Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a313030303a3a2f33382d3338203d3e20323632373239.roa
File:                     323830343a313664383a313030303a3a2f33382d3338203d3e20323632373239.roa (raw, json)
Hash identifier:          ehHMQdW9o/lW5paDd/hULs5UdDK1539HDgZF1o8gxNY=
Subject key identifier:   76:32:57:9A:DA:B0:CD:3F:49:90:44:00:7F:EF:C4:1B:4A:87:27:BA
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       6E7B3F1E28DC509108297599437360F0AFB3B1F4
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a313030303a3a2f33382d3338203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:24 +0000
ROA not before:           Mon 15 Jul 2024 13:37:24 +0000
ROA not after:            Mon 14 Jul 2025 13:42:24 +0000
asID:                     262729
IP address blocks:        2804:16d8:1000::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:7b:3f:1e:28:dc:50:91:08:29:75:99:43:73:60:f0:af:b3:b1:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:24 2024 GMT
            Not After : Jul 14 13:42:24 2025 GMT
        Subject: CN=7632579ADAB0CD3F499044007FEFC41B4A8727BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:4c:27:dd:dc:d9:6b:be:0f:b0:c0:cc:92:34:
                    2b:88:4b:8d:e3:12:72:49:f3:16:07:c8:7e:0f:47:
                    80:16:6a:37:e3:bc:38:a7:4b:c9:72:51:d0:09:62:
                    7b:8e:da:94:58:25:bb:a5:a1:35:1e:b7:97:18:98:
                    6d:54:7a:89:eb:f3:6b:21:b1:7f:d0:58:cd:b4:9d:
                    b3:a1:66:95:a6:3c:fb:24:4e:f9:b4:57:69:91:25:
                    3c:4d:75:6b:b8:fc:1c:e5:0e:a5:3f:cb:d1:93:66:
                    e0:d0:ca:71:94:32:99:c7:b3:a4:76:21:ce:80:80:
                    fe:5c:1f:2d:21:d3:ba:fe:7e:88:5e:45:0f:e3:79:
                    47:e2:b7:01:b6:3a:05:8d:65:90:ab:33:1e:d1:dd:
                    35:22:1b:9f:5f:d0:9a:15:ed:1e:1e:0c:6c:08:16:
                    41:30:69:12:a7:64:30:0f:06:db:f9:7b:ce:31:5a:
                    e1:14:bc:ef:49:ed:dc:c5:87:33:21:00:70:9f:b4:
                    a9:7b:91:3c:1a:12:96:be:d1:7a:c4:70:21:d8:47:
                    93:55:03:5c:2f:0c:42:b2:a1:bd:7c:7d:e6:7b:02:
                    84:04:88:29:61:a0:e2:0c:02:78:dd:c0:9f:50:91:
                    dd:c7:5e:30:f2:e3:b4:d0:78:62:1e:96:9d:65:49:
                    be:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:32:57:9A:DA:B0:CD:3F:49:90:44:00:7F:EF:C4:1B:4A:87:27:BA
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a313030303a3a2f33382d3338203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8:1000::/38

    Signature Algorithm: sha256WithRSAEncryption
         13:e5:4e:ba:0e:2d:bc:7e:4d:b7:c5:ae:60:ac:c6:dc:cf:63:
         56:2f:9e:a4:ac:30:c2:52:75:17:65:d8:86:8d:1c:94:37:68:
         98:13:80:37:0e:85:7a:1a:ad:e7:d6:b6:a3:31:84:87:56:c5:
         e1:f1:e2:db:31:95:bf:dc:d2:61:4b:6c:12:1b:b7:39:d2:a6:
         7a:88:6d:62:75:cf:ea:b7:12:53:40:18:0e:1e:0d:8e:5e:2a:
         eb:5a:28:78:aa:f3:78:ad:0b:0b:e8:bf:4b:10:4e:be:81:0b:
         d5:03:7e:a9:de:1a:f2:8c:57:9c:52:84:5f:5d:c1:b0:26:3b:
         c6:a9:11:3f:16:53:90:80:96:c5:f7:2d:a2:10:ae:83:11:13:
         5c:3f:14:81:4c:36:2d:05:a3:7d:8d:95:33:21:a2:8f:f7:1e:
         fb:9d:34:c2:93:49:96:35:63:d3:35:58:ef:6f:c8:5d:20:32:
         f9:d7:63:39:ad:98:fc:93:26:b1:3d:82:a6:78:a1:33:67:85:
         5d:e9:74:ad:25:c6:9f:91:11:85:dc:2e:55:88:ca:79:7d:9b:
         d5:25:08:3d:f3:ad:d5:53:e2:2f:86:48:07:79:86:14:0b:57:
         fe:98:eb:b1:af:43:6e:f8:9a:29:90:34:a6:c3:93:71:f1:76:
         cf:f1:8e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org