Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/323830343a386336633a3430303a3a2f34342d3434203d3e20323733383031.roa
File:                     323830343a386336633a3430303a3a2f34342d3434203d3e20323733383031.roa (raw, json)
Hash identifier:          jR4pcTGGZSWuZOr28rj6E6+bxOoHCFiSg4aiFVX+Bh0=
Subject key identifier:   8F:79:28:5E:07:58:FB:81:54:F4:A1:84:48:9D:CE:C3:0C:64:82:40
Certificate issuer:       /CN=F085A36FF3B17B8E7F8581CAF6C5BB71941C55FD
Certificate serial:       122D6D1CB72BDFA68B266F969646F70127519856
Authority key identifier: F0:85:A3:6F:F3:B1:7B:8E:7F:85:81:CA:F6:C5:BB:71:94:1C:55:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F085A36FF3B17B8E7F8581CAF6C5BB71941C55FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/323830343a386336633a3430303a3a2f34342d3434203d3e20323733383031.roa
Signing time:             Mon 12 Aug 2024 17:15:37 +0000
ROA not before:           Mon 12 Aug 2024 17:10:37 +0000
ROA not after:            Mon 11 Aug 2025 17:15:37 +0000
asID:                     273801
IP address blocks:        2804:8c6c:400::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/F085A36FF3B17B8E7F8581CAF6C5BB71941C55FD.crl
                          rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/F085A36FF3B17B8E7F8581CAF6C5BB71941C55FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F085A36FF3B17B8E7F8581CAF6C5BB71941C55FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2d:6d:1c:b7:2b:df:a6:8b:26:6f:96:96:46:f7:01:27:51:98:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F085A36FF3B17B8E7F8581CAF6C5BB71941C55FD
        Validity
            Not Before: Aug 12 17:10:37 2024 GMT
            Not After : Aug 11 17:15:37 2025 GMT
        Subject: CN=8F79285E0758FB8154F4A184489DCEC30C648240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c3:f1:a6:c1:c0:56:33:c2:66:df:d3:67:4e:
                    f6:a9:74:da:f2:92:a9:f7:b5:d1:92:bc:6d:3d:dc:
                    c4:47:9c:09:ea:b2:5a:c3:00:3a:c4:ef:6a:a0:43:
                    8b:9a:de:82:a8:17:64:6d:6f:51:02:eb:7d:90:18:
                    d3:93:b6:fb:18:8d:07:1b:13:ab:03:a3:e9:b9:1b:
                    b1:4c:73:3c:f5:5b:6b:c9:47:2f:57:a9:27:e1:90:
                    ef:a8:43:dc:ab:5c:d4:a1:42:99:05:9f:39:f8:44:
                    c8:7a:43:83:6e:03:79:d9:f3:e9:28:85:e6:9d:52:
                    02:2d:e3:f4:7c:64:30:07:77:c5:c2:8d:b6:fd:fe:
                    8d:ba:ac:44:b5:ec:a9:3b:5d:e4:8c:01:8a:14:8c:
                    98:9a:8a:5b:cc:c2:72:51:c8:48:f4:25:76:19:45:
                    fc:53:0f:cc:db:f9:4f:9c:9f:10:8a:77:7f:0a:21:
                    1b:d7:4a:48:21:57:84:99:4d:68:db:13:6c:aa:11:
                    42:d2:24:4b:8a:0a:4d:61:d6:9d:3e:8e:43:31:13:
                    56:0b:b9:64:5d:b2:74:89:12:48:3f:7a:f8:50:1b:
                    91:9b:e2:14:ba:d6:69:d8:e4:1e:96:4d:8e:6c:55:
                    73:3a:0d:6d:cd:30:42:d6:80:ae:13:52:f8:7a:b4:
                    bd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:79:28:5E:07:58:FB:81:54:F4:A1:84:48:9D:CE:C3:0C:64:82:40
            X509v3 Authority Key Identifier:
                keyid:F0:85:A3:6F:F3:B1:7B:8E:7F:85:81:CA:F6:C5:BB:71:94:1C:55:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/F085A36FF3B17B8E7F8581CAF6C5BB71941C55FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F085A36FF3B17B8E7F8581CAF6C5BB71941C55FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/323830343a386336633a3430303a3a2f34342d3434203d3e20323733383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c6c:400::/44

    Signature Algorithm: sha256WithRSAEncryption
         ae:1d:af:19:f8:ad:fd:8e:bc:2d:fb:38:31:65:0d:8d:4b:9b:
         68:44:dd:f8:81:7d:a5:b4:9a:d9:2a:c3:16:ed:c6:1f:db:e4:
         03:39:87:cc:63:83:7b:65:eb:47:82:8e:a5:b5:e6:53:b2:c8:
         35:d5:79:22:3f:9e:6b:d1:bf:c0:d2:43:97:1b:47:9a:8e:65:
         17:be:33:c5:b3:b9:d1:c0:c1:af:74:07:a2:37:aa:3a:a4:03:
         39:b1:3d:0a:69:bd:ff:01:72:52:b4:d2:e7:cd:38:f1:4f:28:
         51:8d:aa:5f:5f:d3:c9:b4:d4:f3:da:51:27:12:9e:6a:4e:0f:
         60:00:16:f6:bb:56:b3:19:58:66:e1:7d:b3:ec:2c:c2:d4:21:
         cb:36:b5:51:75:85:7f:97:09:80:bb:aa:83:0d:cd:30:fa:1b:
         f1:d2:7f:cc:a1:31:fe:c1:cb:cc:b5:ea:49:97:dc:d4:bb:b7:
         94:c2:de:72:50:08:56:89:c4:2d:99:f1:02:d2:eb:c4:22:90:
         1b:eb:53:d7:fa:27:cd:68:c7:8c:4e:2f:3d:be:0b:8f:65:fe:
         87:92:37:5c:0f:72:d4:1e:d3:75:a6:cf:75:50:bc:66:c9:cd:
         bf:07:ae:17:8a:33:d7:f1:48:c1:5d:20:43:73:89:f4:10:05:
         53:11:2d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:01 2024 by rpki-client on console-fra.rpki-client.org