Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/323830343a38343a3a2f33322d313238203d3e203134323832.roa
File:                     323830343a38343a3a2f33322d313238203d3e203134323832.roa (raw, json)
Hash identifier:          7mg1LGrDDu/k/S5i1yDSV1en9uy/1nZ2zPC3yyyj6dA=
Subject key identifier:   B0:2B:B4:92:78:1D:78:69:6D:2B:05:15:64:AD:6D:57:72:43:29:D0
Certificate issuer:       /CN=4C0D87E51AB54C98BF008C457CF7E01E2266F9AB
Certificate serial:       405D76FB5DF33A449E143DD27BD79536496DBB41
Authority key identifier: 4C:0D:87:E5:1A:B5:4C:98:BF:00:8C:45:7C:F7:E0:1E:22:66:F9:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/323830343a38343a3a2f33322d313238203d3e203134323832.roa
Signing time:             Fri 04 Oct 2024 19:16:09 +0000
ROA not before:           Fri 04 Oct 2024 19:11:09 +0000
ROA not after:            Fri 03 Oct 2025 19:16:09 +0000
asID:                     14282
IP address blocks:        2804:84::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.crl
                          rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 20:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:5d:76:fb:5d:f3:3a:44:9e:14:3d:d2:7b:d7:95:36:49:6d:bb:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C0D87E51AB54C98BF008C457CF7E01E2266F9AB
        Validity
            Not Before: Oct  4 19:11:09 2024 GMT
            Not After : Oct  3 19:16:09 2025 GMT
        Subject: CN=B02BB492781D78696D2B051564AD6D57724329D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:f6:a1:72:66:4d:bb:93:09:8a:ad:2a:95:
                    f1:4b:0a:8f:57:e9:df:37:cc:d0:73:69:81:8f:74:
                    64:c6:1d:d9:66:35:15:a8:b8:0c:31:58:cc:de:a2:
                    bd:b2:fc:e6:dc:d6:11:e4:2a:6f:e4:34:3c:32:63:
                    6d:55:ec:8e:0e:fb:a1:76:d7:ff:37:a5:02:77:9e:
                    80:e4:1b:9a:3f:74:3e:0e:dc:71:19:23:10:80:0e:
                    75:3e:93:a4:dd:a5:2a:da:51:11:f8:fe:77:64:18:
                    bc:2b:f1:bb:4a:35:a0:6b:98:14:5d:70:87:66:67:
                    b3:e0:9b:70:41:af:a3:dc:dd:19:fb:8d:81:c3:eb:
                    10:bb:4d:5a:ff:39:3f:39:ac:f4:6e:42:16:9d:36:
                    70:bc:c3:f3:33:b5:92:ec:96:b5:da:ed:96:a3:ea:
                    13:e8:f0:27:e8:78:59:51:06:c8:15:aa:b6:74:66:
                    48:d9:5c:de:73:08:9c:cd:6f:62:2c:4b:a6:a6:69:
                    37:e4:72:13:03:2c:bb:ca:1a:d9:9c:b8:38:61:09:
                    87:74:82:17:62:2c:e9:3b:3c:75:1d:4f:1c:d1:89:
                    8d:2e:26:a6:65:d2:5f:cb:0f:b0:56:4e:14:dd:b1:
                    be:2e:e0:36:16:0f:37:85:01:15:12:6b:67:74:7e:
                    da:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2B:B4:92:78:1D:78:69:6D:2B:05:15:64:AD:6D:57:72:43:29:D0
            X509v3 Authority Key Identifier:
                keyid:4C:0D:87:E5:1A:B5:4C:98:BF:00:8C:45:7C:F7:E0:1E:22:66:F9:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/323830343a38343a3a2f33322d313238203d3e203134323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:15:fc:71:63:de:80:c7:5e:06:f6:28:ae:aa:ac:ad:a1:7b:
         09:c4:d5:03:d2:9e:80:0e:7a:a4:79:ea:1b:7a:0f:5d:9f:57:
         6e:e4:ae:e4:77:28:f8:5f:98:8a:01:7c:6d:b5:7c:7a:e9:92:
         0a:01:d9:db:80:a2:99:43:3c:01:7e:8f:85:95:62:ff:9e:37:
         cb:d7:78:36:04:3c:52:e0:01:93:d7:0c:88:50:24:c0:32:d3:
         01:6f:68:23:df:fa:e5:4d:30:a4:ec:e3:e9:13:f8:fb:f0:e8:
         5e:ee:41:52:02:3d:ed:56:ac:e8:86:66:54:6e:ae:de:7b:b5:
         b0:9c:72:db:84:11:f4:ba:1b:41:3f:5d:e3:68:d1:ac:0e:c4:
         4d:06:65:e5:98:cd:bf:12:d2:64:d8:de:39:bf:40:49:e4:98:
         09:90:ae:9d:1c:58:f1:58:73:2b:6b:9a:f6:1a:7c:83:56:6b:
         92:40:fd:f6:49:f5:05:2a:85:61:63:28:32:4f:7e:65:88:d2:
         76:5d:ec:f1:c4:1a:f6:2e:86:22:8d:37:53:45:56:8c:58:1f:
         ed:10:fa:6f:78:5d:bf:60:ef:97:c7:15:c2:6b:3c:a6:b1:75:
         c7:85:eb:64:4a:62:92:49:ec:c5:2d:8a:2f:72:e4:42:ef:61:
         b1:3b:f6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:38 2024 by rpki-client on console-fra.rpki-client.org