Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8N6B8FZQofTLvdD6pp7t5WZF1fbRjWKbDoGqfFzSLx2/0/323830343a6163343a3a2f33322d313238203d3e203532393230.roa
File:                     323830343a6163343a3a2f33322d313238203d3e203532393230.roa (raw, json)
Hash identifier:          +atvB05bRo1XXIwQw1uTova03JkTN+xEHaj84Ih0VvQ=
Subject key identifier:   FA:C0:E7:34:77:09:8C:FF:DE:11:BE:06:9B:B5:DB:A8:CA:0D:CC:C2
Certificate issuer:       /CN=D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E
Certificate serial:       718F5D4E3C7C4F825ECD4402D125245BEC3FE78A
Authority key identifier: D9:8B:5C:19:0E:3B:C6:22:8F:4D:9C:40:5E:3C:F4:FA:3C:0E:51:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8N6B8FZQofTLvdD6pp7t5WZF1fbRjWKbDoGqfFzSLx2/0/323830343a6163343a3a2f33322d313238203d3e203532393230.roa
Signing time:             Fri 02 Aug 2024 18:29:57 +0000
ROA not before:           Fri 02 Aug 2024 18:24:57 +0000
ROA not after:            Fri 01 Aug 2025 18:29:57 +0000
asID:                     52920
IP address blocks:        2804:ac4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8N6B8FZQofTLvdD6pp7t5WZF1fbRjWKbDoGqfFzSLx2/0/D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E.crl
                          rsync://rpki-repo.registro.br/repo/C8N6B8FZQofTLvdD6pp7t5WZF1fbRjWKbDoGqfFzSLx2/0/D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8f:5d:4e:3c:7c:4f:82:5e:cd:44:02:d1:25:24:5b:ec:3f:e7:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E
        Validity
            Not Before: Aug  2 18:24:57 2024 GMT
            Not After : Aug  1 18:29:57 2025 GMT
        Subject: CN=FAC0E73477098CFFDE11BE069BB5DBA8CA0DCCC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:30:bb:01:99:8b:87:0b:79:06:ac:9f:b8:06:
                    e3:d0:41:37:e7:b4:85:67:dd:be:ac:e0:2e:f4:be:
                    9d:11:bf:fc:fc:3e:6b:45:81:a5:c8:b9:18:54:9d:
                    8c:c1:59:4c:17:1c:c8:9b:03:21:cc:ef:73:1d:ce:
                    ae:ee:d8:1f:9c:d6:55:7b:ae:04:52:ff:2d:c8:20:
                    3b:11:ba:ee:7c:a3:58:6c:86:80:61:02:dd:37:a7:
                    64:37:49:6f:67:d3:23:09:5a:b1:b5:b7:89:6d:b6:
                    b7:35:13:a3:2a:57:7a:5f:94:72:da:d7:36:2a:bf:
                    f5:0d:f3:b4:56:af:0f:7a:2b:4d:93:93:02:2e:f4:
                    57:bb:86:c7:40:5a:8a:4d:d4:d3:d5:87:d3:a1:26:
                    78:b0:23:27:fb:b8:70:8e:60:aa:87:83:97:d5:02:
                    83:1f:c5:03:e7:a8:da:be:c3:dd:f2:04:2b:97:8f:
                    6d:7b:c5:fc:41:41:d3:86:91:1b:2f:fb:bf:67:ce:
                    0d:06:e9:d0:91:6f:95:28:98:75:33:ae:67:02:c6:
                    5d:d9:b8:93:28:67:11:3a:a5:d6:3c:59:10:a9:6d:
                    56:46:06:b1:0a:96:0a:0b:3e:eb:d3:f8:d4:d8:b3:
                    28:90:95:08:77:d7:83:14:d6:d9:75:e9:0a:f7:91:
                    39:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C0:E7:34:77:09:8C:FF:DE:11:BE:06:9B:B5:DB:A8:CA:0D:CC:C2
            X509v3 Authority Key Identifier:
                keyid:D9:8B:5C:19:0E:3B:C6:22:8F:4D:9C:40:5E:3C:F4:FA:3C:0E:51:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8N6B8FZQofTLvdD6pp7t5WZF1fbRjWKbDoGqfFzSLx2/0/D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8N6B8FZQofTLvdD6pp7t5WZF1fbRjWKbDoGqfFzSLx2/0/323830343a6163343a3a2f33322d313238203d3e203532393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ac4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:b8:c8:d3:30:3a:3c:f1:d8:8e:26:28:34:ef:a5:07:10:fc:
         69:d5:31:11:38:a8:82:54:64:9a:18:8c:24:d7:85:c7:58:e0:
         28:a1:60:2d:07:26:d4:ad:8e:e1:94:ae:bc:80:df:23:d4:96:
         5d:0b:a8:84:f6:0e:16:99:a1:21:9d:e8:4e:ea:30:6d:9e:10:
         da:06:87:e1:1d:a6:dc:f5:33:74:da:20:22:05:c4:52:03:bb:
         e8:d8:f4:77:be:10:59:f7:89:70:80:ad:27:e1:32:d6:bf:cb:
         ba:4e:dc:d9:fe:99:f1:52:4c:88:00:19:c2:fc:15:80:b3:bb:
         e1:2c:56:c1:3f:ca:1c:f9:b0:6b:23:b8:e3:71:5a:4b:9c:69:
         f1:41:82:7b:d3:ae:78:9c:c2:a9:e6:33:6d:e7:7b:de:70:e9:
         a6:52:6a:10:63:87:1f:cc:46:a8:a0:0d:c3:59:1d:a9:f2:71:
         ab:f1:fe:6a:ad:ae:e0:4e:4a:a2:36:79:f4:ed:30:fb:da:f1:
         c0:7e:1f:51:9b:78:60:09:de:f0:4f:e7:b0:c7:e2:c0:b8:fd:
         bd:fd:1c:7a:a9:68:42:3e:80:c7:86:76:ff:69:03:86:13:19:
         09:57:c0:3c:e7:bf:fb:04:89:8a:1e:b1:77:46:52:6b:d7:ff:
         7d:35:17:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:56 2024 by rpki-client on console-fra.rpki-client.org