Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353230303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a353230303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          aaUxzfmo1JKI78WdzIkn5wJMksHsNNaO7RYyW58Qwwg=
Subject key identifier:   F7:3D:B3:81:8E:70:42:76:85:89:A0:62:A1:70:6E:D8:5F:48:42:B7
Certificate issuer:       /CN=513CE4A81796F944497410B832C764D2FEF2E43A
Certificate serial:       41262965F2F509AE69172E9528B6EB4AEF501879
Authority key identifier: 51:3C:E4:A8:17:96:F9:44:49:74:10:B8:32:C7:64:D2:FE:F2:E4:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513CE4A81796F944497410B832C764D2FEF2E43A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353230303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Wed 02 Oct 2024 14:58:24 +0000
ROA not before:           Wed 02 Oct 2024 14:53:24 +0000
ROA not after:            Wed 01 Oct 2025 14:58:24 +0000
asID:                     264344
IP address blocks:        2804:2674:5200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/513CE4A81796F944497410B832C764D2FEF2E43A.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/513CE4A81796F944497410B832C764D2FEF2E43A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513CE4A81796F944497410B832C764D2FEF2E43A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:26:29:65:f2:f5:09:ae:69:17:2e:95:28:b6:eb:4a:ef:50:18:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513CE4A81796F944497410B832C764D2FEF2E43A
        Validity
            Not Before: Oct  2 14:53:24 2024 GMT
            Not After : Oct  1 14:58:24 2025 GMT
        Subject: CN=F73DB3818E7042768589A062A1706ED85F4842B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f2:bc:1c:95:55:58:b2:5c:85:4f:72:04:ad:
                    14:07:2a:ba:27:cd:57:54:dd:23:8d:33:76:40:50:
                    02:78:c2:18:4c:88:f2:2d:c0:37:01:5e:d9:62:64:
                    4d:2a:a7:96:b0:08:06:7e:ae:7e:8d:18:e1:3b:d5:
                    c5:83:5a:5e:92:4e:1f:4f:51:2b:b5:35:80:85:3f:
                    7a:3f:82:a4:96:c0:f3:72:14:39:06:3f:ac:03:2a:
                    6f:27:b8:36:63:cd:ee:01:9f:74:30:ca:6a:9c:75:
                    14:43:c6:08:91:39:7f:f9:36:3f:dc:fa:7c:a8:21:
                    01:fa:9f:7e:bd:78:6a:49:b2:c3:ee:6e:60:ad:de:
                    3f:01:8d:ea:a9:3f:5a:18:07:38:51:16:4f:66:ff:
                    1a:bd:ec:93:d0:97:fa:df:a0:95:ff:49:df:ad:95:
                    66:84:be:3d:d9:5b:72:c1:5b:4e:9e:33:e9:78:b9:
                    f3:97:85:3c:18:f9:d4:6f:74:46:68:9a:5c:4e:f3:
                    86:e0:ce:f1:9a:87:e0:cb:e2:50:a5:42:d7:cf:a3:
                    af:2b:33:98:b5:df:7e:7b:e1:d3:95:51:43:e9:46:
                    28:db:a1:fb:da:20:ee:34:0d:37:ba:46:0b:34:df:
                    dd:b1:5f:e6:9b:6c:b4:0a:9d:10:64:80:67:02:65:
                    e1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3D:B3:81:8E:70:42:76:85:89:A0:62:A1:70:6E:D8:5F:48:42:B7
            X509v3 Authority Key Identifier:
                keyid:51:3C:E4:A8:17:96:F9:44:49:74:10:B8:32:C7:64:D2:FE:F2:E4:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/513CE4A81796F944497410B832C764D2FEF2E43A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513CE4A81796F944497410B832C764D2FEF2E43A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353230303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:5200::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:2a:bd:76:63:81:0a:bd:92:c0:2d:03:8b:0c:bc:72:1f:84:
         19:b4:f4:48:8b:eb:32:e2:dd:da:81:2e:ad:cf:6b:6a:85:53:
         f2:ce:3b:c0:b9:7d:87:02:0e:69:42:36:7f:dc:2c:5f:3b:de:
         de:51:5d:ac:0d:6d:20:3f:6f:a8:6b:b1:fb:8c:b9:18:c1:df:
         8d:9e:7a:86:7b:95:a0:16:ed:03:1a:df:69:ad:e6:11:da:1c:
         52:9c:c7:34:a2:f7:c5:f9:dd:b8:7c:50:e6:4a:b1:63:7d:a5:
         49:98:53:ca:b5:f5:ec:fd:26:1d:21:63:0a:03:f4:be:d1:28:
         30:16:06:28:03:fe:d4:2f:74:05:b4:c5:34:3d:ee:9e:b0:25:
         35:15:8e:8e:37:a8:5d:41:dc:c5:90:a8:3e:eb:75:e5:85:ac:
         55:cf:57:85:59:14:39:2f:13:43:e8:35:56:74:72:df:b8:12:
         8f:20:aa:88:4c:a3:7e:6b:0e:f5:05:05:88:29:ab:81:f3:15:
         e2:9d:05:4e:48:6e:fa:4e:6f:1d:a9:e3:d1:19:b9:84:1b:87:
         8b:a3:6e:63:b2:46:b1:f6:e6:45:ee:f7:0e:82:dc:ca:1c:c2:
         02:5a:03:56:fa:3a:a0:1c:23:03:bc:4f:0b:3a:ea:d5:fc:91:
         c6:f0:b6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:48 2024 by rpki-client on console-fra.rpki-client.org