Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Az219Yhr1Lzsz8sSNVyCQ5oR1Z7zwRNSjSaMZgB3CsXo/0/323830343a356566303a3a2f33322d3438203d3e20323639303636.roa
File:                     323830343a356566303a3a2f33322d3438203d3e20323639303636.roa (raw, json)
Hash identifier:          vVqKZcS8QxHamf87Q2fScZk7jk8Zc6Tfby0kPr8uyc8=
Subject key identifier:   03:80:0A:8F:6C:87:A9:E0:CB:E2:34:ED:BF:C8:04:A3:3C:6A:E1:66
Certificate issuer:       /CN=E9707D71E9FD07BFFE06320F81CF39B1B46C26A8
Certificate serial:       711E07137D770242DD90E8898F5BCC0EEC532247
Authority key identifier: E9:70:7D:71:E9:FD:07:BF:FE:06:32:0F:81:CF:39:B1:B4:6C:26:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9707D71E9FD07BFFE06320F81CF39B1B46C26A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Az219Yhr1Lzsz8sSNVyCQ5oR1Z7zwRNSjSaMZgB3CsXo/0/323830343a356566303a3a2f33322d3438203d3e20323639303636.roa
Signing time:             Fri 15 Nov 2024 00:45:21 +0000
ROA not before:           Fri 15 Nov 2024 00:40:21 +0000
ROA not after:            Fri 14 Nov 2025 00:45:21 +0000
asID:                     269066
IP address blocks:        2804:5ef0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Az219Yhr1Lzsz8sSNVyCQ5oR1Z7zwRNSjSaMZgB3CsXo/0/E9707D71E9FD07BFFE06320F81CF39B1B46C26A8.crl
                          rsync://rpki-repo.registro.br/repo/Az219Yhr1Lzsz8sSNVyCQ5oR1Z7zwRNSjSaMZgB3CsXo/0/E9707D71E9FD07BFFE06320F81CF39B1B46C26A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9707D71E9FD07BFFE06320F81CF39B1B46C26A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:1e:07:13:7d:77:02:42:dd:90:e8:89:8f:5b:cc:0e:ec:53:22:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9707D71E9FD07BFFE06320F81CF39B1B46C26A8
        Validity
            Not Before: Nov 15 00:40:21 2024 GMT
            Not After : Nov 14 00:45:21 2025 GMT
        Subject: CN=03800A8F6C87A9E0CBE234EDBFC804A33C6AE166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:09:27:5c:25:fb:5e:7a:cc:9d:42:84:6e:c2:
                    f5:49:90:f2:2b:42:6e:4d:8c:62:f9:e9:a3:c1:0a:
                    ba:0b:43:7d:20:8f:e4:3a:ad:20:99:ee:88:39:2a:
                    15:9b:ef:76:b8:a1:67:c6:b6:59:0d:cb:dc:ae:11:
                    d3:6c:d4:c3:d7:94:2f:ef:b1:37:9c:f6:97:42:70:
                    72:9c:13:a8:7e:ef:75:97:fe:5b:4c:65:18:93:67:
                    d0:75:e2:62:23:57:84:ba:f3:2f:e8:42:4f:48:29:
                    52:8b:f1:a3:f7:f4:73:2d:9c:e6:39:32:ca:95:7a:
                    5a:62:2f:40:79:8d:f2:f6:7a:eb:ff:8f:d9:33:dc:
                    6b:33:16:6d:b4:03:2d:b6:f1:22:4f:49:4f:78:8e:
                    b8:03:ee:50:22:e7:e7:c1:06:b8:ae:98:04:3a:a3:
                    a8:97:58:86:32:cf:cf:ba:1e:92:55:0b:41:d8:23:
                    d5:ee:8e:5f:84:c3:c1:86:d5:a1:39:66:b8:58:a6:
                    55:04:e4:00:aa:6e:cd:dd:b6:0e:ba:15:a0:b6:a5:
                    9f:2b:23:eb:a7:c7:a2:9d:ed:76:a8:e2:37:e6:6a:
                    d4:7b:03:12:93:d3:9c:dc:1c:e2:80:38:d6:a9:8b:
                    dc:ce:b0:59:9b:96:a8:76:ea:e0:88:54:b5:9e:38:
                    67:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:80:0A:8F:6C:87:A9:E0:CB:E2:34:ED:BF:C8:04:A3:3C:6A:E1:66
            X509v3 Authority Key Identifier:
                keyid:E9:70:7D:71:E9:FD:07:BF:FE:06:32:0F:81:CF:39:B1:B4:6C:26:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Az219Yhr1Lzsz8sSNVyCQ5oR1Z7zwRNSjSaMZgB3CsXo/0/E9707D71E9FD07BFFE06320F81CF39B1B46C26A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9707D71E9FD07BFFE06320F81CF39B1B46C26A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Az219Yhr1Lzsz8sSNVyCQ5oR1Z7zwRNSjSaMZgB3CsXo/0/323830343a356566303a3a2f33322d3438203d3e20323639303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ef0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:b9:7e:cd:f1:12:58:50:dc:00:35:0c:66:90:25:45:dc:5f:
         28:ab:f9:03:25:79:02:90:cb:c5:79:44:d4:3d:c7:8f:dd:8a:
         b3:53:bd:75:e3:bb:73:f6:d9:79:c9:13:d9:9b:0d:f2:f4:3c:
         d6:7f:41:52:47:e0:40:57:c8:59:6f:d5:76:04:06:fc:27:8b:
         96:ca:b9:0f:c2:6b:4b:6e:04:3b:20:8d:34:09:65:f7:f1:ca:
         0e:ea:76:d6:fe:42:06:64:bb:cb:8b:74:46:5e:0f:29:42:91:
         5d:1f:6c:6e:5a:48:b9:0e:17:bd:0f:f7:56:d6:41:34:a6:ed:
         04:45:49:67:39:69:e2:7b:b4:c4:f6:82:7b:cc:96:41:7d:6c:
         bf:8e:6b:be:93:12:d4:78:67:1e:1c:90:54:66:84:ad:9c:c1:
         f5:da:27:aa:af:86:3e:53:57:5c:c9:34:c0:4f:a3:25:7c:9d:
         c1:b9:b0:a5:46:78:86:74:1e:15:67:36:3a:fb:5b:ab:6a:a8:
         51:19:4f:c9:04:e1:25:9a:d1:57:6d:dd:56:37:e0:8e:3b:ab:
         15:86:97:f6:28:b7:74:24:01:be:91:e2:63:b0:16:67:43:d6:
         86:15:02:07:34:f2:57:b9:76:ac:c2:dd:16:8f:fa:19:57:85:
         05:2f:dc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:35 2024 by rpki-client on console-ams.rpki-client.org