Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a323030303a3a2f34382d3438203d3e20323633343939.roa
File:                     323830343a313263633a323030303a3a2f34382d3438203d3e20323633343939.roa (raw, json)
Hash identifier:          W1dxbun5mpyR+HVlGcwCnohbMP0Ff+hIO3NexyGRdp4=
Subject key identifier:   BD:B2:50:63:3B:F3:20:4E:EC:F1:2C:8A:46:86:A0:03:0E:CF:D9:25
Certificate issuer:       /CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
Certificate serial:       10FC2C596FC7D257F9EDA47F88CCDB47EB72B026
Authority key identifier: 78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a323030303a3a2f34382d3438203d3e20323633343939.roa
Signing time:             Wed 14 Aug 2024 14:10:11 +0000
ROA not before:           Wed 14 Aug 2024 14:05:11 +0000
ROA not after:            Wed 13 Aug 2025 14:10:11 +0000
asID:                     263499
IP address blocks:        2804:12cc:2000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl
                          rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:fc:2c:59:6f:c7:d2:57:f9:ed:a4:7f:88:cc:db:47:eb:72:b0:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
        Validity
            Not Before: Aug 14 14:05:11 2024 GMT
            Not After : Aug 13 14:10:11 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:37:fe:87:11:7c:24:67:f3:99:be:ed:af:d8:
                    e7:a5:c9:1d:04:a7:b3:cb:d5:e3:fb:d1:dc:fe:7f:
                    38:45:78:38:61:4f:52:0f:23:f0:04:c3:16:83:d6:
                    cc:0d:76:46:45:32:9d:94:69:0d:e4:5f:e6:15:80:
                    e7:11:3a:76:a5:69:3c:4e:2c:9a:56:8d:86:98:70:
                    69:25:c0:27:51:3f:a0:e2:e7:38:c6:f0:58:a5:4a:
                    cd:71:73:cf:53:c9:76:87:1e:3d:d6:0a:6e:22:18:
                    f6:e3:73:59:b4:69:d3:16:ce:c8:49:55:3d:e7:a2:
                    b6:97:ca:c8:2b:15:9d:50:0f:df:c2:66:c7:17:bb:
                    72:f8:90:59:1d:79:8a:0f:b1:d5:e1:3c:fa:46:a5:
                    30:0c:35:b9:fb:be:69:e7:13:60:4c:8f:41:ec:a0:
                    c8:e6:3c:a7:68:48:b2:39:67:93:1c:5f:a7:1a:5b:
                    4d:e4:18:47:f7:f8:27:ba:61:57:33:e4:1e:71:9d:
                    e9:97:c9:18:28:3c:7e:04:3a:e8:e0:04:21:e9:04:
                    bf:20:c3:72:58:bc:7d:c2:5b:73:c8:7a:00:4f:b7:
                    07:29:dc:31:33:a7:c2:89:2b:e6:57:26:35:bf:e0:
                    64:b6:04:20:ef:46:e0:3f:a2:24:4d:ea:ec:ff:10:
                    2f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B2:50:63:3B:F3:20:4E:EC:F1:2C:8A:46:86:A0:03:0E:CF:D9:25
            X509v3 Authority Key Identifier:
                keyid:78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a323030303a3a2f34382d3438203d3e20323633343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12cc:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:3d:6e:21:15:72:f4:3f:4c:98:38:46:40:be:3f:e4:f9:70:
         02:51:71:26:08:fa:c6:1d:93:72:04:6c:9e:19:33:a0:f5:0b:
         de:79:f3:ac:84:66:01:c4:b8:6d:9b:f9:aa:bb:43:6e:8e:e0:
         3a:fa:39:ea:5a:3d:1f:04:71:9b:aa:e4:d1:88:e5:9e:fb:ec:
         6b:60:59:d4:e1:e6:2c:75:da:7f:67:c8:49:73:8a:be:f1:c9:
         6d:82:d5:de:e8:e3:ee:7a:e9:ad:84:6f:fc:fa:f5:a7:7e:1e:
         82:7f:cc:81:07:05:49:ff:00:ee:7d:1e:63:43:e0:1b:8c:c2:
         a3:00:72:3f:79:08:fc:30:72:c1:46:08:a0:64:6c:ea:24:4b:
         75:f6:f5:11:17:4d:e2:27:02:28:97:d6:49:48:37:e0:67:ca:
         f5:69:3f:6a:27:26:4b:a5:48:5f:aa:bc:03:f6:e6:7c:06:7a:
         16:31:d0:50:a9:0e:cd:8b:4d:b6:84:00:b7:75:cc:1d:8f:18:
         52:c4:12:f1:e7:eb:2f:ca:42:88:a2:b1:56:11:a5:16:74:e0:
         fb:c9:b6:15:8c:ee:7d:40:d8:28:a7:f3:fe:d0:fe:4e:9e:30:
         89:7a:10:a8:83:18:9b:3c:d8:9b:3f:02:7a:c6:21:78:67:67:
         fb:18:ea:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:09 2024 by rpki-client on console-ams.rpki-client.org