Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a3a2f33322d3332203d3e20323633343834.roa
File:                     323830343a313239303a3a2f33322d3332203d3e20323633343834.roa (raw, json)
Hash identifier:          /a5E7QFP8CPQrZkky/1WBfKSfPN/U1DkVyp6ssSICL8=
Subject key identifier:   1D:30:87:55:E6:49:98:8A:CB:30:08:02:FB:35:B2:30:C6:3C:2F:C8
Certificate issuer:       /CN=02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16
Certificate serial:       075857D3D981DF699C5A72E15B7684B56ACE349A
Authority key identifier: 02:A1:DA:D3:EF:C0:EE:0E:D4:7E:89:C1:1A:1C:A4:51:51:F6:8C:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a3a2f33322d3332203d3e20323633343834.roa
Signing time:             Fri 01 Nov 2024 13:44:15 +0000
ROA not before:           Fri 01 Nov 2024 13:39:15 +0000
ROA not after:            Fri 31 Oct 2025 13:44:15 +0000
asID:                     263484
IP address blocks:        2804:1290::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.crl
                          rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:58:57:d3:d9:81:df:69:9c:5a:72:e1:5b:76:84:b5:6a:ce:34:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16
        Validity
            Not Before: Nov  1 13:39:15 2024 GMT
            Not After : Oct 31 13:44:15 2025 GMT
        Subject: CN=1D308755E649988ACB300802FB35B230C63C2FC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:28:80:3c:72:75:34:c1:6b:51:35:da:4c:91:
                    33:98:11:57:7e:79:a8:b2:14:43:63:e4:5e:cc:56:
                    79:eb:03:ed:9a:28:aa:4d:8d:55:12:83:d2:bf:8b:
                    f0:4e:b3:e4:e4:d9:77:22:57:d6:cc:3a:94:0d:fc:
                    e1:52:25:87:d0:52:ac:da:51:58:1b:51:5b:40:e1:
                    50:51:47:6a:71:c9:c9:5f:4b:9b:79:8a:b5:0c:6f:
                    28:4e:33:2f:64:f9:ad:ee:f7:54:55:0b:91:81:4b:
                    5a:07:91:e3:0e:21:58:65:63:ee:aa:b7:47:8e:76:
                    db:42:23:20:e3:d4:2b:b7:25:48:69:fd:40:07:ba:
                    09:80:de:5f:7c:37:a2:ea:44:c7:9e:a5:c4:62:ce:
                    51:8f:c5:3c:a1:7e:65:6a:df:24:1f:a1:12:af:48:
                    a2:61:f8:13:08:66:50:21:13:bb:17:41:70:7c:19:
                    6b:c7:b6:80:56:51:33:fa:b5:cb:65:ad:83:eb:26:
                    76:38:5d:a3:1a:bc:36:cd:4c:4c:3a:49:ca:2a:45:
                    56:07:66:74:9a:3f:e9:8a:d6:d4:2a:1d:a8:ff:fc:
                    0f:b6:20:a0:fb:02:00:5c:eb:c0:a2:b0:bf:de:4f:
                    33:f6:61:af:ec:1b:86:0f:94:29:75:24:48:46:3b:
                    45:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:30:87:55:E6:49:98:8A:CB:30:08:02:FB:35:B2:30:C6:3C:2F:C8
            X509v3 Authority Key Identifier:
                keyid:02:A1:DA:D3:EF:C0:EE:0E:D4:7E:89:C1:1A:1C:A4:51:51:F6:8C:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a3a2f33322d3332203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1290::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:63:f1:1b:08:94:b3:4a:45:2a:11:ee:7c:8a:a1:0d:4d:65:
         e2:5e:9d:fb:dd:90:bb:f3:9a:b4:e7:40:4f:c2:aa:6d:cd:5d:
         d7:05:03:f0:9c:1d:bb:03:51:b0:9d:d7:b2:10:af:22:48:19:
         56:a6:11:85:57:01:6b:53:37:06:d4:3a:f4:f9:9c:dc:69:c8:
         49:41:b7:ca:c2:dc:b8:78:f1:1b:22:89:3e:13:c4:5d:f4:8a:
         e1:b7:04:d0:a8:65:1a:ff:66:ad:f6:ca:23:4c:6b:61:35:57:
         73:8b:09:ef:72:1d:bd:60:ef:d7:bb:b5:b5:10:7f:e6:a7:82:
         86:c1:31:c1:89:21:5a:12:c6:e3:c8:a2:e6:4a:51:9a:fa:6d:
         56:91:43:51:2c:61:ac:14:43:2c:9c:07:26:6f:a4:9b:8e:60:
         8d:16:79:52:a0:9d:86:72:64:b0:05:b2:66:5d:7c:8e:45:7a:
         c0:52:42:24:12:21:48:39:16:ed:17:d9:c6:64:9d:1b:fd:69:
         be:45:0c:cd:77:9d:f5:e7:9c:52:69:c0:63:36:53:36:5b:31:
         76:cc:d8:c7:39:29:4e:ad:9c:c4:5e:69:3c:81:75:74:c2:be:
         41:0a:ec:e6:1f:4e:c6:f9:d5:77:2c:8a:3a:69:d4:a8:f1:28:
         b7:e3:a6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:55 2024 by rpki-client on console-fra.rpki-client.org