Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a3a2f33322d3438203d3e20323635353030.roa
File:                     323830343a333531383a3a2f33322d3438203d3e20323635353030.roa (raw, json)
Hash identifier:          9RbqfMWu2Vcm1ceKAY8gaIXAgXgIzQYwFvRb+Dc1SMc=
Subject key identifier:   F3:C2:54:E8:26:7B:CA:25:9F:0D:29:CA:72:01:79:94:77:BE:3D:32
Certificate issuer:       /CN=9A78086E3FE6E3143EB9A4F9C4F54AD2F171B0B9
Certificate serial:       032D64786FF19C39521186A2CE4E8DE536CEEA9E
Authority key identifier: 9A:78:08:6E:3F:E6:E3:14:3E:B9:A4:F9:C4:F5:4A:D2:F1:71:B0:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A78086E3FE6E3143EB9A4F9C4F54AD2F171B0B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a3a2f33322d3438203d3e20323635353030.roa
Signing time:             Tue 20 Aug 2024 14:24:46 +0000
ROA not before:           Tue 20 Aug 2024 14:19:46 +0000
ROA not after:            Tue 19 Aug 2025 14:24:46 +0000
asID:                     265500
IP address blocks:        2804:3518::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/9A78086E3FE6E3143EB9A4F9C4F54AD2F171B0B9.crl
                          rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/9A78086E3FE6E3143EB9A4F9C4F54AD2F171B0B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A78086E3FE6E3143EB9A4F9C4F54AD2F171B0B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:2d:64:78:6f:f1:9c:39:52:11:86:a2:ce:4e:8d:e5:36:ce:ea:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A78086E3FE6E3143EB9A4F9C4F54AD2F171B0B9
        Validity
            Not Before: Aug 20 14:19:46 2024 GMT
            Not After : Aug 19 14:24:46 2025 GMT
        Subject: CN=F3C254E8267BCA259F0D29CA7201799477BE3D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f6:68:8b:ae:62:90:ae:08:61:86:e9:48:5f:
                    f8:d5:17:a7:13:9f:dd:48:68:b6:8e:94:1a:d0:05:
                    91:ae:c9:77:62:03:71:3c:c8:ef:03:ea:e3:b8:45:
                    d3:05:a0:d8:f6:eb:5b:5a:e9:1c:8d:fe:d3:2d:d2:
                    ba:55:39:cc:84:f6:7d:21:25:5b:86:bc:d3:61:34:
                    e8:f7:fb:8b:94:5b:5e:3f:e8:17:0b:df:0c:44:8a:
                    5f:f0:fc:07:2e:bd:ca:30:c6:f8:17:24:34:0e:a8:
                    0a:1d:14:21:ee:fc:d1:90:fa:d0:7b:3a:49:fb:29:
                    cc:b3:ba:7b:db:b3:23:54:b4:72:5e:b8:1d:a8:26:
                    70:65:20:b4:86:a7:ff:56:93:e5:f3:1e:df:a0:89:
                    6b:cd:c6:5c:c5:b8:d8:c8:a7:e3:78:b6:8a:52:43:
                    27:21:ef:29:f6:0d:07:e9:df:64:74:ee:ea:28:3a:
                    be:d5:3d:94:b4:36:e1:ac:a7:f1:26:f9:7d:f4:5e:
                    ad:66:42:5f:40:4b:39:94:5e:c3:e6:29:b9:97:42:
                    4f:d5:71:1c:eb:6c:1c:c6:5c:7f:b3:c0:58:2c:62:
                    d0:c2:1a:54:c1:3b:f7:84:0b:0d:3b:3c:47:b4:bc:
                    05:32:62:8b:54:0c:dd:10:cf:8e:24:93:e3:87:8d:
                    04:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C2:54:E8:26:7B:CA:25:9F:0D:29:CA:72:01:79:94:77:BE:3D:32
            X509v3 Authority Key Identifier:
                keyid:9A:78:08:6E:3F:E6:E3:14:3E:B9:A4:F9:C4:F5:4A:D2:F1:71:B0:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/9A78086E3FE6E3143EB9A4F9C4F54AD2F171B0B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A78086E3FE6E3143EB9A4F9C4F54AD2F171B0B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a3a2f33322d3438203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3518::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:29:7e:37:2b:57:d2:05:19:c6:9d:88:57:dc:c2:e8:40:bd:
         b2:75:ec:49:fc:cf:a4:1a:73:01:c7:0a:a6:5e:6f:79:05:73:
         53:ca:73:b5:2b:b3:af:58:a7:d6:3a:07:09:92:8a:a1:bd:63:
         cc:cc:f1:f3:1a:28:0a:84:e5:9a:48:82:88:f4:33:af:b4:27:
         ac:5b:b6:92:eb:95:ac:34:fe:39:45:f7:96:d3:99:f8:d4:d9:
         bd:6d:28:8e:ac:0a:cf:f0:a1:0b:c7:d1:95:d9:6b:94:82:e1:
         0b:e6:eb:e6:01:24:41:14:2b:c5:0a:f5:9b:4b:70:c6:93:cb:
         e9:ac:f1:8f:af:f4:98:6a:75:0b:61:bc:3c:7f:1e:47:a0:e8:
         76:16:62:13:34:b7:c5:82:61:68:25:20:53:16:3b:da:af:0c:
         c2:e1:c9:ed:58:a7:20:65:95:35:35:5d:1a:8f:7f:a7:d1:a9:
         bd:28:36:8f:f0:9f:99:69:7d:0b:45:f7:a8:1b:eb:94:69:0f:
         58:f9:41:66:03:79:bc:38:8a:a9:0b:06:8d:a1:da:13:69:27:
         d8:67:b6:99:4a:2a:d5:95:4e:7d:24:42:3f:2f:75:56:e6:f2:
         6c:13:d3:bb:ab:08:79:7b:0b:46:c2:d5:e8:39:f6:be:bf:91:
         b5:a5:62:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:12 2024 by rpki-client on console-ams.rpki-client.org