Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/323830343a386336633a3a2f33322d313238203d3e20323733383031.roa
File:                     323830343a386336633a3a2f33322d313238203d3e20323733383031.roa (raw, json)
Hash identifier:          X857YRVsPdyAb4zxXNq/Glm9gAWiJWDCoKtZrwdWTcE=
Subject key identifier:   37:A3:4D:3D:1B:32:44:B4:71:7A:CF:D0:E1:D9:76:29:FB:1E:82:C0
Certificate issuer:       /CN=F085A36FF3B17B8E7F8581CAF6C5BB71941C55FD
Certificate serial:       07020D6A2DA9089C7DC0CBA70ABDA3DBD631DA3E
Authority key identifier: F0:85:A3:6F:F3:B1:7B:8E:7F:85:81:CA:F6:C5:BB:71:94:1C:55:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F085A36FF3B17B8E7F8581CAF6C5BB71941C55FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/323830343a386336633a3a2f33322d313238203d3e20323733383031.roa
Signing time:             Mon 12 Aug 2024 17:17:09 +0000
ROA not before:           Mon 12 Aug 2024 17:12:09 +0000
ROA not after:            Mon 11 Aug 2025 17:17:09 +0000
asID:                     273801
IP address blocks:        2804:8c6c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/F085A36FF3B17B8E7F8581CAF6C5BB71941C55FD.crl
                          rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/F085A36FF3B17B8E7F8581CAF6C5BB71941C55FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F085A36FF3B17B8E7F8581CAF6C5BB71941C55FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:02:0d:6a:2d:a9:08:9c:7d:c0:cb:a7:0a:bd:a3:db:d6:31:da:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F085A36FF3B17B8E7F8581CAF6C5BB71941C55FD
        Validity
            Not Before: Aug 12 17:12:09 2024 GMT
            Not After : Aug 11 17:17:09 2025 GMT
        Subject: CN=37A34D3D1B3244B4717ACFD0E1D97629FB1E82C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7a:68:1b:0d:7b:34:a2:9c:c9:2c:e9:41:03:
                    9b:68:90:79:30:82:6e:62:7e:2d:15:70:b8:e3:9c:
                    53:7a:d2:f2:f7:b8:07:94:21:7e:3a:0c:13:8b:f8:
                    9b:e0:1c:ff:01:48:6d:7f:32:f3:56:4b:fe:68:1f:
                    ed:14:b6:67:04:e1:84:74:cb:36:aa:5a:f1:d3:b2:
                    bf:ec:f4:dd:79:a0:73:a9:03:75:ff:93:ea:da:f0:
                    9c:05:57:3f:b8:88:e3:2c:ad:ef:12:b5:cc:54:5f:
                    b2:c2:d3:b5:9e:4e:ce:17:ce:cb:f9:74:2f:4e:ae:
                    28:10:66:07:a2:58:e5:6a:38:73:c6:3f:23:93:39:
                    97:7f:24:dc:1f:b4:4e:79:fc:40:22:fd:99:3c:6b:
                    cb:76:fa:ab:42:d8:ec:d1:84:e1:a5:b2:df:42:1c:
                    02:08:41:dd:e2:62:64:5a:99:25:fd:29:8d:c3:64:
                    ec:26:72:8a:cc:d9:fa:df:dc:f7:6f:93:a2:0c:51:
                    6b:39:1c:56:72:66:f2:97:2e:80:83:5e:2e:d4:90:
                    0b:e3:d2:47:66:84:73:f5:30:95:6c:21:7f:b3:0e:
                    53:29:32:0a:f3:ce:04:94:a0:1d:03:44:f8:bc:56:
                    af:ac:9b:e2:64:6e:50:ee:31:5e:8f:c7:d6:0d:64:
                    e0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A3:4D:3D:1B:32:44:B4:71:7A:CF:D0:E1:D9:76:29:FB:1E:82:C0
            X509v3 Authority Key Identifier:
                keyid:F0:85:A3:6F:F3:B1:7B:8E:7F:85:81:CA:F6:C5:BB:71:94:1C:55:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/F085A36FF3B17B8E7F8581CAF6C5BB71941C55FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F085A36FF3B17B8E7F8581CAF6C5BB71941C55FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/323830343a386336633a3a2f33322d313238203d3e20323733383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:b8:e7:7f:27:79:6b:2a:9c:84:f0:93:b5:41:9e:1d:bd:1d:
         48:a0:aa:6b:73:99:9d:ec:13:62:10:ad:4d:e3:e8:30:0b:67:
         a7:51:9c:59:98:6b:c1:53:48:2c:4c:e1:3d:d4:aa:e5:ff:13:
         66:89:b9:a6:49:75:7e:f9:23:87:4c:cd:49:80:87:70:ff:04:
         45:ed:93:ff:69:2f:9b:05:d3:f1:e0:7f:8b:4f:31:74:09:81:
         b2:92:30:b2:e2:a0:81:e2:67:a4:a4:53:59:3c:7e:e3:99:e7:
         f0:b3:c8:7e:ca:c5:be:2e:30:cc:5f:74:2f:bd:20:84:39:d5:
         82:c8:51:49:92:bc:76:99:3b:79:b9:17:fe:0f:f8:b6:3a:06:
         9c:d6:51:b9:57:40:72:a7:81:1f:ac:a1:ee:95:85:d5:a9:77:
         eb:ef:42:bc:95:49:1a:c5:c4:c3:50:af:f9:e9:ff:cc:f7:36:
         f5:9d:bc:c8:0c:50:09:cd:ce:a9:38:08:72:03:5c:28:55:a2:
         a9:fd:dd:f9:4b:bb:04:63:06:b7:0e:f1:e3:74:ac:4f:83:62:
         bb:d6:40:c9:8a:27:d2:b7:27:c4:00:d2:b6:13:d3:b6:54:b8:
         00:28:2f:44:96:50:51:f5:be:6a:8e:a4:62:64:ba:91:41:f5:
         65:a4:59:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:16 2024 by rpki-client on console-ams.rpki-client.org