Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/323830343a343963383a3a2f33322d3438203d3e20323637323033.roa
File:                     323830343a343963383a3a2f33322d3438203d3e20323637323033.roa (raw, json)
Hash identifier:          Nr1G2SXQ8yPU4l+xeXEvg1AJhtWEEYhnw6h7mZi6nw8=
Subject key identifier:   CF:96:3C:A9:42:C6:49:80:0B:1D:62:8C:F2:D0:68:23:71:C7:CF:3D
Certificate issuer:       /CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
Certificate serial:       162CA2FC4FC645ED55B3F419495C7E9E2571832F
Authority key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/323830343a343963383a3a2f33322d3438203d3e20323637323033.roa
Signing time:             Mon 08 Jul 2024 19:43:03 +0000
ROA not before:           Mon 08 Jul 2024 19:38:03 +0000
ROA not after:            Mon 07 Jul 2025 19:43:03 +0000
asID:                     267203
IP address blocks:        2804:49c8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 Nov 2024 21:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2c:a2:fc:4f:c6:45:ed:55:b3:f4:19:49:5c:7e:9e:25:71:83:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
        Validity
            Not Before: Jul  8 19:38:03 2024 GMT
            Not After : Jul  7 19:43:03 2025 GMT
        Subject: CN=CF963CA942C649800B1D628CF2D0682371C7CF3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d6:fb:3c:f7:8e:fd:58:e0:3f:c7:c4:38:4a:
                    1a:b6:47:c8:6d:3a:4b:60:b5:9d:13:20:37:12:65:
                    33:eb:7b:75:2f:bb:ae:00:0d:9d:55:a6:85:12:ec:
                    e0:e7:fe:50:06:cf:81:1c:51:17:e0:05:a0:67:6f:
                    71:81:b7:a0:6f:1f:f1:e3:e6:51:2b:4a:f2:83:23:
                    90:aa:c6:0f:e0:61:18:31:5a:6a:9b:3a:a5:63:02:
                    8a:f7:85:c9:3c:85:c3:a7:ae:59:af:8d:1e:72:8b:
                    0f:45:b3:07:e5:f8:0e:fc:63:1c:4c:cf:54:4c:67:
                    88:87:40:b6:32:94:a2:6c:fd:24:16:2e:e6:00:a5:
                    67:46:17:af:fb:43:43:c7:22:9d:2c:12:7d:2b:04:
                    3f:ca:1c:01:f4:cf:a8:77:90:dd:76:9a:0a:ca:35:
                    b6:81:fe:c8:1e:64:0c:b3:72:01:07:aa:1c:3e:9b:
                    8b:08:21:e9:83:4a:b5:26:60:0d:2d:49:2f:28:3c:
                    00:4d:3c:c1:03:de:ff:22:01:6b:b6:80:04:28:1a:
                    83:42:eb:01:71:47:45:ea:3c:ab:81:75:7f:e0:dd:
                    fe:a5:ca:25:20:1d:64:d0:6e:d6:92:2d:2d:cf:e0:
                    0c:89:27:f7:3a:3b:24:ff:b8:d7:65:2a:6f:8f:0f:
                    e9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:96:3C:A9:42:C6:49:80:0B:1D:62:8C:F2:D0:68:23:71:C7:CF:3D
            X509v3 Authority Key Identifier:
                keyid:0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/323830343a343963383a3a2f33322d3438203d3e20323637323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:49c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:c6:e3:75:37:35:91:2b:5f:33:ed:09:b0:47:13:3a:a2:31:
         36:7c:b0:19:c1:f0:83:40:0e:89:7e:34:6e:88:0e:a9:36:d2:
         8a:44:c1:7b:1f:3a:af:bd:40:ba:3f:9b:ac:7f:c1:c3:e4:42:
         ac:3c:58:0a:a0:1a:49:aa:e4:37:59:80:50:08:f9:a0:09:e7:
         a7:f0:dd:92:67:8e:1a:2c:41:43:cc:8d:0a:69:29:eb:26:c8:
         59:91:6e:f2:33:2f:ae:42:f6:b7:56:b5:3f:b7:c9:97:21:88:
         6a:9a:d2:d3:33:76:cd:ea:4e:98:53:85:61:ff:8c:3e:f4:9c:
         00:98:a5:33:53:17:a4:e0:0d:01:4c:a6:38:12:34:e0:52:0b:
         85:25:53:13:87:a6:c6:df:3c:76:88:f4:6d:49:f4:09:4d:19:
         6f:4e:c7:08:ce:55:bd:41:17:74:0c:ad:55:c0:c1:93:66:0b:
         fe:e3:df:d6:5a:e5:67:3d:3f:b8:f9:eb:1d:19:6d:51:cd:ec:
         16:12:89:d7:09:ef:10:44:86:fa:7e:34:bf:9c:9b:73:0d:ac:
         3a:1a:08:8d:ef:a7:72:22:d8:ce:b6:1d:a7:94:b3:da:30:f2:
         01:39:cb:bf:52:96:03:5a:dc:bb:1c:cb:ff:8d:fb:9d:62:3e:
         85:c4:19:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 02:55:59 2024 by rpki-client on console-ams.rpki-client.org