Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a3a2f33362d3336203d3e20323633343434.roa
File:                     323830343a313164633a3a2f33362d3336203d3e20323633343434.roa (raw, json)
Hash identifier:          wH4PeRD8VW2TVReFlSWLBSSFrY7hacTA9+M3Fnl7478=
Subject key identifier:   7E:5D:8C:84:74:FE:CB:0B:6A:82:D4:39:8A:43:40:47:8B:DE:05:C6
Certificate issuer:       /CN=414013A25F77129C74B069C1772DF23C085FA9FC
Certificate serial:       597D0B435684A40DC93D29413EAE81A88897576B
Authority key identifier: 41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a3a2f33362d3336203d3e20323633343434.roa
Signing time:             Thu 07 Nov 2024 01:23:50 +0000
ROA not before:           Thu 07 Nov 2024 01:18:50 +0000
ROA not after:            Thu 06 Nov 2025 01:23:50 +0000
asID:                     263444
IP address blocks:        2804:11dc::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7d:0b:43:56:84:a4:0d:c9:3d:29:41:3e:ae:81:a8:88:97:57:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414013A25F77129C74B069C1772DF23C085FA9FC
        Validity
            Not Before: Nov  7 01:18:50 2024 GMT
            Not After : Nov  6 01:23:50 2025 GMT
        Subject: CN=7E5D8C8474FECB0B6A82D4398A4340478BDE05C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:34:ff:12:e8:d8:34:07:e0:d8:86:e0:db:ac:
                    ab:04:1f:e7:04:05:86:ae:83:7a:eb:d0:57:b8:33:
                    b8:d3:a7:15:14:d8:0f:2c:a9:a5:0b:d2:82:92:fd:
                    f0:95:d7:c6:f4:8e:d8:6d:40:2e:48:76:4e:e1:83:
                    f8:5e:b5:ab:85:4f:c0:d4:5c:63:48:c3:9c:da:57:
                    e2:39:65:e8:ab:77:2d:db:80:92:b9:d7:e1:06:42:
                    78:57:84:1f:e1:b6:96:9f:5d:e5:d2:ae:7a:2f:fd:
                    ae:66:b1:72:24:b0:51:9f:88:50:83:df:05:67:4e:
                    10:f7:ac:1c:e3:4b:ae:98:14:48:6b:29:9d:f6:21:
                    65:c8:8a:0e:81:3f:06:e3:2b:8c:70:ce:1c:4c:d8:
                    df:40:01:ee:d5:8b:53:2d:c3:b2:18:35:cd:5c:c9:
                    fd:53:8d:0f:bc:32:4d:b1:55:de:b9:83:ff:2b:67:
                    78:1a:c2:9f:8d:75:da:95:21:52:5c:80:a8:bc:f8:
                    fd:76:17:39:cd:7a:71:6c:fe:a3:06:ca:51:47:68:
                    d5:a5:0a:36:83:3a:37:e1:04:4e:3b:ce:a5:a1:27:
                    a1:13:07:77:2e:a6:51:8e:cf:02:73:bf:87:52:d8:
                    00:35:6d:dc:93:19:70:55:03:27:74:35:37:77:2a:
                    d5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5D:8C:84:74:FE:CB:0B:6A:82:D4:39:8A:43:40:47:8B:DE:05:C6
            X509v3 Authority Key Identifier:
                keyid:41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a3a2f33362d3336203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11dc::/36

    Signature Algorithm: sha256WithRSAEncryption
         8f:9d:d3:5a:a5:cd:4d:0a:98:76:d7:7c:6e:8e:96:4a:f3:9f:
         7f:99:59:45:99:f4:85:ba:a3:96:c2:c2:eb:26:49:b1:51:8b:
         73:e1:a6:02:ab:cc:56:d7:1a:3c:24:81:f5:d1:a8:de:d5:6c:
         8a:26:f6:1a:bc:b3:01:f6:14:65:73:fe:36:a4:63:74:bd:20:
         4f:a8:d0:a7:07:b6:ac:6a:54:43:dd:bc:08:91:46:7d:0c:6e:
         24:59:c4:f8:c2:e0:90:99:13:cc:1b:52:f0:8e:22:e9:bc:71:
         90:e9:95:58:fe:ec:e4:eb:a1:22:00:b2:e1:13:24:e0:46:36:
         1a:13:9d:a1:95:8c:07:ea:3c:37:e9:34:5f:90:81:d6:7c:d7:
         fa:c8:7c:74:d8:f4:e4:30:d6:46:a8:53:e2:ce:48:16:92:42:
         f9:3e:cf:8a:ee:eb:7b:45:f3:41:72:7d:eb:24:8e:26:9a:a0:
         e6:f1:08:61:79:aa:75:7f:e0:35:11:37:a4:34:f4:97:f5:17:
         df:1a:b1:f4:b8:76:d3:a1:c5:ec:7f:e6:cd:5d:91:56:69:f7:
         23:0b:f9:6c:14:09:f6:7f:f7:a8:d6:dd:57:e7:8b:df:b9:bb:
         69:be:eb:50:37:1b:81:c4:b4:32:ee:02:39:47:41:ea:a7:d8:
         96:8d:62:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:26 2024 by rpki-client on console-ams.rpki-client.org