Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/323830343a31303a3a2f33322d3438203d3e203238323939.roa
File:                     323830343a31303a3a2f33322d3438203d3e203238323939.roa (raw, json)
Hash identifier:          HVGGAuV3e360nfnhr58x5RudNqAFOHMJNcs1FVbKMOU=
Subject key identifier:   F7:88:88:AF:C2:F0:11:64:1C:B4:83:40:76:CE:43:F2:69:AC:99:34
Certificate issuer:       /CN=2980DBB4CE53A385512CBB87747D8CA1ADD09AEC
Certificate serial:       2BF18A7F089CA08EBB9F21773DAEB23146D6E96A
Authority key identifier: 29:80:DB:B4:CE:53:A3:85:51:2C:BB:87:74:7D:8C:A1:AD:D0:9A:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/323830343a31303a3a2f33322d3438203d3e203238323939.roa
Signing time:             Mon 28 Oct 2024 18:37:19 +0000
ROA not before:           Mon 28 Oct 2024 18:32:19 +0000
ROA not after:            Mon 27 Oct 2025 18:37:19 +0000
asID:                     28299
IP address blocks:        2804:10::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.crl
                          rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 20:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f1:8a:7f:08:9c:a0:8e:bb:9f:21:77:3d:ae:b2:31:46:d6:e9:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2980DBB4CE53A385512CBB87747D8CA1ADD09AEC
        Validity
            Not Before: Oct 28 18:32:19 2024 GMT
            Not After : Oct 27 18:37:19 2025 GMT
        Subject: CN=F78888AFC2F011641CB4834076CE43F269AC9934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:85:61:88:de:8a:ac:95:12:df:73:e3:a9:40:
                    0d:e1:b6:3c:7d:7e:48:4e:0b:9b:5d:90:f3:2d:76:
                    8a:07:30:60:6e:f3:86:97:09:78:a7:d3:6f:9b:97:
                    54:74:0c:ee:1f:ba:55:d8:ef:de:2c:67:da:84:47:
                    b3:1f:01:48:72:d2:75:bd:fd:3c:49:0d:27:c8:19:
                    35:b8:5a:83:5b:24:c2:fc:88:82:5c:be:c0:9c:02:
                    24:e9:e1:36:55:ce:d1:b5:03:39:08:b2:42:85:a9:
                    0a:4d:75:23:5d:38:05:9f:a8:77:58:15:26:9b:dd:
                    9e:ba:4c:2d:63:db:b9:64:4c:cf:55:74:25:f9:03:
                    53:ab:6f:53:c5:35:89:8c:4f:52:5e:a0:1a:42:36:
                    8b:9f:ad:ac:ff:b1:bc:31:1f:57:d9:3f:77:22:13:
                    51:7b:c4:b1:db:a3:70:a4:4f:79:20:a2:92:f2:31:
                    5b:e5:3c:fd:39:e7:9e:6d:c8:57:b1:29:bf:80:f6:
                    8a:9d:3a:3a:be:b4:ea:70:0b:23:b5:e1:a6:33:e0:
                    1b:89:26:40:fa:56:5b:6f:d9:c1:2d:59:39:84:c9:
                    5e:62:84:03:6a:f2:4d:3c:56:03:ee:19:6e:15:a9:
                    8d:f6:ec:96:91:e0:91:3c:89:fd:9c:e0:a4:1c:5a:
                    3d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:88:88:AF:C2:F0:11:64:1C:B4:83:40:76:CE:43:F2:69:AC:99:34
            X509v3 Authority Key Identifier:
                keyid:29:80:DB:B4:CE:53:A3:85:51:2C:BB:87:74:7D:8C:A1:AD:D0:9A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/323830343a31303a3a2f33322d3438203d3e203238323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:18:ca:30:2b:99:cc:60:da:27:a0:71:3d:3e:2c:9c:9d:b4:
         7a:6d:36:d5:ed:1c:c7:18:b4:f6:ef:da:6e:a6:d1:5e:20:b3:
         5b:8d:b5:8a:be:f5:f8:58:f1:27:e2:1e:ec:af:39:8d:d5:19:
         89:e4:4b:b5:e5:e9:2a:b7:68:63:c6:96:e5:43:40:2e:68:3f:
         dc:6e:91:19:4e:df:f2:f7:7b:4f:4a:af:97:54:9d:a4:87:15:
         3c:fb:77:04:f6:f2:ee:0c:0a:6f:c4:c1:9b:ae:29:5c:21:2a:
         10:d7:c5:5d:e8:97:8b:2c:ed:2f:ae:42:70:c7:83:75:11:46:
         ec:0a:f3:a8:4c:4a:5b:ce:00:98:6d:c6:2e:2c:0e:2f:4d:b9:
         7a:55:5f:ba:2f:ff:f1:f9:c9:bd:8f:ee:ff:99:0a:f6:6d:46:
         30:7d:ab:10:b4:c4:99:f9:ad:5c:49:45:b9:89:70:ec:a6:33:
         38:8b:2e:0f:16:60:37:3a:48:56:8e:bc:02:bc:29:ff:8e:c0:
         19:c5:ef:9c:a4:c6:cd:df:d1:f2:25:8e:ca:35:dd:40:44:4e:
         37:0c:c8:f2:40:27:50:2b:15:10:90:67:46:45:5b:a6:e9:06:
         57:22:d5:1b:3c:4d:dd:a7:c8:18:be:39:ba:fd:84:2e:fd:2b:
         aa:ea:c5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:54 2024 by rpki-client on console-fra.rpki-client.org