Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/323830343a316131383a3a2f34302d3430203d3e203631383336.roa
File:                     323830343a316131383a3a2f34302d3430203d3e203631383336.roa (raw, json)
Hash identifier:          DDa4C0shpK60R+ElYD/UyDtBuEaVKF6wSeT52868j6M=
Subject key identifier:   94:EE:55:80:09:69:20:FF:DF:FA:FD:2C:43:FD:36:7D:E7:73:61:98
Certificate issuer:       /CN=43885CAAF241C57514F4BFCC379D2F93549E4FAB
Certificate serial:       400A81B140E2F10FF9FFB0F34D0700D1F8C890CF
Authority key identifier: 43:88:5C:AA:F2:41:C5:75:14:F4:BF:CC:37:9D:2F:93:54:9E:4F:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43885CAAF241C57514F4BFCC379D2F93549E4FAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/323830343a316131383a3a2f34302d3430203d3e203631383336.roa
Signing time:             Fri 26 Jul 2024 16:46:28 +0000
ROA not before:           Fri 26 Jul 2024 16:41:28 +0000
ROA not after:            Fri 25 Jul 2025 16:46:28 +0000
asID:                     61836
IP address blocks:        2804:1a18::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/43885CAAF241C57514F4BFCC379D2F93549E4FAB.crl
                          rsync://rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/43885CAAF241C57514F4BFCC379D2F93549E4FAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43885CAAF241C57514F4BFCC379D2F93549E4FAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:0a:81:b1:40:e2:f1:0f:f9:ff:b0:f3:4d:07:00:d1:f8:c8:90:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43885CAAF241C57514F4BFCC379D2F93549E4FAB
        Validity
            Not Before: Jul 26 16:41:28 2024 GMT
            Not After : Jul 25 16:46:28 2025 GMT
        Subject: CN=94EE5580096920FFDFFAFD2C43FD367DE7736198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fa:de:df:78:f6:de:87:51:03:83:12:cf:9b:
                    7b:50:69:5c:78:75:7f:f6:0e:ac:c1:c5:21:2d:22:
                    f1:80:f3:fd:28:ec:a8:2c:e1:59:33:00:2d:0b:ee:
                    29:b4:ef:94:1c:40:59:8a:a2:b4:07:07:0a:08:bc:
                    90:c2:c8:de:5c:30:1b:55:47:1f:20:1a:4b:43:a2:
                    22:84:d1:ab:8c:7d:13:71:b4:30:30:2e:9e:91:b0:
                    5d:f2:c4:ce:7e:34:cc:bf:21:90:f7:a1:af:9e:8b:
                    f5:dc:37:6a:60:b8:11:c0:17:a3:a9:5b:0b:95:49:
                    6f:5d:fa:bd:fb:ae:57:4c:16:f0:d3:3b:91:54:06:
                    ee:08:05:37:4e:3e:00:47:0a:d4:73:54:76:a0:12:
                    cf:7b:35:5d:18:6a:74:bb:80:36:e1:0e:af:ac:c6:
                    ee:65:f9:5b:eb:38:0c:8c:70:91:91:74:14:0a:5b:
                    14:aa:81:f1:a8:e8:38:66:67:54:50:25:b6:5e:15:
                    74:6f:52:1a:40:a9:44:82:20:7d:94:60:d5:45:b4:
                    1b:24:85:17:48:fb:53:82:45:a5:2a:8a:14:c5:4c:
                    15:50:24:a1:a6:e8:14:50:a0:31:a7:ec:95:18:4d:
                    41:90:0e:1b:20:ec:0c:1e:6d:b2:d4:9a:18:d5:4c:
                    b5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:EE:55:80:09:69:20:FF:DF:FA:FD:2C:43:FD:36:7D:E7:73:61:98
            X509v3 Authority Key Identifier:
                keyid:43:88:5C:AA:F2:41:C5:75:14:F4:BF:CC:37:9D:2F:93:54:9E:4F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/43885CAAF241C57514F4BFCC379D2F93549E4FAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43885CAAF241C57514F4BFCC379D2F93549E4FAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/323830343a316131383a3a2f34302d3430203d3e203631383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a18::/40

    Signature Algorithm: sha256WithRSAEncryption
         53:ef:57:4e:70:ec:01:a8:7d:a9:3a:83:ed:e1:4f:0f:4b:58:
         ed:5d:7e:8b:d3:2d:07:bd:fb:91:63:ad:15:18:0f:6c:95:c6:
         52:7b:35:c4:40:7d:63:56:e9:97:a2:e3:21:0f:f7:fe:59:fd:
         38:dc:ea:29:5c:2c:b2:c0:c4:08:0c:2c:a8:01:4a:53:be:27:
         a9:6b:a3:fb:50:25:15:77:cb:06:80:8c:49:ab:30:34:8b:27:
         03:96:34:44:2a:a2:d4:3c:a9:8f:b9:3e:99:ad:19:b2:9b:5a:
         ab:12:3e:98:bd:c3:db:fc:d6:a6:14:53:2d:e0:83:d7:54:f8:
         41:5b:c1:12:61:4e:2d:31:68:e4:1d:e4:bf:a7:a8:03:b2:ec:
         ea:d0:99:50:da:41:37:f3:b6:5b:3a:b3:87:1c:6f:f4:ee:b3:
         30:76:63:7c:36:58:92:15:77:22:a6:72:4a:4d:31:4b:65:ad:
         27:b0:db:b3:15:a9:e5:c7:61:a5:76:93:7e:b2:3d:b3:f9:27:
         68:b0:33:a7:dd:38:71:9d:f2:e8:23:e6:cb:35:30:77:ba:09:
         36:1c:69:de:46:0f:22:e8:2d:07:3c:fb:02:6e:a5:fa:e1:e5:
         f7:01:8c:01:d6:6c:2f:dd:01:3e:81:8f:e2:65:41:be:84:12:
         0e:38:df:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:03 2024 by rpki-client on console-fra.rpki-client.org