Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a316130303a3a2f34302d3430203d3e20323632373239.roa
File:                     323830343a313664383a316130303a3a2f34302d3430203d3e20323632373239.roa (raw, json)
Hash identifier:          KTLrT80ORLZpe6SCfv/eCAAVjFGfBTHbXowTFTI1R48=
Subject key identifier:   E8:93:0B:64:B7:5B:93:DB:58:37:D8:73:B4:00:64:AB:99:BA:73:37
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       171C5E1F0F5058753B0E7BD452F30E9AEF6613FD
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a316130303a3a2f34302d3430203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:25 +0000
ROA not before:           Mon 15 Jul 2024 13:37:25 +0000
ROA not after:            Mon 14 Jul 2025 13:42:25 +0000
asID:                     262729
IP address blocks:        2804:16d8:1a00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1c:5e:1f:0f:50:58:75:3b:0e:7b:d4:52:f3:0e:9a:ef:66:13:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:25 2024 GMT
            Not After : Jul 14 13:42:25 2025 GMT
        Subject: CN=E8930B64B75B93DB5837D873B40064AB99BA7337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:15:7f:d0:37:fa:9e:48:c0:33:22:df:a8:
                    85:2f:60:06:fa:f4:1d:ef:8d:1c:15:d7:35:a3:4f:
                    62:de:23:79:a7:ad:3e:96:9e:6e:0e:4a:be:ef:76:
                    e9:09:33:40:2b:b3:c1:2a:36:21:9e:7d:7b:42:3c:
                    de:13:2c:8e:e2:f6:62:71:45:2b:43:e4:71:42:f9:
                    c3:3b:be:69:54:36:25:d5:b4:c9:83:01:a9:f7:b5:
                    27:30:94:ba:6c:68:fe:04:cc:16:b0:d6:1b:30:16:
                    42:ec:e9:44:67:5b:74:64:2d:ae:c1:fd:9d:b2:7c:
                    06:d3:80:22:b9:67:5c:c3:41:7d:fe:c8:7f:3d:0c:
                    30:93:c9:c3:51:67:1b:b7:7c:cb:76:cf:99:87:f8:
                    45:24:a6:97:92:a0:29:7f:a4:f6:a3:3b:15:46:b5:
                    e4:00:89:8f:ad:71:8a:b2:d8:76:02:ed:23:64:f3:
                    69:57:1a:99:d1:3a:e4:38:2b:e6:1b:47:bf:37:6c:
                    7a:e0:dc:96:af:09:1a:13:27:ae:3c:cf:df:c4:f9:
                    45:20:f6:fc:2f:d0:83:7d:56:8a:ee:33:38:1e:30:
                    32:85:48:09:59:76:c6:bd:ca:67:3c:05:c6:0d:47:
                    e4:18:07:34:a7:8f:96:3f:7d:f7:1b:02:9b:04:fd:
                    ac:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:93:0B:64:B7:5B:93:DB:58:37:D8:73:B4:00:64:AB:99:BA:73:37
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a316130303a3a2f34302d3430203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8:1a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:ec:56:80:45:7e:13:30:ca:d2:e4:ce:f3:53:09:53:0e:18:
         2b:77:d6:dc:56:f5:f7:f3:3f:1b:9a:be:11:7b:b8:64:5c:60:
         98:3f:8f:0e:77:c0:d6:45:c9:08:ab:89:ef:19:7c:e5:da:f3:
         32:79:62:70:c8:26:93:35:ba:bc:fe:54:a2:20:86:6b:51:d9:
         6a:df:2c:e6:31:d7:a9:18:f9:02:ab:de:ef:96:78:b0:8f:5e:
         cc:21:1f:54:65:13:26:bd:03:e0:6e:9e:a9:0f:39:a5:da:39:
         29:78:1f:90:b2:77:4d:bb:58:59:5c:50:4b:ca:c1:e4:4d:7f:
         a1:a5:0a:55:52:b7:f1:92:a5:85:82:ac:e9:1b:51:92:91:bb:
         79:ce:cf:35:a5:fe:a0:7c:fa:fe:81:bb:5b:ea:09:df:96:d4:
         8a:f8:d5:be:33:e3:20:90:9e:3a:3c:b9:81:bf:0c:d0:cb:c4:
         d5:0b:da:0c:3e:05:ff:d2:2b:aa:d9:39:e1:68:7a:ba:9f:ae:
         da:34:51:36:5b:6f:e3:5b:20:32:d5:d0:ba:01:60:62:4a:ad:
         5d:92:0b:9a:6e:9d:a6:cf:59:ae:38:05:84:10:93:dd:93:a0:
         19:4d:d6:8a:29:88:e1:69:a8:40:2e:c2:78:38:e0:13:eb:fc:
         d4:4d:fc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:13:40 2024 by rpki-client on console-fra.rpki-client.org