7:34:ef:
                    e7:88:24:b2:40:64:70:e6:d9:7a:24:fa:c5:50:88:
                    07:1f:d8:37:5c:3c:83:13:3b:ef:c4:7e:09:7b:0e:
                    ca:df:ae:b4:9c:0a:c7:06:db:c3:a5:b8:be:b1:40:
                    55:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4C:B0:3C:79:C0:B0:FF:84:EA:0C:AE:B0:7C:D4:D8:26:95:4C:CF
            X509v3 Authority Key Identifier:
                keyid:41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a313030303a3a2f33362d3336203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11dc:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9b:44:70:12:5d:57:6c:ba:52:3a:11:a6:8c:64:e9:16:15:3c:
         1e:93:5d:0e:da:0f:30:59:51:22:f4:ea:23:6a:75:f4:05:27:
         c5:69:ce:d4:48:b2:13:04:33:d2:d5:ef:0f:19:e5:04:7f:5c:
         2f:0b:0a:ca:17:f5:2b:39:3a:7c:97:19:26:d9:4a:ea:f7:1c:
         56:9a:aa:ed:4a:84:e7:36:05:3a:58:44:f3:1b:56:ce:bf:75:
         c3:13:35:5d:f6:be:74:a1:63:99:b9:c7:53:43:8b:70:7a:27:
         b3:3c:60:7f:e2:ed:db:8b:b8:be:8b:92:62:5a:8d:27:82:2b:
         c5:63:59:ad:7c:4f:2f:b8:3b:a3:53:52:e5:a0:f7:26:64:3c:
         c1:78:45:92:35:63:a9:82:7f:c3:23:c7:46:51:31:3b:c7:e1:
         1a:1d:17:04:43:59:ad:b8:44:09:4d:d8:7d:f0:39:11:79:07:
         f0:8c:f3:3e:8d:a1:92:8b:e0:e1:ac:67:ec:d3:85:44:e6:3b:
         4d:a4:d8:82:91:8a:74:32:b2:15:59:7e:34:94:c8:e4:80:be:
         79:8e:4b:c8:4c:c2:1e:43:46:64:4c:4c:b0:b3:34:36:01:c7:
         5d:d7:9e:f4:49:94:8f:00:44:bb:15:49:ca:4c:1c:73:d4:e5:
         e4:8b:64:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:54 2024 by rpki-client on console-fra.rpki-client.org