Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a613a3a2f34382d3438203d3e20323634333434.roa
File:                     323830343a323637343a613a3a2f34382d3438203d3e20323634333434.roa (raw, json)
Hash identifier:          rTiIxkWEBV9SD4S3EqpFa+uTZfV5/ZB+pnxhFrLMSdQ=
Subject key identifier:   42:A8:21:0C:CF:AD:72:FD:D7:84:72:9C:55:2E:B1:43:E2:56:0F:8F
Certificate issuer:       /CN=513CE4A81796F944497410B832C764D2FEF2E43A
Certificate serial:       4D0DDC8136E8A432949B17B4EAA6B82A2E81F427
Authority key identifier: 51:3C:E4:A8:17:96:F9:44:49:74:10:B8:32:C7:64:D2:FE:F2:E4:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513CE4A81796F944497410B832C764D2FEF2E43A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a613a3a2f34382d3438203d3e20323634333434.roa
Signing time:             Wed 02 Oct 2024 14:58:26 +0000
ROA not before:           Wed 02 Oct 2024 14:53:26 +0000
ROA not after:            Wed 01 Oct 2025 14:58:26 +0000
asID:                     264344
IP address blocks:        2804:2674:a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/513CE4A81796F944497410B832C764D2FEF2E43A.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/513CE4A81796F944497410B832C764D2FEF2E43A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513CE4A81796F944497410B832C764D2FEF2E43A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0d:dc:81:36:e8:a4:32:94:9b:17:b4:ea:a6:b8:2a:2e:81:f4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513CE4A81796F944497410B832C764D2FEF2E43A
        Validity
            Not Before: Oct  2 14:53:26 2024 GMT
            Not After : Oct  1 14:58:26 2025 GMT
        Subject: CN=42A8210CCFAD72FDD784729C552EB143E2560F8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:bb:0f:a2:b4:7e:ec:90:7a:32:69:14:0f:
                    03:45:e9:d1:b0:d6:97:8b:11:3a:45:88:fd:01:9c:
                    d1:8a:81:f3:45:9c:e1:21:d8:44:99:aa:a2:ed:5d:
                    9b:7c:c2:af:50:5b:b6:54:7f:4e:3d:df:c2:42:69:
                    b4:49:2e:a1:f5:ec:66:49:b3:9e:06:6c:6c:2c:10:
                    6d:4a:ad:45:eb:61:bb:88:23:79:99:87:f9:ec:f0:
                    f2:5a:b3:ac:39:97:20:1a:4d:1d:85:5f:14:4c:e5:
                    f2:0c:71:83:78:28:bb:5d:ea:54:53:d1:80:3d:59:
                    c4:74:3d:33:96:88:bc:d6:9c:56:19:dc:ee:d2:07:
                    ee:46:09:00:24:0e:43:01:22:f7:e7:c2:07:f2:1f:
                    da:ae:42:da:b3:df:b0:6e:db:01:f9:6e:86:1c:f6:
                    4d:d3:41:90:02:68:e7:ab:fb:3e:74:89:2b:bb:b6:
                    57:c8:21:0c:4a:b6:b4:af:90:49:07:d4:b2:4a:a1:
                    0a:be:a3:8d:8b:bc:34:07:4d:54:84:9d:82:2d:41:
                    10:e5:e5:c8:66:fc:11:28:1a:ac:7c:b2:50:9f:45:
                    f3:4f:d9:2c:99:2b:41:a0:06:eb:88:48:13:02:76:
                    2e:cd:f4:73:39:2c:6d:56:34:dc:6f:fe:40:31:aa:
                    d9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A8:21:0C:CF:AD:72:FD:D7:84:72:9C:55:2E:B1:43:E2:56:0F:8F
            X509v3 Authority Key Identifier:
                keyid:51:3C:E4:A8:17:96:F9:44:49:74:10:B8:32:C7:64:D2:FE:F2:E4:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/513CE4A81796F944497410B832C764D2FEF2E43A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513CE4A81796F944497410B832C764D2FEF2E43A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a613a3a2f34382d3438203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:94:28:ea:bd:ef:02:83:d4:d7:16:a6:f8:32:41:d9:5f:13:
         a3:eb:9d:8b:05:5b:c8:a8:7e:3d:fb:a9:23:8f:7b:fe:50:4b:
         3f:87:f3:17:65:db:be:61:d5:68:3c:df:c3:ec:0c:44:46:cd:
         62:ec:e8:de:86:98:d4:68:2f:10:e8:74:9e:ae:f7:33:a8:1b:
         08:9b:76:38:67:60:30:78:3f:4f:43:e7:05:9a:39:d0:58:32:
         33:f1:7f:fd:13:3b:f3:5c:f3:90:9f:51:ee:15:09:50:82:a5:
         36:c6:0d:d5:90:62:f9:27:53:a3:f6:32:38:07:3f:c2:5c:ae:
         cd:ff:af:4f:fe:1e:7c:25:b7:b9:8b:c8:01:24:3d:6e:ed:5a:
         1a:0b:6b:e9:af:1d:25:b5:fa:98:88:e5:4a:b9:52:68:e5:b8:
         2d:dc:27:2c:75:30:33:8c:10:72:a0:af:19:a1:82:0d:61:ea:
         25:3d:7e:e0:53:9c:5e:bc:5a:ef:a0:f2:87:ba:0f:eb:37:54:
         32:d6:b3:05:83:c7:35:ea:a3:56:0f:11:16:91:b7:8c:85:e8:
         95:4a:8f:db:d3:ab:c8:ab:19:91:d4:b2:b3:c4:24:b5:a3:3e:
         61:52:52:3c:56:08:ba:cb:cd:96:2f:fd:f2:d1:ba:f1:98:fc:
         4c:57:3f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:48 2024 by rpki-client on console-fra.rpki-client.org