Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a633030303a3a2f33342d3334203d3e20323634333434.roa
File:                     323830343a323637343a633030303a3a2f33342d3334203d3e20323634333434.roa (raw, json)
Hash identifier:          ehDnTzwsIwICExJf99EZTYxuokHGlNvclu/Hb0PaoCk=
Subject key identifier:   07:EE:E7:75:CC:B7:83:60:37:AC:8E:C3:0B:90:FB:06:D2:E7:02:AB
Certificate issuer:       /CN=513CE4A81796F944497410B832C764D2FEF2E43A
Certificate serial:       3A307B3D86BA8CC7BC5F0FF71D6B0FFE77F4CF0F
Authority key identifier: 51:3C:E4:A8:17:96:F9:44:49:74:10:B8:32:C7:64:D2:FE:F2:E4:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513CE4A81796F944497410B832C764D2FEF2E43A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a633030303a3a2f33342d3334203d3e20323634333434.roa
Signing time:             Wed 02 Oct 2024 14:58:24 +0000
ROA not before:           Wed 02 Oct 2024 14:53:24 +0000
ROA not after:            Wed 01 Oct 2025 14:58:24 +0000
asID:                     264344
IP address blocks:        2804:2674:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/513CE4A81796F944497410B832C764D2FEF2E43A.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/513CE4A81796F944497410B832C764D2FEF2E43A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513CE4A81796F944497410B832C764D2FEF2E43A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:30:7b:3d:86:ba:8c:c7:bc:5f:0f:f7:1d:6b:0f:fe:77:f4:cf:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513CE4A81796F944497410B832C764D2FEF2E43A
        Validity
            Not Before: Oct  2 14:53:24 2024 GMT
            Not After : Oct  1 14:58:24 2025 GMT
        Subject: CN=07EEE775CCB7836037AC8EC30B90FB06D2E702AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7b:af:6d:71:0e:7f:80:0e:0f:bc:6c:7e:9f:
                    e8:89:a7:7c:9e:9e:bc:57:8d:de:38:be:ee:61:cd:
                    58:ad:fb:37:05:87:0e:b9:af:27:3f:4d:46:10:4a:
                    6e:52:64:0f:ad:db:49:d4:94:cb:d0:d7:d6:94:ec:
                    83:ce:ac:0a:91:fb:7a:d7:22:6e:7d:e6:8a:a1:27:
                    e2:e2:36:da:15:cc:17:54:6c:d8:88:b0:f4:9f:ea:
                    55:c4:ca:d6:07:32:0c:f1:be:63:c3:4b:a9:de:8a:
                    03:fb:b1:0d:f5:e4:d4:d0:17:ed:1a:3e:95:20:0c:
                    46:c1:32:e7:33:06:9e:ff:d2:3c:45:0e:f5:28:9e:
                    99:45:66:62:f2:6d:90:ae:39:8a:0a:2c:55:1d:83:
                    f7:f6:5b:97:d1:54:57:65:bd:ed:07:b9:f7:eb:c0:
                    d2:fc:6c:0f:6c:4f:78:8a:c2:cb:e8:0d:93:85:32:
                    f3:9b:25:b3:69:59:57:06:06:52:ef:f3:46:95:7e:
                    14:98:33:09:52:da:26:42:d9:71:d7:a6:4c:41:08:
                    d6:85:ef:b9:19:2d:03:a7:84:08:12:2d:5a:a0:0a:
                    44:0d:1a:c6:02:ac:ad:76:96:1d:cf:ef:50:3e:38:
                    5e:f3:88:82:87:29:47:96:3d:0e:d9:30:d4:96:c0:
                    3d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EE:E7:75:CC:B7:83:60:37:AC:8E:C3:0B:90:FB:06:D2:E7:02:AB
            X509v3 Authority Key Identifier:
                keyid:51:3C:E4:A8:17:96:F9:44:49:74:10:B8:32:C7:64:D2:FE:F2:E4:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/513CE4A81796F944497410B832C764D2FEF2E43A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513CE4A81796F944497410B832C764D2FEF2E43A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a633030303a3a2f33342d3334203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         44:07:c4:c1:1d:7a:87:ed:0f:c0:71:61:92:89:0b:0d:99:9a:
         1a:c1:56:71:bb:45:33:bb:91:00:63:90:8e:d6:84:54:34:24:
         53:c0:67:1d:37:b2:e8:19:16:8a:6c:c4:a1:3c:bf:a5:3c:17:
         75:e8:e4:dc:44:4b:05:51:90:9a:30:3b:ae:69:1d:dc:b3:32:
         b7:0d:6d:6b:70:f5:60:95:c6:cc:6b:38:aa:2f:7a:db:f9:a6:
         eb:47:f1:46:85:17:db:0e:c4:12:be:d4:de:d4:9a:04:19:5e:
         47:6c:f4:3c:9b:b4:73:9e:59:01:c9:df:b5:ba:83:d5:7f:8c:
         0f:cb:ce:f4:d3:36:58:fe:6d:c5:57:16:c4:0b:3e:28:7b:9c:
         15:56:28:66:c2:84:48:3e:9a:a6:69:98:22:55:9a:72:08:55:
         c9:fa:87:39:c8:c3:aa:45:21:67:6c:de:c6:f4:f2:f3:5e:85:
         03:6e:f2:a1:1c:fe:fb:dd:94:15:67:32:e5:8e:80:5f:7f:89:
         a8:d8:51:ae:af:c7:50:60:bc:b4:2e:3e:19:7b:ce:5c:ea:c6:
         04:ff:2a:32:66:e7:e6:94:c9:60:54:89:9e:00:99:a9:50:5f:
         2b:a5:05:6e:92:0c:9e:c6:ef:96:6f:7f:8a:f2:ac:49:79:f9:
         96:2e:90:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:13 2024 by rpki-client on console-ams.rpki-client.org