Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/323830343a6363633a3430303a3a2f34382d3438203d3e20323632383237.roa
File:                     323830343a6363633a3430303a3a2f34382d3438203d3e20323632383237.roa (raw, json)
Hash identifier:          EdMfivCYqcZAldD7jDnkLAsQZyCxR6nTf4X/9I+GaGQ=
Subject key identifier:   10:E7:78:C9:47:7F:2F:53:EB:A4:5F:E3:3E:12:95:C1:D8:1B:9F:B0
Certificate issuer:       /CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
Certificate serial:       77DD0FC2DB2FC334BF79FF5EEFF589AF58CFFBC3
Authority key identifier: 2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/323830343a6363633a3430303a3a2f34382d3438203d3e20323632383237.roa
Signing time:             Fri 23 Aug 2024 20:01:38 +0000
ROA not before:           Fri 23 Aug 2024 19:56:38 +0000
ROA not after:            Fri 22 Aug 2025 20:01:38 +0000
asID:                     262827
IP address blocks:        2804:ccc:400::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl
                          rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 Nov 2024 12:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:dd:0f:c2:db:2f:c3:34:bf:79:ff:5e:ef:f5:89:af:58:cf:fb:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
        Validity
            Not Before: Aug 23 19:56:38 2024 GMT
            Not After : Aug 22 20:01:38 2025 GMT
        Subject: CN=10E778C9477F2F53EBA45FE33E1295C1D81B9FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:95:b8:30:3f:43:00:75:8b:b5:4f:14:2e:c4:
                    b8:fe:b3:c9:79:fb:77:a8:a5:c7:b4:81:62:81:87:
                    66:92:72:31:89:81:9c:1e:1a:1a:95:02:aa:98:c9:
                    a7:36:97:b3:86:e4:5f:33:99:5c:60:d5:d9:8e:4e:
                    66:29:b6:8d:80:0a:93:be:f8:5b:3b:83:59:99:a8:
                    c4:a6:0d:bc:f8:7b:47:07:9f:22:8c:5a:ae:ed:d4:
                    1c:b8:7a:08:ff:99:f1:4a:a6:b4:d6:3f:6c:87:d8:
                    90:cd:e4:17:8b:c3:4e:3c:72:de:4b:fb:e0:61:16:
                    70:df:0b:f4:06:0b:5d:18:c3:f3:47:f7:00:13:c1:
                    f7:c0:44:f2:35:be:db:dd:29:74:2b:9e:9f:6a:a3:
                    98:52:b6:46:d2:ec:e8:15:f3:61:fd:9c:d0:bb:1b:
                    4a:a2:b9:88:81:14:d6:34:e7:f3:6c:b1:8d:52:1b:
                    a9:f3:d6:ea:3b:5c:bc:53:f9:70:b2:1a:53:3a:d5:
                    5b:a2:29:55:61:d7:86:58:63:ad:eb:0d:3b:81:de:
                    ed:0e:f0:14:3a:dc:64:7c:e5:b3:bd:48:d6:fa:46:
                    72:6c:d7:62:2a:5d:26:18:36:f4:c3:cb:65:ea:9c:
                    fa:e6:65:9b:63:f6:04:44:27:22:1d:03:55:6a:74:
                    f3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E7:78:C9:47:7F:2F:53:EB:A4:5F:E3:3E:12:95:C1:D8:1B:9F:B0
            X509v3 Authority Key Identifier:
                keyid:2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/323830343a6363633a3430303a3a2f34382d3438203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ccc:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:e6:89:2b:4a:8f:99:8c:7a:54:4d:5c:e8:6a:0f:5d:85:82:
         21:29:25:54:84:ac:da:fb:cf:66:e6:dd:a4:ec:2a:25:37:c7:
         11:f3:3b:0f:47:a8:20:ba:e6:cf:b7:27:e7:25:26:b9:b7:b3:
         6b:56:68:92:34:d4:24:7f:3e:a4:61:d5:21:3d:ce:a3:e0:57:
         1b:3f:87:8e:2d:84:c4:7c:05:d1:85:f6:37:a7:55:30:62:bf:
         0e:2e:3e:7c:92:a3:c6:e2:89:05:49:39:08:e1:c5:45:af:d3:
         a8:38:fa:64:74:f0:80:8b:7a:50:9c:d4:f1:21:28:16:ac:09:
         9d:e6:64:f5:fd:c3:e1:5d:c3:7d:ea:bc:e6:7c:ee:c7:76:0c:
         ef:ca:c9:5b:07:50:53:5f:b1:80:19:30:bb:d2:a2:d4:61:52:
         ee:92:bd:19:6b:49:c0:ba:1b:2f:c5:4d:95:0a:88:91:18:99:
         59:3d:e3:cd:af:56:9f:6b:44:9f:ab:39:b6:09:f5:61:28:3c:
         4a:ce:7b:07:74:d3:3c:07:65:32:df:a5:77:df:2e:d6:5f:92:
         47:69:c8:1c:7d:88:ef:20:ed:28:59:1f:0b:2b:dc:41:0d:39:
         2e:43:2b:1d:77:4a:d0:08:29:0f:29:3d:06:b5:1c:b2:0e:bb:
         79:56:1b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 13:22:24 2024 by rpki-client on console-fra.rpki-client.org