Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/323830343a386336633a3a2f33322d3332203d3e20323733383031.roa
File:                     323830343a386336633a3a2f33322d3332203d3e20323733383031.roa (raw, json)
Hash identifier:          DMJdgtHVNlfSR3zw/pNN1Wkp7KXiusfP7rXHcYxGWYY=
Subject key identifier:   13:0E:4D:0B:E3:21:0B:B0:71:F5:39:58:DF:61:6A:3D:33:AC:3E:F9
Certificate issuer:       /CN=F085A36FF3B17B8E7F8581CAF6C5BB71941C55FD
Certificate serial:       2F9ADCB2F2B3B4CC4A4F9F275CE3D94BEAE51026
Authority key identifier: F0:85:A3:6F:F3:B1:7B:8E:7F:85:81:CA:F6:C5:BB:71:94:1C:55:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F085A36FF3B17B8E7F8581CAF6C5BB71941C55FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/323830343a386336633a3a2f33322d3332203d3e20323733383031.roa
Signing time:             Mon 12 Aug 2024 17:15:36 +0000
ROA not before:           Mon 12 Aug 2024 17:10:36 +0000
ROA not after:            Mon 11 Aug 2025 17:15:36 +0000
asID:                     273801
IP address blocks:        2804:8c6c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/F085A36FF3B17B8E7F8581CAF6C5BB71941C55FD.crl
                          rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/F085A36FF3B17B8E7F8581CAF6C5BB71941C55FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F085A36FF3B17B8E7F8581CAF6C5BB71941C55FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9a:dc:b2:f2:b3:b4:cc:4a:4f:9f:27:5c:e3:d9:4b:ea:e5:10:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F085A36FF3B17B8E7F8581CAF6C5BB71941C55FD
        Validity
            Not Before: Aug 12 17:10:36 2024 GMT
            Not After : Aug 11 17:15:36 2025 GMT
        Subject: CN=130E4D0BE3210BB071F53958DF616A3D33AC3EF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8b:15:36:07:f4:ed:3f:2e:74:c3:54:77:2a:
                    68:ed:f6:da:98:60:32:c1:f7:3c:b0:ea:d8:48:b4:
                    6f:0e:7d:55:78:82:bc:09:70:ac:3b:fc:e8:11:59:
                    f1:a7:5a:47:35:89:c8:91:28:14:5e:9c:fe:cc:ed:
                    bf:69:6e:a4:08:2a:ce:ef:59:9b:68:35:d8:2a:e7:
                    aa:cc:2a:df:bc:59:1c:a7:19:cb:64:09:5c:56:34:
                    02:f9:36:64:12:85:ed:30:2d:20:06:8c:45:d8:58:
                    a6:0f:73:e0:7a:33:4c:ce:60:7f:fd:e4:45:e6:0e:
                    b5:a9:9e:0f:8d:9b:0c:13:0b:3a:87:5f:71:b8:0d:
                    2e:5f:20:91:90:16:3b:e6:87:af:ea:22:db:df:98:
                    f5:fb:fe:44:02:52:39:83:c1:98:b0:ec:ea:40:c1:
                    bf:4f:a6:f3:23:d9:56:de:8f:6b:60:dc:e6:71:ca:
                    74:49:72:da:79:72:1a:24:7e:c3:d5:66:ab:0b:c7:
                    bf:0b:44:25:dc:22:5e:2a:71:c9:44:80:0c:99:4c:
                    af:55:9a:84:a3:1b:0d:92:52:bb:07:08:41:ca:4e:
                    32:45:a0:93:0e:90:22:75:78:e4:ef:ac:20:32:10:
                    dd:90:3c:fa:7f:b9:f9:af:07:14:c2:fb:83:13:b6:
                    3a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0E:4D:0B:E3:21:0B:B0:71:F5:39:58:DF:61:6A:3D:33:AC:3E:F9
            X509v3 Authority Key Identifier:
                keyid:F0:85:A3:6F:F3:B1:7B:8E:7F:85:81:CA:F6:C5:BB:71:94:1C:55:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/F085A36FF3B17B8E7F8581CAF6C5BB71941C55FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F085A36FF3B17B8E7F8581CAF6C5BB71941C55FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/323830343a386336633a3a2f33322d3332203d3e20323733383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:a5:33:da:94:cf:6d:f1:48:a6:5a:02:50:92:2a:6d:00:3e:
         bd:6e:f7:3d:ac:df:d6:fc:42:12:fe:4a:9e:db:90:88:55:cf:
         b3:fc:1a:f7:e6:ea:2e:3c:df:e7:f2:65:2c:57:24:c4:38:e0:
         82:f8:86:0d:96:3f:0d:09:d8:30:55:7e:7b:75:a4:b8:0b:e0:
         d5:fc:02:c8:48:be:ed:43:d8:ff:fa:de:10:9c:a8:87:99:8f:
         27:39:49:b4:fb:84:3c:b6:5b:48:70:a5:8e:6f:b4:88:12:67:
         83:84:d6:17:0f:62:ef:cd:61:93:33:5d:15:a5:cd:ed:3c:9e:
         8f:26:ce:ad:69:b5:d2:eb:43:24:9c:52:62:f3:54:f9:4e:79:
         2b:51:25:a4:ad:92:20:88:fd:16:82:34:81:53:23:69:e0:41:
         32:93:e9:52:83:63:33:78:41:c4:bc:b2:42:52:50:f4:8d:f3:
         a6:1e:91:58:96:2f:2e:dd:1d:74:f1:94:6a:6d:a9:ae:3d:52:
         65:aa:a2:2e:a6:5b:7c:66:ba:9a:a3:ca:ae:70:45:da:e7:8b:
         a4:7f:56:99:62:8c:cf:64:36:f9:6c:0b:b2:40:71:83:19:a4:
         87:27:a2:e2:e6:8f:89:16:60:7e:96:4b:9d:73:05:35:db:12:
         7d:48:01:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:16 2024 by rpki-client on console-ams.rpki-client.org