Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a316430363a3a2f34382d3438203d3e20323632373239.roa
File:                     323830343a313664383a316430363a3a2f34382d3438203d3e20323632373239.roa (raw, json)
Hash identifier:          1Jav3ogAI6p9WzuIwrPrfR+iastri+hVsuabxnzR/i4=
Subject key identifier:   24:9E:61:F9:56:9B:8D:39:6B:5E:03:32:B0:E8:61:D5:96:79:D1:3E
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       2AC886CB6116079D43CFAEAD54F41DB27B8CB815
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a316430363a3a2f34382d3438203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:25 +0000
ROA not before:           Mon 15 Jul 2024 13:37:25 +0000
ROA not after:            Mon 14 Jul 2025 13:42:25 +0000
asID:                     262729
IP address blocks:        2804:16d8:1d06::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c8:86:cb:61:16:07:9d:43:cf:ae:ad:54:f4:1d:b2:7b:8c:b8:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:25 2024 GMT
            Not After : Jul 14 13:42:25 2025 GMT
        Subject: CN=249E61F9569B8D396B5E0332B0E861D59679D13E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:50:47:69:8f:a8:c1:85:bc:88:92:56:72:
                    8b:00:eb:b8:ee:b7:ec:62:03:8b:2f:8a:0c:3c:f9:
                    f9:85:9b:19:2b:d3:1b:27:9e:27:81:cf:5d:ad:28:
                    58:45:de:54:59:a1:6f:43:cf:2c:dd:ed:d7:1b:8a:
                    69:fa:3f:86:d2:92:30:aa:33:c7:36:5c:ce:2b:2b:
                    71:e8:22:08:da:7a:4f:05:e2:b1:b7:23:01:4d:94:
                    04:98:73:90:1d:b9:73:1b:51:f6:a1:c5:f1:e1:50:
                    3b:51:9c:9d:3c:e3:89:2d:c3:38:a1:d3:6d:47:49:
                    06:85:b6:95:97:a5:03:70:a1:f4:aa:15:98:1a:57:
                    33:af:c9:fe:8a:65:c7:74:83:b8:7e:e7:d0:1e:ae:
                    73:e2:ac:55:6c:6f:7f:54:2c:1c:87:e2:a8:96:75:
                    6d:e5:4f:87:8d:13:1f:28:8d:d2:a5:16:eb:04:39:
                    54:48:95:ca:45:58:82:e9:68:97:37:fd:f9:40:2d:
                    b4:38:90:23:50:78:4e:56:a9:50:c1:84:4f:e1:cf:
                    7e:fe:7b:d6:b5:93:24:12:27:28:cf:1f:11:a4:5b:
                    68:72:60:5f:be:5b:a7:24:83:b4:55:dd:cd:8a:02:
                    57:f2:b6:46:93:a5:51:30:d6:2e:f8:c2:dd:d4:fc:
                    e3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9E:61:F9:56:9B:8D:39:6B:5E:03:32:B0:E8:61:D5:96:79:D1:3E
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a316430363a3a2f34382d3438203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8:1d06::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:b9:63:3e:cd:0e:db:b9:62:e2:7c:8c:e0:8b:19:a4:70:5e:
         2f:38:ba:18:a3:3d:75:fb:72:a8:23:0a:02:0a:70:ed:11:4c:
         ca:f7:1b:d7:d2:2a:b7:6a:38:e2:92:ff:36:3d:f6:01:32:0b:
         2c:f2:c8:ab:ee:84:b0:0e:a4:ff:54:7f:77:10:85:87:ce:ab:
         e3:ba:5e:79:3d:9c:75:9d:02:93:ea:0d:78:6f:e8:7d:92:63:
         b7:6c:00:81:49:16:6a:ad:8a:13:ce:b9:34:b6:39:7d:b2:2c:
         9d:c6:b8:64:b4:77:e7:32:7f:c3:1e:c2:fb:04:c4:05:e6:66:
         d8:35:28:fc:42:fd:5c:fe:d4:f4:21:93:ad:5c:55:83:0e:86:
         d2:d5:3c:33:ff:99:2f:2b:96:36:aa:a7:68:0b:ac:15:58:6f:
         5a:b0:ce:0c:92:40:f6:28:7b:64:39:cd:33:e3:ea:11:3e:7f:
         bd:70:55:dc:50:cb:03:11:50:99:f4:e6:00:4b:3f:a7:30:87:
         84:f8:cc:3d:f8:e9:46:c8:fb:c4:cb:0c:aa:96:c5:66:8b:de:
         19:45:45:59:27:ac:cb:c8:2f:26:e3:52:e4:fc:34:42:2d:69:
         cc:86:df:4b:e3:0e:8a:bd:ef:ff:0d:5c:1c:da:36:74:fe:c6:
         99:f4:cf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org