Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a316430313a3a2f34382d3438203d3e20323632373239.roa
File:                     323830343a313664383a316430313a3a2f34382d3438203d3e20323632373239.roa (raw, json)
Hash identifier:          vl7MRTb6sRw0JQBrN6t7WJzb5G9ApzDNI/LukfP+VCk=
Subject key identifier:   12:4B:F6:DB:42:1A:26:F3:18:A5:2B:1E:A8:DB:99:59:F3:B7:7D:1F
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       67F193CC0F5A372AE7CE7F08C42447206C3B44DB
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a316430313a3a2f34382d3438203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:25 +0000
ROA not before:           Mon 15 Jul 2024 13:37:25 +0000
ROA not after:            Mon 14 Jul 2025 13:42:25 +0000
asID:                     262729
IP address blocks:        2804:16d8:1d01::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f1:93:cc:0f:5a:37:2a:e7:ce:7f:08:c4:24:47:20:6c:3b:44:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:25 2024 GMT
            Not After : Jul 14 13:42:25 2025 GMT
        Subject: CN=124BF6DB421A26F318A52B1EA8DB9959F3B77D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:52:fe:9c:1a:48:f2:6d:a1:c3:c2:86:e0:9e:
                    7a:6c:24:e7:7c:3d:80:6a:18:da:6f:e6:46:35:2e:
                    20:69:06:5e:90:3b:13:fb:e4:6d:d9:b5:75:57:95:
                    62:8a:ab:ac:8b:3e:89:98:2d:d8:23:5d:70:c8:04:
                    db:40:d5:93:71:7b:08:0f:7c:28:e0:f3:13:03:45:
                    cd:6f:3d:c5:1e:a8:9a:5e:46:f2:7e:dc:da:b3:be:
                    91:00:b5:3d:44:a8:e5:4c:74:a8:2e:54:46:0c:31:
                    4b:ec:03:80:a5:24:b2:ba:8a:34:00:05:20:b2:c5:
                    fd:53:d2:c4:b9:79:a2:4d:e1:69:ff:84:1f:1b:95:
                    e2:fb:68:b0:6f:52:21:ad:0f:5f:4b:c0:14:0c:d5:
                    7d:0b:13:bb:cb:0a:9a:d1:92:77:1c:e5:9c:c2:ed:
                    b0:80:c8:e0:80:90:f7:3c:86:8f:c3:c4:8c:ca:50:
                    dd:e0:57:4b:8a:20:1c:4b:63:0f:5f:e1:f3:c6:71:
                    dc:df:e5:70:11:91:70:05:24:1a:39:7f:b1:cc:c4:
                    45:10:53:14:d4:89:ad:d6:b3:84:f4:0a:79:a8:02:
                    b0:ba:c3:39:3e:f2:15:70:55:d1:4c:4b:43:62:31:
                    bc:f8:70:bd:d8:74:55:29:e9:d3:b8:0a:da:ba:cd:
                    5b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4B:F6:DB:42:1A:26:F3:18:A5:2B:1E:A8:DB:99:59:F3:B7:7D:1F
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a316430313a3a2f34382d3438203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8:1d01::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:6e:7d:9f:bd:67:1b:88:57:b2:3d:3d:ba:41:d3:d8:6d:6a:
         d9:cb:59:8b:a5:6b:92:59:e8:77:41:fc:a3:63:ca:b5:88:74:
         d1:d6:7c:86:9f:73:ca:79:64:44:00:aa:29:54:e9:05:67:7f:
         4b:82:3b:97:c7:3e:9a:3b:b9:d1:f7:b2:2f:61:d3:d8:c0:f7:
         d6:5f:6e:e2:bc:5a:a5:ec:31:00:64:79:7f:11:75:70:6c:a9:
         66:96:59:7d:92:e6:fe:cc:f8:3a:3a:aa:70:c6:d4:e9:18:5a:
         28:61:c2:e0:38:e1:d8:93:09:85:f9:7b:e7:42:62:64:64:37:
         fb:8f:01:29:92:c9:e0:d8:85:7f:de:e0:b7:b1:f6:92:ed:61:
         1f:aa:03:79:b8:17:c7:30:43:ba:7d:43:24:65:43:bd:12:0f:
         81:7c:f2:89:36:77:ad:77:95:15:37:72:c7:ef:7b:d8:39:f4:
         f9:75:1f:01:ae:1e:8d:7a:d5:e1:91:c7:d6:c2:36:f2:3e:49:
         37:4f:6c:f2:3d:e2:54:7b:ad:fb:3d:cf:e4:da:e2:06:4e:33:
         09:10:ab:c3:5d:0f:f2:2b:8a:25:84:41:58:98:91:73:72:d1:
         4e:2c:d3:36:f9:14:75:fa:99:c7:d0:c1:b9:f7:bc:fa:5e:8d:
         52:7d:17:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:13:40 2024 by rpki-client on console-fra.rpki-client.org