Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a323030303a3a2f33362d3336203d3e20323632373239.roa
File:                     323830343a313664383a323030303a3a2f33362d3336203d3e20323632373239.roa (raw, json)
Hash identifier:          Zbil8oLSqPih14E/n+7WStns3RIyPtJfkJ/ZHfieGqI=
Subject key identifier:   BF:7C:D5:A3:68:31:89:E2:53:64:CE:FE:65:4E:F8:8E:F9:95:97:1E
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       254C2D8239DD22954BEDFD7CAEA7B3D47EEDD636
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a323030303a3a2f33362d3336203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:26 +0000
ROA not before:           Mon 15 Jul 2024 13:37:26 +0000
ROA not after:            Mon 14 Jul 2025 13:42:26 +0000
asID:                     262729
IP address blocks:        2804:16d8:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4c:2d:82:39:dd:22:95:4b:ed:fd:7c:ae:a7:b3:d4:7e:ed:d6:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:26 2024 GMT
            Not After : Jul 14 13:42:26 2025 GMT
        Subject: CN=BF7CD5A3683189E25364CEFE654EF88EF995971E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e3:27:fa:45:cc:37:a2:9d:6d:9d:c0:30:fa:
                    5f:5e:96:a5:17:29:38:59:fc:a5:ba:d1:d6:ad:76:
                    95:c6:e0:19:de:ff:48:cd:c8:a2:db:74:36:d0:8d:
                    bc:a4:9a:1a:78:ad:05:57:e2:9a:b6:4b:3f:12:28:
                    e8:69:d5:c7:96:5e:aa:8d:85:cb:bb:8a:28:d8:0e:
                    23:2e:7c:51:37:38:c2:ab:97:2f:38:c4:72:f6:83:
                    f2:3f:61:68:0c:4b:ae:31:84:7d:c4:e0:be:5d:9c:
                    71:58:35:82:82:62:1f:e5:95:9d:ed:b2:2f:2d:64:
                    54:98:62:bb:4f:60:77:8f:e7:12:d8:61:39:e0:f8:
                    a5:60:bc:00:f8:3b:51:3e:92:fb:82:02:3d:56:b8:
                    7c:29:50:72:78:fb:8b:bd:ba:ce:ac:ad:b0:9b:5f:
                    e8:44:df:37:5b:5e:a7:5c:ff:7e:b7:24:12:b6:4d:
                    36:25:6c:19:62:44:91:8b:5b:0d:df:b3:c7:7c:3b:
                    ae:62:3d:46:97:f3:70:a3:f7:a2:76:d6:05:81:ab:
                    79:06:b4:c1:8f:d4:e7:d8:35:71:98:76:66:f7:b9:
                    c8:b8:ea:79:4a:ab:fd:4f:f3:79:42:57:41:2f:ec:
                    2e:09:ed:f2:e3:8b:20:00:3d:0f:40:09:db:96:69:
                    22:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7C:D5:A3:68:31:89:E2:53:64:CE:FE:65:4E:F8:8E:F9:95:97:1E
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a323030303a3a2f33362d3336203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         91:9d:ac:be:be:9b:b0:e1:40:fc:28:89:fa:fb:85:b3:2b:a8:
         b3:7e:e7:a1:f3:53:10:a8:ea:ed:99:48:f8:8b:48:28:3f:7f:
         39:58:07:38:47:bd:0d:9b:f1:0a:52:28:3b:40:9c:ba:d4:1b:
         49:9d:fb:0d:0a:aa:5f:23:36:45:7b:5b:2b:9f:8b:28:66:9c:
         a8:02:5a:ae:df:1d:17:52:c4:67:e0:43:77:80:b3:a8:e9:90:
         de:1b:32:5b:d6:f3:4f:cb:a9:32:f3:9b:35:a0:b5:c9:10:51:
         e1:c9:8d:f7:ea:29:56:41:d0:88:16:7f:26:dd:75:8c:b9:5b:
         75:1c:91:0d:a2:35:66:ac:18:d1:e0:6c:53:6b:1a:dc:c1:1e:
         70:22:43:04:fe:a0:30:3a:a2:99:56:54:15:42:88:d6:98:60:
         b6:95:01:74:4b:48:65:5c:01:b1:c6:8d:f6:82:40:fa:1d:ea:
         ed:cd:a2:6e:1c:15:46:15:0b:3a:d4:d5:b9:a6:9a:ea:5e:af:
         9c:a2:aa:2f:42:79:5c:08:56:a2:5d:cb:e5:2f:e4:40:f4:0f:
         25:92:b3:b3:a9:2c:fa:b0:ab:83:ac:50:d1:8b:83:24:68:71:
         4b:81:6e:59:36:4e:5d:90:f7:4a:e4:6a:83:00:89:d6:28:62:
         15:3c:c1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:18 2024 by rpki-client on console-ams.rpki-client.org