Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/323830343a313661343a353032303a3a2f34342d3434203d3e20323632393737.roa
File:                     323830343a313661343a353032303a3a2f34342d3434203d3e20323632393737.roa (raw, json)
Hash identifier:          S7PQsb2IqTEtE1QCum8Cd1/pkvJ2gGt5SVR3HJpa1/0=
Subject key identifier:   C1:1F:6D:05:D5:48:C8:26:9A:D0:8C:81:DF:68:15:9D:A6:82:F9:18
Certificate issuer:       /CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
Certificate serial:       42F3578D3F6F813885AD0E4B21E1ACEECC763C51
Authority key identifier: B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/323830343a313661343a353032303a3a2f34342d3434203d3e20323632393737.roa
Signing time:             Wed 22 May 2024 17:45:46 +0000
ROA not before:           Wed 22 May 2024 17:40:46 +0000
ROA not after:            Wed 21 May 2025 17:45:46 +0000
asID:                     262977
IP address blocks:        2804:16a4:5020::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl
                          rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f3:57:8d:3f:6f:81:38:85:ad:0e:4b:21:e1:ac:ee:cc:76:3c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
        Validity
            Not Before: May 22 17:40:46 2024 GMT
            Not After : May 21 17:45:46 2025 GMT
        Subject: CN=C11F6D05D548C8269AD08C81DF68159DA682F918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cc:52:58:e2:6d:4c:d2:87:5d:d2:3e:b8:1c:
                    8c:ce:01:5b:25:78:25:93:f4:12:f0:e8:61:9d:20:
                    89:01:cd:f9:cf:8b:e3:f2:24:b2:0a:ea:42:27:e1:
                    f0:a0:d2:82:a2:18:0a:2f:68:78:61:3f:0e:9f:7f:
                    75:53:e6:81:c9:9f:f2:32:65:40:91:cf:c9:4a:1d:
                    d9:50:f6:f0:32:1f:44:f3:72:ef:4d:79:63:0b:a1:
                    b0:44:65:9a:f1:fa:f6:8d:fa:db:98:de:f8:b4:2e:
                    09:4c:89:f4:fe:86:d2:aa:ec:bd:a7:cb:96:51:03:
                    45:9a:a0:22:07:af:10:d2:d4:2a:fd:70:d0:74:36:
                    ff:58:2b:b9:34:bd:4a:2c:43:da:aa:0b:09:9d:cd:
                    da:9d:20:be:95:30:4b:0f:dc:40:ab:dd:1b:e4:48:
                    13:01:da:66:15:08:d7:30:f5:01:f6:2c:fa:95:b1:
                    50:98:77:d6:a4:13:c9:c1:74:85:e8:77:6d:30:af:
                    03:34:57:24:0c:8f:9f:40:0d:62:bc:25:0b:06:56:
                    f9:5f:62:09:01:5b:5d:85:fa:ca:3f:4a:12:d2:88:
                    fa:13:58:67:05:e5:68:cb:86:df:c3:36:76:e0:aa:
                    09:ce:69:51:1b:ff:42:81:04:48:66:3e:2c:8b:6a:
                    6a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1F:6D:05:D5:48:C8:26:9A:D0:8C:81:DF:68:15:9D:A6:82:F9:18
            X509v3 Authority Key Identifier:
                keyid:B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/323830343a313661343a353032303a3a2f34342d3434203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16a4:5020::/44

    Signature Algorithm: sha256WithRSAEncryption
         1e:00:0d:16:48:86:32:e2:dd:33:c7:5a:e8:f6:7f:2a:42:e6:
         ae:45:a5:ee:a5:b6:9e:4a:f3:a2:46:37:8c:3f:2d:df:7e:4c:
         cc:e5:e1:6b:75:04:ed:8f:38:2f:a6:e9:64:eb:a7:c2:b6:7f:
         81:33:d3:40:a3:b5:4b:86:88:c1:84:d4:44:a1:e8:dc:9d:1e:
         5e:b2:62:1e:65:f8:d5:d0:2a:fa:ca:54:66:3c:b6:12:d1:10:
         26:6e:01:a8:d0:80:7d:26:17:c0:7d:7f:5b:b7:03:11:08:86:
         8a:7c:fe:f2:49:d7:af:ba:8d:42:45:16:43:4e:09:36:26:10:
         b8:75:90:c2:19:98:b9:45:c6:32:b2:ab:c3:43:5a:45:79:75:
         e9:68:b9:20:59:e1:0e:3d:82:6a:34:e4:a2:18:12:c1:f1:78:
         44:77:71:d6:34:e2:a3:39:c6:3e:bc:a7:ab:45:e4:d8:00:16:
         14:05:1e:a4:8e:3d:ed:3e:87:42:2a:cd:61:73:3b:f8:67:2e:
         06:98:36:bd:7c:3e:83:dd:fc:74:c8:bf:86:d7:08:2a:9d:44:
         28:6f:a7:db:30:44:21:b4:20:e3:9a:5c:cf:5b:ab:1f:56:d0:
         d4:5f:1e:02:a3:82:34:80:db:66:f3:13:1f:33:ff:56:18:43:
         f0:b2:b7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:11:00 2024 by rpki-client on console-fra.rpki-client.org