Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a3a2f33322d3332203d3e20323633343434.roa
File:                     323830343a313164633a3a2f33322d3332203d3e20323633343434.roa (raw, json)
Hash identifier:          i2BOz3hj24ceW43lOH1dNdFzaQQebdcINkY8p8mcWeE=
Subject key identifier:   24:23:1A:28:52:AB:31:BC:D8:FF:BD:75:C0:62:74:16:B5:18:54:78
Certificate issuer:       /CN=414013A25F77129C74B069C1772DF23C085FA9FC
Certificate serial:       5AA80F05783FAECB032235DB76ED67579446AF84
Authority key identifier: 41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a3a2f33322d3332203d3e20323633343434.roa
Signing time:             Thu 07 Nov 2024 01:23:51 +0000
ROA not before:           Thu 07 Nov 2024 01:18:51 +0000
ROA not after:            Thu 06 Nov 2025 01:23:51 +0000
asID:                     263444
IP address blocks:        2804:11dc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a8:0f:05:78:3f:ae:cb:03:22:35:db:76:ed:67:57:94:46:af:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414013A25F77129C74B069C1772DF23C085FA9FC
        Validity
            Not Before: Nov  7 01:18:51 2024 GMT
            Not After : Nov  6 01:23:51 2025 GMT
        Subject: CN=24231A2852AB31BCD8FFBD75C0627416B5185478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7e:9d:5d:a9:d0:4a:ab:ba:97:db:5b:46:f2:
                    4e:63:11:d2:30:3a:3c:22:5a:0d:b5:75:e1:bc:ed:
                    a9:f2:77:ba:1f:3a:70:13:44:67:7e:58:25:27:79:
                    55:a4:3e:0b:40:f1:10:74:28:bc:dc:b1:f0:5f:69:
                    a8:9f:d4:83:e7:6d:69:40:7a:d3:23:1e:fc:44:59:
                    0a:87:b3:31:0e:4a:5a:9e:42:e1:30:c9:39:33:15:
                    20:7d:56:c0:b6:7a:e1:2c:3c:4e:4d:0e:9c:05:4a:
                    44:c9:12:d8:d5:45:82:f3:70:f6:61:16:66:bf:a8:
                    1c:d8:71:ba:ee:9a:2f:71:ec:ff:2c:89:f6:4d:7e:
                    a8:55:c8:d3:af:87:34:d9:84:df:da:9d:0b:40:27:
                    da:47:90:c1:fe:49:49:02:d5:5b:e8:27:fe:08:be:
                    a7:36:f3:c7:1e:6b:91:99:1b:94:67:b9:59:09:18:
                    d4:14:a6:ec:6c:0c:e4:7c:43:32:ee:04:f3:c9:dd:
                    6d:ee:7f:83:12:50:3c:8f:9b:1e:07:fb:ae:d6:dc:
                    ed:e0:97:f4:fc:52:c2:64:74:0a:ca:93:4e:d2:41:
                    33:1e:7d:e2:44:0c:a9:37:ca:5d:e5:40:7d:66:59:
                    22:f4:58:a9:20:30:84:e3:8f:4e:af:52:6c:c5:25:
                    ec:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:23:1A:28:52:AB:31:BC:D8:FF:BD:75:C0:62:74:16:B5:18:54:78
            X509v3 Authority Key Identifier:
                keyid:41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a3a2f33322d3332203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:cf:0c:a8:f9:2f:bf:e6:9d:dd:7c:06:25:4a:8a:32:38:d8:
         d6:b2:83:37:ef:be:b7:1d:db:2b:8f:86:c4:f7:e4:a0:d2:07:
         47:00:da:63:3d:30:fc:60:24:8d:0a:1c:f1:27:34:7c:ff:11:
         54:e4:46:24:76:aa:18:cf:1b:10:ff:9e:26:e2:3b:92:2b:fe:
         a5:7e:fe:fe:e4:4d:3b:9e:25:56:d0:eb:03:ab:c6:32:2d:e5:
         5a:e7:a4:ad:9f:db:9b:cd:c7:84:2d:04:9e:15:31:1c:00:8a:
         a1:0c:82:9c:e6:0c:ba:cf:95:68:76:a6:20:43:6e:5e:e8:a7:
         a8:93:8c:43:8c:2e:14:0b:2f:62:dc:66:3f:fe:4f:bf:e0:d0:
         c6:15:cc:2e:6f:8e:19:39:f1:6f:7e:5f:03:d1:52:7b:ec:2e:
         78:3d:11:0e:c0:e5:3d:be:1d:6a:a5:64:f2:01:74:d8:e7:59:
         c4:9a:20:f8:d0:b3:85:87:a3:46:e3:04:46:f9:b6:45:f1:71:
         25:f4:79:bf:9c:df:bf:0d:a8:9e:bb:db:41:04:a2:a0:70:da:
         d3:55:95:bc:62:74:5b:25:60:e0:af:b9:9b:ff:5e:78:6a:2c:
         6c:e7:d1:a1:7d:d8:09:92:70:9a:12:17:f8:e7:38:e2:8d:03:
         98:c3:14:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:20 2024 by rpki-client on console-fra.rpki-client.org