Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3130303a3a2f34302d3430203d3e203532373732.roa
File:                     323830343a323539633a3130303a3a2f34302d3430203d3e203532373732.roa (raw, json)
Hash identifier:          oIui5L4qWPH5u7IZWASGM8dBZ+QT1gSkxEA1Z9HAeIU=
Subject key identifier:   F0:E4:3E:4F:82:9C:50:1D:D6:87:20:31:36:BB:A2:42:E1:3B:94:18
Certificate issuer:       /CN=E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64
Certificate serial:       71F060C188176F7B2C2B5F73AE9F99FF85ED499F
Authority key identifier: E7:99:2D:D1:B2:52:5C:1F:90:08:B6:33:9B:9D:B3:ED:A6:E6:2E:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3130303a3a2f34302d3430203d3e203532373732.roa
Signing time:             Sat 31 Aug 2024 14:13:09 +0000
ROA not before:           Sat 31 Aug 2024 14:08:09 +0000
ROA not after:            Sat 30 Aug 2025 14:13:09 +0000
asID:                     52772
IP address blocks:        2804:259c:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 14:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f0:60:c1:88:17:6f:7b:2c:2b:5f:73:ae:9f:99:ff:85:ed:49:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64
        Validity
            Not Before: Aug 31 14:08:09 2024 GMT
            Not After : Aug 30 14:13:09 2025 GMT
        Subject: CN=F0E43E4F829C501DD687203136BBA242E13B9418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a6:6d:f3:a5:53:71:ae:43:4d:83:ee:2a:67:
                    e4:a1:3a:21:d5:41:07:f7:df:af:9c:e1:63:04:a9:
                    2d:24:7a:05:5f:79:c3:39:2a:86:c8:7a:da:90:b6:
                    9c:af:8b:a1:91:3b:e5:d8:21:f1:79:ec:60:f1:ec:
                    a5:79:5e:0e:45:0a:c7:38:8d:f9:60:c3:a9:41:db:
                    e1:d5:87:d1:86:99:c3:af:78:69:44:2d:99:2f:9f:
                    c5:ec:16:76:35:32:5c:67:82:5e:31:09:68:09:df:
                    26:52:01:20:9c:ad:a0:76:bc:ad:09:c1:b0:43:3d:
                    1b:18:68:4a:45:8a:db:d8:09:72:f6:96:6d:05:e1:
                    a0:5a:04:8e:3b:18:75:5a:20:32:af:80:f1:cb:eb:
                    3b:59:62:13:7f:d6:2a:9c:fd:f9:34:10:ae:0d:fb:
                    d7:db:ec:65:3c:74:56:e3:38:1c:ed:23:17:e4:9c:
                    64:51:79:e1:ad:10:cf:95:59:63:e5:71:6b:f3:7b:
                    68:e9:e7:9c:fb:60:77:52:70:42:09:ea:44:4b:d7:
                    30:fa:ab:7d:09:ce:a2:28:75:ff:6d:4b:9f:5a:53:
                    fe:0f:a4:39:08:a3:3b:0c:3b:d6:23:27:fd:01:5d:
                    83:a9:1e:73:ae:2d:f8:84:ed:49:64:25:1b:3f:7d:
                    de:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E4:3E:4F:82:9C:50:1D:D6:87:20:31:36:BB:A2:42:E1:3B:94:18
            X509v3 Authority Key Identifier:
                keyid:E7:99:2D:D1:B2:52:5C:1F:90:08:B6:33:9B:9D:B3:ED:A6:E6:2E:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3130303a3a2f34302d3430203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:259c:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:b0:6a:10:58:01:b5:b7:cd:fc:4c:97:ca:5e:f1:b5:aa:1d:
         43:68:c9:be:ca:46:ce:88:1a:0a:65:3a:5e:fb:5d:44:39:25:
         f9:a4:3e:9c:55:52:34:eb:35:cf:b1:78:5e:3d:7e:c3:7b:6c:
         9b:45:e0:55:a3:74:e8:e3:3e:8a:29:ec:df:32:a5:02:a5:0f:
         87:69:ec:e1:73:fa:82:8b:f5:91:6d:1d:e4:89:45:24:f6:cd:
         b1:11:db:9a:86:04:45:e0:7b:4a:bc:ca:1d:1c:02:22:16:c6:
         36:16:98:b2:3a:e2:33:49:41:a0:b0:76:f2:20:8a:f6:78:5a:
         84:cb:ac:4f:ef:85:68:3d:a6:1c:0d:82:ba:36:2f:b0:95:d9:
         ab:7b:dc:97:3c:ad:a0:45:09:24:a4:2e:3a:89:b6:d1:33:22:
         e9:5d:4d:0e:3d:9b:ce:9b:4b:d9:3d:76:05:07:87:02:7a:97:
         e1:de:49:03:91:d8:15:c1:ad:0d:47:b4:cb:37:d2:97:ec:43:
         80:46:c8:e6:66:f8:87:2d:25:dd:2f:cd:74:0c:46:90:30:0a:
         4f:03:21:6d:3e:7c:c8:06:62:fd:e1:b6:79:2f:00:a5:18:63:
         4f:95:89:13:92:95:ee:aa:3f:b5:47:bb:38:cd:db:08:7d:50:
         ba:08:da:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:18 2024 by rpki-client on console-fra.rpki-client.org