Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/323830343a313134303a3a2f33322d3336203d3e20323633363636.roa
File:                     323830343a313134303a3a2f33322d3336203d3e20323633363636.roa (raw, json)
Hash identifier:          0aL9IX0hK14GNIgUFihaNU6h1TKfTtwa6KBXBOh4igc=
Subject key identifier:   4A:0C:CB:B9:48:52:5E:4C:3A:A3:93:33:A6:F6:12:E3:9D:BA:5F:0D
Certificate issuer:       /CN=08D977485835B00780D91B6CA4A1090CDA5D9B10
Certificate serial:       1C8D3C4B1995DDE6A8FF0A142C726EFCBA01C2C8
Authority key identifier: 08:D9:77:48:58:35:B0:07:80:D9:1B:6C:A4:A1:09:0C:DA:5D:9B:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/323830343a313134303a3a2f33322d3336203d3e20323633363636.roa
Signing time:             Thu 04 Apr 2024 15:05:02 +0000
ROA not before:           Thu 04 Apr 2024 15:00:02 +0000
ROA not after:            Thu 03 Apr 2025 15:05:02 +0000
asID:                     263666
IP address blocks:        2804:1140::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.crl
                          rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:8d:3c:4b:19:95:dd:e6:a8:ff:0a:14:2c:72:6e:fc:ba:01:c2:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08D977485835B00780D91B6CA4A1090CDA5D9B10
        Validity
            Not Before: Apr  4 15:00:02 2024 GMT
            Not After : Apr  3 15:05:02 2025 GMT
        Subject: CN=4A0CCBB948525E4C3AA39333A6F612E39DBA5F0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8f:ad:ab:c9:1a:e5:b8:8e:17:99:a2:8a:63:
                    bf:63:34:d5:b1:d4:81:d6:9e:06:83:56:5d:00:42:
                    e9:e8:bc:1e:d6:5b:28:b8:3c:a4:6e:5c:bc:57:19:
                    cd:18:46:b3:74:a9:c1:2c:b9:7f:7d:20:4e:c6:53:
                    4b:5c:04:a7:7d:71:cd:cd:82:af:e5:a4:54:7c:ff:
                    61:e0:f5:36:a0:e5:3e:87:70:51:34:d5:37:de:67:
                    14:d9:30:0b:bc:2c:b6:a5:c3:05:1c:bd:34:9f:9b:
                    10:83:e3:8a:c4:4c:4f:d5:1d:14:5d:be:62:23:42:
                    c7:bb:2c:00:0e:c9:9a:0c:7f:70:d2:7b:36:c1:b0:
                    e9:ca:22:7f:6e:f0:7d:80:73:c6:9c:4e:e3:bb:4e:
                    e4:c3:c7:57:9f:f4:b1:d1:ed:a3:8c:89:64:79:2d:
                    3f:54:08:13:a9:81:57:33:87:41:1b:fe:59:a6:03:
                    a4:fd:3f:cd:47:d8:d2:82:a8:b1:1f:20:06:db:20:
                    26:e8:04:e8:21:8a:fd:08:b6:46:5d:6c:af:58:ab:
                    7b:16:de:05:31:3a:78:ed:5e:34:29:95:4f:90:f5:
                    9f:64:55:a5:ba:c5:83:59:ca:23:a1:64:9e:2e:04:
                    48:af:af:57:50:42:2b:dd:71:8a:c0:ff:b4:35:24:
                    7b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0C:CB:B9:48:52:5E:4C:3A:A3:93:33:A6:F6:12:E3:9D:BA:5F:0D
            X509v3 Authority Key Identifier:
                keyid:08:D9:77:48:58:35:B0:07:80:D9:1B:6C:A4:A1:09:0C:DA:5D:9B:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/323830343a313134303a3a2f33322d3336203d3e20323633363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1140::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:cb:e7:50:3f:d7:5d:fd:c2:1c:32:98:ca:02:62:e1:64:cb:
         9e:38:d6:0e:f4:49:7a:f7:e5:d8:df:54:d9:6a:f5:20:ae:aa:
         0f:a4:ce:5c:08:6e:20:f4:a8:cb:58:34:89:cb:de:dc:e1:9e:
         fe:bb:10:bb:f7:a8:2a:ba:98:23:08:3f:50:6a:d4:5e:39:86:
         ef:36:8c:19:27:f6:fd:d0:c2:27:dd:02:eb:36:02:49:21:12:
         66:79:d0:51:2a:ce:e7:46:cb:d7:38:72:a2:61:2b:75:cf:79:
         79:3e:78:8a:3d:0c:ea:b7:c9:64:5a:12:53:03:ac:8a:a0:b9:
         cb:83:d8:3d:c4:2a:4e:65:83:8b:ac:d0:61:ca:42:93:2c:a3:
         35:88:4a:95:d1:87:f7:d1:6d:01:ce:43:8b:53:46:31:67:4c:
         f2:06:4c:1a:a6:79:1c:57:78:d8:aa:31:97:5a:3b:c3:be:4b:
         25:33:0b:6b:a4:32:ce:06:1f:ea:a3:75:b5:bd:53:65:2f:56:
         22:3e:95:62:ff:e3:d6:d4:38:01:dd:29:2d:2a:ab:3b:3d:97:
         76:97:52:d1:b5:be:36:a4:40:0e:9f:7e:ed:d2:0b:8b:0e:04:
         2f:9d:76:84:6e:34:d6:29:9e:dd:dc:da:be:c6:52:f5:28:d1:
         2b:53:c8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:58 2024 by rpki-client on console-fra.rpki-client.org