Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/323830343a353330343a3a2f33322d3438203d3e20323638353537.roa
File:                     323830343a353330343a3a2f33322d3438203d3e20323638353537.roa (raw, json)
Hash identifier:          mAKzHnCVAIzpxLDgVonf54u/5mV3BfiQFhtp9tZEdZg=
Subject key identifier:   64:46:A6:12:8B:59:E1:33:2D:ED:A5:02:5E:8D:11:E9:A8:C9:5B:46
Certificate issuer:       /CN=B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8
Certificate serial:       38B1351BC4E48F9531C6FF8BFFCC6C132F87D9C1
Authority key identifier: B0:CA:65:D9:C1:CC:96:DA:8D:04:D5:27:F2:AA:10:BA:40:DF:DF:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/323830343a353330343a3a2f33322d3438203d3e20323638353537.roa
Signing time:             Mon 15 Jul 2024 19:10:10 +0000
ROA not before:           Mon 15 Jul 2024 19:05:10 +0000
ROA not after:            Mon 14 Jul 2025 19:10:10 +0000
asID:                     268557
IP address blocks:        2804:5304::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.crl
                          rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b1:35:1b:c4:e4:8f:95:31:c6:ff:8b:ff:cc:6c:13:2f:87:d9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8
        Validity
            Not Before: Jul 15 19:05:10 2024 GMT
            Not After : Jul 14 19:10:10 2025 GMT
        Subject: CN=6446A6128B59E1332DEDA5025E8D11E9A8C95B46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7c:39:2a:92:ba:fd:fa:21:7f:61:d8:79:37:
                    98:21:d5:28:9f:5a:5d:24:b5:5c:bf:69:04:ee:ab:
                    2c:85:9c:74:48:d1:75:81:1f:db:cf:de:9d:ba:fb:
                    f6:7d:8a:41:de:fe:ae:ec:c1:77:36:7a:7e:52:36:
                    00:57:8b:af:10:b6:ed:d4:a6:c0:4a:31:6d:7e:d1:
                    c2:80:0b:0d:b5:18:da:b7:30:b9:2d:71:2a:6e:38:
                    4b:ae:ae:b5:2f:a0:e0:0c:de:02:c8:a4:6f:f1:73:
                    f2:ac:85:bb:81:0e:6b:de:7d:12:3e:d6:80:93:d7:
                    6f:e5:ac:89:ca:40:f6:c6:a5:b2:db:35:30:2f:be:
                    86:1d:df:94:a1:0a:b9:2d:d6:ca:aa:b5:41:20:97:
                    2a:43:bc:ca:fa:dd:2b:7c:6e:20:ae:ca:b3:97:7b:
                    c3:14:3f:b1:d3:c5:93:1b:34:db:a3:a1:2f:8b:48:
                    82:66:0c:b9:f8:4a:d4:28:62:bd:48:59:7a:ba:30:
                    26:5e:d5:c7:ac:05:99:28:8c:16:33:c5:46:3e:c2:
                    68:b5:8f:40:ca:5d:77:59:af:23:42:0d:fa:b7:9c:
                    b7:2f:3b:8d:fc:11:b5:96:dd:77:5e:3b:35:0b:c2:
                    ed:39:6d:ea:3f:59:d6:93:61:b0:a2:e0:3c:30:22:
                    bb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:46:A6:12:8B:59:E1:33:2D:ED:A5:02:5E:8D:11:E9:A8:C9:5B:46
            X509v3 Authority Key Identifier:
                keyid:B0:CA:65:D9:C1:CC:96:DA:8D:04:D5:27:F2:AA:10:BA:40:DF:DF:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/323830343a353330343a3a2f33322d3438203d3e20323638353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5304::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:34:92:73:6f:3b:61:97:dc:7c:74:55:bb:1a:d7:61:bc:58:
         a1:48:8d:7c:b2:ae:12:a5:9c:e4:73:d2:3d:14:6d:0f:3d:04:
         91:46:46:44:78:71:2c:87:7a:c0:27:1f:78:d1:c2:79:6a:32:
         19:c9:45:c5:98:80:69:f4:12:96:83:56:99:cb:f9:38:8a:cf:
         b1:3f:6e:03:ad:62:f3:66:c3:a0:6a:30:9c:7a:77:e9:c6:ae:
         78:9d:08:42:ec:75:af:f7:95:af:30:29:e8:ac:4c:3e:2d:8c:
         bd:8a:28:85:aa:f4:b4:ae:9a:93:2c:ff:cc:41:04:31:1c:54:
         5a:2a:c1:28:8a:bd:a6:5c:d2:68:c7:84:c7:89:ec:68:9c:c7:
         39:93:c7:b3:4a:17:c4:62:d5:01:5c:d9:34:44:bc:75:bb:e6:
         89:5b:a2:25:27:fa:25:a1:ee:66:53:36:1c:0e:a4:f2:e7:7e:
         af:86:02:7c:f8:62:d0:98:62:88:15:58:6d:35:8f:92:99:ca:
         74:26:05:30:92:67:a0:f1:8b:15:4d:ee:b6:d1:c9:87:3a:59:
         8d:57:a6:2f:81:b4:d1:35:68:01:f1:99:ff:34:27:7d:ac:89:
         45:21:b5:f2:cc:62:51:60:c5:fe:a8:f2:4c:82:61:69:a6:0c:
         9b:87:a8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:49 2024 by rpki-client on console-fra.rpki-client.org