Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/323830343a363235633a3a2f33322d3332203d3e20323639323932.roa
File:                     323830343a363235633a3a2f33322d3332203d3e20323639323932.roa (raw, json)
Hash identifier:          iG9S9U9fXGCHJbOQDHfY8KU88PT5KXg8YyOAssEhUOo=
Subject key identifier:   F8:70:7D:A7:29:62:67:C8:44:41:FF:66:75:E3:3A:28:5F:21:BC:57
Certificate issuer:       /CN=891876379661096633CCF1E14D82D1BBB9CBF133
Certificate serial:       227CA5FE10002570CB4DF6AF67DB2936710F260D
Authority key identifier: 89:18:76:37:96:61:09:66:33:CC:F1:E1:4D:82:D1:BB:B9:CB:F1:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891876379661096633CCF1E14D82D1BBB9CBF133.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/323830343a363235633a3a2f33322d3332203d3e20323639323932.roa
Signing time:             Tue 15 Oct 2024 16:41:03 +0000
ROA not before:           Tue 15 Oct 2024 16:36:03 +0000
ROA not after:            Tue 14 Oct 2025 16:41:03 +0000
asID:                     269292
IP address blocks:        2804:625c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.crl
                          rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891876379661096633CCF1E14D82D1BBB9CBF133.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:7c:a5:fe:10:00:25:70:cb:4d:f6:af:67:db:29:36:71:0f:26:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891876379661096633CCF1E14D82D1BBB9CBF133
        Validity
            Not Before: Oct 15 16:36:03 2024 GMT
            Not After : Oct 14 16:41:03 2025 GMT
        Subject: CN=F8707DA7296267C84441FF6675E33A285F21BC57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:65:b5:05:d0:9b:38:0e:17:c8:98:5b:99:54:
                    1f:64:35:06:ae:fb:48:fd:9b:3a:0e:98:70:40:66:
                    cd:40:70:58:88:65:d7:d5:95:24:61:0f:61:f2:83:
                    75:1a:c4:40:bd:49:dd:ba:f8:e0:36:c5:f6:77:e0:
                    fc:af:95:e2:19:5f:db:fb:5b:51:d7:d3:48:ac:41:
                    3b:f7:24:de:92:b2:75:8c:06:90:ba:ff:df:45:b8:
                    8a:43:3b:38:03:94:9c:59:37:85:06:cf:b1:e5:e9:
                    43:da:5c:ad:69:73:79:7a:e6:fe:13:71:21:ec:6b:
                    6b:c1:88:4e:d5:e1:f2:96:20:b8:ed:e5:59:da:df:
                    c7:d8:7a:60:19:85:a0:0a:52:76:d9:82:c3:d2:9f:
                    60:c2:83:3b:4d:68:5d:56:56:17:9a:00:ed:2e:5c:
                    0f:12:10:4d:ee:a1:cf:9e:8d:b2:09:00:d0:9c:ff:
                    fa:01:72:ff:9d:e5:28:29:21:06:1a:c0:9f:c4:f9:
                    87:e5:65:0b:5c:53:5a:36:0d:37:4d:83:de:4c:f2:
                    10:b2:66:d0:d4:e6:6a:b8:3f:a5:50:26:c8:6f:db:
                    5b:96:c7:87:a0:62:6b:31:93:be:66:cf:12:72:87:
                    31:f1:90:a3:2a:25:70:dd:4d:eb:89:e6:50:35:c2:
                    77:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:70:7D:A7:29:62:67:C8:44:41:FF:66:75:E3:3A:28:5F:21:BC:57
            X509v3 Authority Key Identifier:
                keyid:89:18:76:37:96:61:09:66:33:CC:F1:E1:4D:82:D1:BB:B9:CB:F1:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891876379661096633CCF1E14D82D1BBB9CBF133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/323830343a363235633a3a2f33322d3332203d3e20323639323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:625c::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:76:a5:59:6c:14:35:1a:38:f8:a2:b0:bf:90:24:2a:1a:c0:
         16:ef:7c:04:01:0b:a4:84:3e:83:48:cb:f7:bf:1b:ea:b6:df:
         33:99:3c:7f:50:59:09:7a:71:86:7d:c5:17:a2:64:21:02:85:
         2c:84:ef:3c:00:3d:f5:22:da:ee:8b:a7:3a:db:67:ad:bb:da:
         ac:59:2c:8c:64:36:82:36:d2:f9:f7:4a:7c:ed:ca:b1:ab:82:
         63:73:44:77:4f:a3:48:f5:1e:71:3f:3c:46:13:b1:c4:34:c4:
         b2:6d:81:29:88:a2:16:e9:ef:0f:d3:69:ee:b8:d2:6a:e4:20:
         52:76:84:ff:10:1f:8d:34:e1:98:c9:5c:a3:d3:0c:25:2c:37:
         14:0c:89:de:47:ad:1a:8c:af:6c:ea:ab:f7:45:ee:ca:05:14:
         d2:2e:94:25:0c:4e:ca:47:b1:dd:f2:6c:11:65:e2:5a:b1:e9:
         55:50:6e:47:4c:c2:39:a0:f0:e5:71:c6:10:e5:b0:8e:24:d2:
         e5:91:63:14:55:91:76:65:97:c0:71:52:6c:1a:98:0e:a9:d7:
         0a:06:f7:04:0e:2e:ea:a1:a2:ad:9e:fe:45:45:b8:1b:f2:25:
         fa:56:b2:2d:37:14:cd:46:5d:fb:ba:58:ad:5f:5c:c2:40:a2:
         ad:85:68:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:57 2024 by rpki-client on console-fra.rpki-client.org