Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a633030303a3a2f33342d3334203d3e20323633343834.roa
File:                     323830343a313239303a633030303a3a2f33342d3334203d3e20323633343834.roa (raw, json)
Hash identifier:          99GOlYNa187BaQIORv1TCFzmMf0mZU/LjeuhoUbZbcs=
Subject key identifier:   2D:AE:87:AC:73:95:D0:B1:2A:60:EF:96:51:D5:C3:ED:40:65:08:47
Certificate issuer:       /CN=02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16
Certificate serial:       2E6C5629CAD197EFBD95E57CBB1F55C88871AFE5
Authority key identifier: 02:A1:DA:D3:EF:C0:EE:0E:D4:7E:89:C1:1A:1C:A4:51:51:F6:8C:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a633030303a3a2f33342d3334203d3e20323633343834.roa
Signing time:             Fri 01 Nov 2024 13:45:03 +0000
ROA not before:           Fri 01 Nov 2024 13:40:03 +0000
ROA not after:            Fri 31 Oct 2025 13:45:03 +0000
asID:                     263484
IP address blocks:        2804:1290:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.crl
                          rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:6c:56:29:ca:d1:97:ef:bd:95:e5:7c:bb:1f:55:c8:88:71:af:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16
        Validity
            Not Before: Nov  1 13:40:03 2024 GMT
            Not After : Oct 31 13:45:03 2025 GMT
        Subject: CN=2DAE87AC7395D0B12A60EF9651D5C3ED40650847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:be:25:40:72:c4:1b:ae:64:2a:56:d4:a5:ec:
                    e2:5c:bd:bf:e4:d7:d8:3e:16:72:c1:c6:f6:f4:c8:
                    5d:78:b2:a8:76:12:e0:82:13:bf:bb:3b:da:fe:06:
                    e5:c4:b9:00:c5:c4:e3:a2:63:52:64:48:e5:cd:b4:
                    e7:ac:7e:42:7c:b4:06:d7:60:b0:09:bf:28:f4:b9:
                    7b:54:71:50:57:f1:6d:64:08:69:42:4a:70:0e:f5:
                    1c:37:4c:0d:08:26:0c:a6:6c:2d:38:ba:a2:0b:25:
                    55:d1:1a:1e:bf:8c:32:77:9e:6b:44:8f:b4:f2:96:
                    1a:ff:db:ad:7a:32:88:63:8c:e4:99:23:74:c7:37:
                    69:e0:3b:f3:32:d3:47:16:7a:51:d5:6f:fa:66:a3:
                    17:fa:e7:40:32:e8:28:24:ae:d0:64:08:b0:62:1b:
                    0d:df:fb:f3:31:3e:c7:63:71:df:98:08:00:4e:cd:
                    17:be:4a:c8:07:b9:73:a2:49:c4:d1:11:0f:e7:79:
                    94:94:8e:f5:a6:01:92:19:8d:ea:1d:f3:4f:04:a3:
                    84:41:d4:5f:ae:6b:0a:3c:d7:dd:50:b1:85:ea:1b:
                    72:79:9c:76:8c:5a:e2:2d:90:c0:7c:82:0f:1d:04:
                    f3:15:d1:67:77:09:33:fc:8c:0e:f1:34:aa:e2:f6:
                    25:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AE:87:AC:73:95:D0:B1:2A:60:EF:96:51:D5:C3:ED:40:65:08:47
            X509v3 Authority Key Identifier:
                keyid:02:A1:DA:D3:EF:C0:EE:0E:D4:7E:89:C1:1A:1C:A4:51:51:F6:8C:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a633030303a3a2f33342d3334203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1290:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4a:a7:1b:d0:d3:45:53:89:84:a9:d1:aa:d7:85:cb:87:99:b9:
         57:7a:92:9e:21:7c:ca:6a:47:f3:1e:f8:3a:76:8d:d1:fc:d4:
         73:db:c9:3b:52:93:b7:5e:1b:49:95:75:f4:bb:07:70:3d:ef:
         28:11:93:0c:72:41:c2:64:96:71:1e:35:d6:3c:a4:08:c8:0b:
         5b:68:0f:4e:39:a9:46:4f:ea:4e:75:04:93:5b:63:9f:58:9d:
         34:5e:b8:a4:b5:a3:21:0a:1f:4b:7c:fd:20:d3:35:9b:4f:7f:
         c2:0f:09:b9:e9:19:34:91:12:6a:b5:44:f5:1c:9d:4a:43:8a:
         dc:e8:df:f3:44:b2:d8:ea:7a:ef:97:de:78:9f:0b:79:fb:f8:
         0b:68:57:ee:62:ae:23:50:c3:70:fa:d8:7e:3e:a5:71:9e:25:
         69:dc:53:95:1c:64:d6:de:ac:01:d1:d2:a2:93:ab:98:a1:91:
         17:75:a8:42:77:45:ed:c2:d3:69:d0:1b:37:3e:74:48:54:52:
         d5:c6:b2:9e:58:af:99:27:4a:30:cc:81:80:66:ab:f7:4a:d9:
         b1:4c:ff:5a:c8:ec:18:5d:a5:8c:7e:bc:b1:e2:cf:e8:d3:af:
         64:77:3f:e0:34:a2:92:5d:2e:ce:d6:49:12:a9:e3:e4:70:ff:
         e0:45:1f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:55 2024 by rpki-client on console-fra.rpki-client.org