Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/323830343a386664633a3a2f33322d313238203d3e20323733353137.roa
File:                     323830343a386664633a3a2f33322d313238203d3e20323733353137.roa (raw, json)
Hash identifier:          Vg9f8pJBE8A+Jidrm0Qom9uSFa089hk8ia+2oE44njc=
Subject key identifier:   D8:D4:3A:81:71:8E:51:AE:8D:76:71:93:8C:2C:5D:6C:92:5F:5F:49
Certificate issuer:       /CN=A2E28E9F8644B6F21F026644C14C380CDCA6B11C
Certificate serial:       1D70276D95385E91E485BE2A49B9ADF47B51FFB6
Authority key identifier: A2:E2:8E:9F:86:44:B6:F2:1F:02:66:44:C1:4C:38:0C:DC:A6:B1:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/323830343a386664633a3a2f33322d313238203d3e20323733353137.roa
Signing time:             Mon 23 Sep 2024 18:12:55 +0000
ROA not before:           Mon 23 Sep 2024 18:07:55 +0000
ROA not after:            Mon 22 Sep 2025 18:12:55 +0000
asID:                     273517
IP address blocks:        2804:8fdc::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.crl
                          rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:70:27:6d:95:38:5e:91:e4:85:be:2a:49:b9:ad:f4:7b:51:ff:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E28E9F8644B6F21F026644C14C380CDCA6B11C
        Validity
            Not Before: Sep 23 18:07:55 2024 GMT
            Not After : Sep 22 18:12:55 2025 GMT
        Subject: CN=D8D43A81718E51AE8D7671938C2C5D6C925F5F49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:40:fc:37:b6:79:ae:a0:17:2f:7f:fc:7b:60:
                    6d:61:7a:8d:2e:b2:7b:a8:31:b1:65:0e:77:3d:69:
                    29:ec:d8:d1:29:b3:f2:79:26:96:1a:58:a7:2e:9e:
                    eb:82:fc:a8:b2:06:13:9b:50:55:9e:21:52:91:9e:
                    dc:0d:58:03:2e:34:d9:f3:60:17:ae:2e:16:62:c1:
                    56:62:20:a5:cf:2a:87:8b:d3:ee:7a:d0:ff:7a:41:
                    25:3c:55:90:bf:de:60:a7:69:b0:95:06:a1:5f:71:
                    f0:b3:8b:06:db:17:90:57:f2:8c:ba:fd:21:47:08:
                    4c:85:9d:0c:f3:af:f4:38:6b:81:90:ca:48:90:a8:
                    37:3a:5c:04:72:82:5c:f8:55:dc:5a:04:ab:d0:5a:
                    92:10:bf:6b:78:17:f6:67:01:53:b0:8e:8c:8f:30:
                    83:d1:27:a6:7d:4a:f8:0e:fd:8c:90:fb:86:2e:bd:
                    40:ad:ae:2f:36:f5:4b:2c:5f:7f:f0:59:b1:d1:3e:
                    9f:76:f3:9b:63:0e:e8:c1:a1:a9:0a:15:8c:41:3c:
                    70:bf:12:03:be:b6:30:11:5c:69:4c:c4:b4:0d:e1:
                    05:c9:ce:79:a3:00:84:37:06:96:20:c1:20:13:fe:
                    67:e5:19:ba:76:ae:c8:cc:9c:0d:2e:b9:cd:33:87:
                    d9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D4:3A:81:71:8E:51:AE:8D:76:71:93:8C:2C:5D:6C:92:5F:5F:49
            X509v3 Authority Key Identifier:
                keyid:A2:E2:8E:9F:86:44:B6:F2:1F:02:66:44:C1:4C:38:0C:DC:A6:B1:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/323830343a386664633a3a2f33322d313238203d3e20323733353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:9a:1a:d1:99:7f:b6:5f:ae:a2:21:24:80:0e:2c:f0:b8:2a:
         4f:de:80:b2:a8:07:36:9e:1b:0f:d2:76:86:ac:88:07:e9:26:
         d3:87:31:f9:5e:bc:da:94:51:96:6c:73:85:e2:5f:46:0a:5a:
         09:6a:75:0e:c3:f5:9b:1e:7b:2e:3d:65:e2:2a:67:90:7a:9b:
         96:dc:67:78:5d:71:87:51:21:c6:7a:74:bb:7a:7b:41:1d:b9:
         d5:3a:2a:0b:81:4e:f1:f9:50:f4:ed:46:c6:70:70:0c:ed:01:
         6f:dc:d1:ac:4a:ab:e4:e6:52:9b:f5:74:ba:6e:89:c0:cc:7f:
         a1:12:a7:ba:e9:04:55:ca:ee:70:96:07:20:1e:c4:fc:54:9f:
         73:4c:d5:33:f3:a7:25:55:56:e3:5b:38:7c:8e:55:34:86:8e:
         f4:87:d5:60:64:2b:d8:27:54:56:f7:73:3f:3b:1e:ba:78:f7:
         30:59:eb:76:26:d3:88:8c:d2:ed:d1:0a:b4:14:05:8f:a4:c0:
         e9:e1:7b:4e:8b:af:35:5d:47:19:22:7d:3a:06:cc:8b:cc:8c:
         ba:91:a2:45:6a:d5:0b:20:55:fe:77:05:c2:df:1c:db:af:72:
         ad:15:ad:58:59:bb:7b:27:42:94:5e:19:53:a0:dc:db:be:63:
         b6:6d:dc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:34 2024 by rpki-client on console-ams.rpki-client.org