Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a3a2f33322d3438203d3e20323730363330.roa
File:                     323830343a366566383a3a2f33322d3438203d3e20323730363330.roa (raw, json)
Hash identifier:          PK8H3LSt4yaCnNesd4X91uI7Wo/HKj8aNpBAmMup21o=
Subject key identifier:   D5:C2:70:87:F2:62:75:69:F2:F1:74:D6:DA:53:3C:6F:5D:B8:BB:D0
Certificate issuer:       /CN=243A1884366E9900B679E354E56993980B33B31A
Certificate serial:       58230A8C784EA8F99EA10347D49FF993AAC950EA
Authority key identifier: 24:3A:18:84:36:6E:99:00:B6:79:E3:54:E5:69:93:98:0B:33:B3:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/243A1884366E9900B679E354E56993980B33B31A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a3a2f33322d3438203d3e20323730363330.roa
Signing time:             Thu 07 Nov 2024 14:21:42 +0000
ROA not before:           Thu 07 Nov 2024 14:16:42 +0000
ROA not after:            Thu 06 Nov 2025 14:21:42 +0000
asID:                     270630
IP address blocks:        2804:6ef8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/243A1884366E9900B679E354E56993980B33B31A.crl
                          rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/243A1884366E9900B679E354E56993980B33B31A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/243A1884366E9900B679E354E56993980B33B31A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 00:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:23:0a:8c:78:4e:a8:f9:9e:a1:03:47:d4:9f:f9:93:aa:c9:50:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=243A1884366E9900B679E354E56993980B33B31A
        Validity
            Not Before: Nov  7 14:16:42 2024 GMT
            Not After : Nov  6 14:21:42 2025 GMT
        Subject: CN=D5C27087F2627569F2F174D6DA533C6F5DB8BBD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:40:69:29:4e:c7:70:2e:7e:c7:9c:cd:0d:99:
                    6f:d2:52:3e:55:c2:2b:61:3e:51:9c:7b:ac:3c:c1:
                    c1:2f:08:a1:ae:dd:7c:b4:38:96:5d:c1:aa:2a:81:
                    cc:4e:30:37:6e:f1:75:5e:c4:02:bc:14:cd:87:6b:
                    1e:73:b4:bd:25:42:ba:6b:de:7e:ec:3d:db:01:68:
                    b1:bc:a2:98:6a:8f:f8:4d:2e:81:45:31:37:91:c0:
                    fc:08:5a:a1:18:b9:52:d7:69:e0:ac:2c:08:cd:d4:
                    74:5c:e6:9b:68:17:d8:6e:39:8b:0b:ac:23:c0:f6:
                    af:0d:bd:15:77:a2:90:aa:7d:d1:46:2f:0e:04:95:
                    29:8e:28:12:ef:59:03:65:4e:c1:3f:c5:7d:25:53:
                    fe:da:92:92:c6:d5:b2:8a:13:63:e8:51:95:1e:9f:
                    e9:3b:d8:26:40:7c:eb:db:b6:49:33:14:58:b8:d6:
                    77:45:62:1c:7b:9f:c2:8b:10:8f:72:bb:18:7f:b3:
                    04:16:e7:c7:7b:a3:87:8b:06:52:f0:ec:da:8f:8c:
                    8f:12:ae:62:0c:ba:7b:18:9b:09:9c:7b:bb:90:92:
                    fe:1a:05:9a:68:fd:0a:50:57:b9:0f:df:a9:43:ed:
                    34:ee:8e:4b:e2:43:ce:61:a2:35:2b:80:e4:a0:00:
                    78:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C2:70:87:F2:62:75:69:F2:F1:74:D6:DA:53:3C:6F:5D:B8:BB:D0
            X509v3 Authority Key Identifier:
                keyid:24:3A:18:84:36:6E:99:00:B6:79:E3:54:E5:69:93:98:0B:33:B3:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/243A1884366E9900B679E354E56993980B33B31A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/243A1884366E9900B679E354E56993980B33B31A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a3a2f33322d3438203d3e20323730363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ef8::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:63:8c:45:03:69:04:4c:e7:7c:7d:b8:b5:26:52:7c:28:8f:
         18:d0:2e:a4:cb:dc:c9:8b:23:92:b8:b8:b7:8f:84:8d:c6:2b:
         42:3a:ce:c9:5f:10:bd:12:2e:fe:f7:4c:53:ce:29:48:09:4b:
         ac:43:76:fb:04:66:c5:fb:b7:24:d3:bd:67:de:f4:35:ff:8c:
         1c:58:be:75:d0:b5:39:84:74:35:15:5e:da:e0:fb:c1:65:7b:
         53:8a:70:ff:e9:6f:ce:9b:a3:37:f8:62:3c:c4:21:c4:bd:db:
         9c:99:d1:6b:4e:6c:7f:fb:62:e9:d4:32:2f:73:6f:1f:b8:7e:
         13:08:8d:0e:4d:bf:d6:9e:46:fd:8d:2a:e7:7e:f8:9b:1d:08:
         6c:0b:b1:30:39:5f:9c:70:66:be:58:40:44:6a:00:8c:dc:72:
         f8:24:f4:7e:8f:08:56:d8:26:01:48:c3:3f:00:67:22:e4:f2:
         a3:6b:90:94:3d:0b:a3:33:f4:2f:c9:6d:68:f4:a0:79:74:00:
         70:db:33:d0:1d:2e:56:2d:d4:33:b5:4c:58:6c:8b:f5:b3:20:
         67:8d:20:3e:6f:1e:a9:93:23:94:25:6b:bc:7f:57:24:2e:0d:
         10:e0:71:8c:66:95:65:08:04:63:ad:2e:26:cd:7a:b7:c9:97:
         22:ad:ee:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:12 2024 by rpki-client on console-ams.rpki-client.org