Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4mQikTpuZK9jAnSmSwszC5oESHbfHULSHccZX1xfsL4/0/323830343a333164383a3a2f33322d3438203d3e20323635303430.roa
File:                     323830343a333164383a3a2f33322d3438203d3e20323635303430.roa (raw, json)
Hash identifier:          2b2O3kZ46hsq3yvl92HVtn+qQY2ypAFQl2ET9iZTZoU=
Subject key identifier:   78:E9:A2:3E:95:7A:48:51:D9:C2:41:AD:84:CE:E2:97:5C:CB:4F:6A
Certificate issuer:       /CN=1FFC6049160D8E0F36BEA4D14F8B68844C2CBD2C
Certificate serial:       762BB26EFBD3659F261173CB194AE47625979903
Authority key identifier: 1F:FC:60:49:16:0D:8E:0F:36:BE:A4:D1:4F:8B:68:84:4C:2C:BD:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FFC6049160D8E0F36BEA4D14F8B68844C2CBD2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4mQikTpuZK9jAnSmSwszC5oESHbfHULSHccZX1xfsL4/0/323830343a333164383a3a2f33322d3438203d3e20323635303430.roa
Signing time:             Mon 04 Nov 2024 14:03:16 +0000
ROA not before:           Mon 04 Nov 2024 13:58:16 +0000
ROA not after:            Mon 03 Nov 2025 14:03:16 +0000
asID:                     265040
IP address blocks:        2804:31d8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4mQikTpuZK9jAnSmSwszC5oESHbfHULSHccZX1xfsL4/0/1FFC6049160D8E0F36BEA4D14F8B68844C2CBD2C.crl
                          rsync://rpki-repo.registro.br/repo/C4mQikTpuZK9jAnSmSwszC5oESHbfHULSHccZX1xfsL4/0/1FFC6049160D8E0F36BEA4D14F8B68844C2CBD2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FFC6049160D8E0F36BEA4D14F8B68844C2CBD2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:2b:b2:6e:fb:d3:65:9f:26:11:73:cb:19:4a:e4:76:25:97:99:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FFC6049160D8E0F36BEA4D14F8B68844C2CBD2C
        Validity
            Not Before: Nov  4 13:58:16 2024 GMT
            Not After : Nov  3 14:03:16 2025 GMT
        Subject: CN=78E9A23E957A4851D9C241AD84CEE2975CCB4F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:22:36:a7:c7:42:64:0c:8a:e4:df:35:46:dc:
                    d0:1c:f9:33:18:4e:68:77:f6:e3:89:fe:d6:f9:ee:
                    82:af:5f:f9:88:c9:79:63:5e:dc:a5:24:3c:42:99:
                    e6:16:05:5a:c2:6c:4b:08:16:08:5b:4d:89:41:eb:
                    58:01:1f:53:1b:ac:ab:4f:90:36:b8:4e:eb:9f:8f:
                    1c:ae:d0:ba:90:2a:7f:12:8a:96:2c:4f:fd:74:69:
                    f1:ee:0d:0b:39:fe:22:c1:8e:b5:5c:a0:77:a1:52:
                    fa:3b:55:fa:47:b1:1f:e8:c1:cc:16:d4:60:b6:64:
                    a2:0b:52:30:2d:41:f9:db:c4:c2:fd:da:e9:93:5a:
                    92:dd:3a:04:61:8c:26:1e:0a:c1:91:fe:92:7b:bf:
                    09:60:95:8c:ae:e9:f2:58:9f:7f:ac:aa:c6:b8:02:
                    ce:ae:e6:8d:78:1d:b7:6e:56:24:11:24:e7:62:9d:
                    ce:1a:7b:12:14:39:18:9d:4c:0a:7c:97:ce:d2:02:
                    e7:01:20:c9:4a:82:4d:9e:08:5f:00:bd:f2:af:61:
                    db:e9:30:7b:eb:dc:f9:27:c5:bf:d3:0a:f9:12:fd:
                    d1:33:e9:2d:0e:0e:ee:89:c6:fb:4d:ca:99:7b:5a:
                    65:5f:4d:5e:33:04:d0:0b:0d:98:fd:11:6b:72:5c:
                    5c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E9:A2:3E:95:7A:48:51:D9:C2:41:AD:84:CE:E2:97:5C:CB:4F:6A
            X509v3 Authority Key Identifier:
                keyid:1F:FC:60:49:16:0D:8E:0F:36:BE:A4:D1:4F:8B:68:84:4C:2C:BD:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4mQikTpuZK9jAnSmSwszC5oESHbfHULSHccZX1xfsL4/0/1FFC6049160D8E0F36BEA4D14F8B68844C2CBD2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FFC6049160D8E0F36BEA4D14F8B68844C2CBD2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4mQikTpuZK9jAnSmSwszC5oESHbfHULSHccZX1xfsL4/0/323830343a333164383a3a2f33322d3438203d3e20323635303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:13:3c:9b:50:e4:b1:49:f0:7a:56:26:a5:ed:1a:80:9e:15:
         d1:64:e3:82:ab:ce:aa:fa:c0:41:c3:49:a2:4e:f8:1e:19:35:
         8a:2c:b6:85:6e:8b:5b:0f:9f:eb:9b:da:35:2a:34:31:7c:74:
         30:0d:ee:9d:69:3b:58:5f:9c:df:7f:f0:4b:b5:5e:38:01:06:
         5d:fe:5b:74:d4:2c:d2:dc:db:5d:39:37:80:53:e5:39:32:95:
         55:b9:36:23:46:fa:5e:83:70:59:81:fb:b5:08:5e:fd:3f:ec:
         19:b9:03:df:e4:a1:cd:10:12:bb:19:81:f7:4d:04:72:ae:ad:
         7f:47:fc:6c:91:3e:0e:2b:76:4b:cf:a3:52:95:c0:82:d3:f9:
         51:56:10:0e:d5:8d:0f:40:eb:0e:c9:78:24:bf:23:a5:3e:bb:
         55:00:c2:66:79:e0:66:75:e1:9f:bc:a8:f2:e2:2b:da:5d:d5:
         5a:2d:b0:cc:c7:0c:b1:58:87:68:75:a5:4e:eb:3e:4e:b0:b6:
         9e:f6:d6:5b:56:e4:0d:55:4e:d0:38:b4:29:af:d6:2a:66:7d:
         c6:b6:ab:8f:cb:bd:8b:24:7a:56:ad:ff:4d:3d:bd:ff:06:5a:
         e5:eb:76:63:23:5c:91:78:f3:50:96:93:b2:93:fa:66:91:4d:
         10:4a:0c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:38 2024 by rpki-client on console-fra.rpki-client.org