Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a3230303a3a2f33392d3339203d3e20323632373239.roa
File:                     323830343a313664383a3230303a3a2f33392d3339203d3e20323632373239.roa (raw, json)
Hash identifier:          rteazAYIZ9Ey8KnagSv6eYH1iB5JJS7xqHb1t9sNr7M=
Subject key identifier:   64:22:0A:F9:B4:88:5E:8A:C6:B7:1D:20:B3:EC:2E:9F:5B:11:66:8A
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       2644E6D84BE4851E30F009B57DFFF5DC94228BBA
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a3230303a3a2f33392d3339203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:26 +0000
ROA not before:           Mon 15 Jul 2024 13:37:26 +0000
ROA not after:            Mon 14 Jul 2025 13:42:26 +0000
asID:                     262729
IP address blocks:        2804:16d8:200::/39 maxlen: 39

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:44:e6:d8:4b:e4:85:1e:30:f0:09:b5:7d:ff:f5:dc:94:22:8b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:26 2024 GMT
            Not After : Jul 14 13:42:26 2025 GMT
        Subject: CN=64220AF9B4885E8AC6B71D20B3EC2E9F5B11668A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d6:f2:18:fc:51:c2:f4:7d:4a:f7:bd:21:ee:
                    35:5b:f4:1d:46:37:cc:bb:85:89:53:1d:e7:17:84:
                    57:fc:80:74:9d:8b:b1:63:41:bb:33:2d:d9:05:ef:
                    58:e0:98:06:e8:a8:df:4c:2e:a7:04:b2:ce:3c:63:
                    23:ac:fd:26:31:fb:42:c2:24:75:0e:38:85:5e:e6:
                    9e:cb:ac:61:10:e6:d1:6d:ed:66:a8:c0:80:c7:ca:
                    0f:6c:82:e2:94:a3:45:bf:b2:4e:a0:db:c4:2a:e1:
                    ae:a3:e4:eb:49:22:f3:b3:cf:ad:f1:cb:00:cb:d5:
                    47:72:19:13:a5:d8:a6:01:2c:00:c3:a5:2b:75:42:
                    53:4c:f1:9e:be:38:d7:28:68:f4:3a:3e:44:5a:61:
                    32:c2:dd:97:51:fe:fe:9d:b5:95:b5:b9:8e:67:7e:
                    e0:69:40:51:06:d2:93:f4:b5:c4:b4:c0:9e:50:bd:
                    75:1b:10:74:f2:8d:70:8c:f9:ba:37:d7:3a:93:75:
                    6a:92:a6:60:35:2b:87:1d:47:c3:2b:7b:a3:4e:af:
                    1d:ff:85:e6:d6:99:3f:d9:67:1f:e5:b8:4c:77:66:
                    e1:74:a6:3b:cd:f7:17:46:45:f9:32:36:ae:1b:ca:
                    4f:c1:ed:0c:67:98:2c:11:83:a3:87:1e:31:13:e6:
                    c6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:22:0A:F9:B4:88:5E:8A:C6:B7:1D:20:B3:EC:2E:9F:5B:11:66:8A
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a3230303a3a2f33392d3339203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8:200::/39

    Signature Algorithm: sha256WithRSAEncryption
         b4:40:2a:a4:74:08:85:f7:30:65:ae:db:4a:36:1f:2e:e6:53:
         c8:fe:be:ef:c6:36:48:64:ac:88:5e:98:cf:c6:2f:47:a3:31:
         0a:ff:19:dd:51:92:72:e1:47:fb:3f:52:2b:70:49:fa:0d:9e:
         77:75:63:c0:4b:c3:a4:af:e6:66:1d:db:62:e5:64:4e:b5:9b:
         1e:74:7d:dc:5f:79:47:d8:28:37:83:07:41:0b:af:1e:43:41:
         b9:e2:23:79:cb:6e:43:b0:54:4c:f0:96:77:ef:c8:88:36:22:
         a9:74:1f:39:cb:8c:7b:e4:77:34:ac:03:3b:60:8c:8c:d4:4d:
         b8:91:bd:75:82:06:ec:2d:c1:ae:d5:9d:d8:80:50:32:0a:ac:
         7d:66:62:39:22:b4:96:85:4f:2e:7b:7a:f0:80:3f:97:2f:47:
         ae:bd:3c:79:69:84:74:ae:c2:03:0f:46:55:77:db:5b:54:34:
         19:8e:c8:29:ab:d3:89:6f:b4:e9:d8:13:a7:2c:ed:c4:4a:3d:
         bb:b7:b8:e5:6f:73:89:0b:52:a2:f7:86:6b:94:cb:70:25:1e:
         02:5a:14:f6:9a:95:74:c0:b4:87:61:a3:4a:d1:d3:52:5f:4f:
         c9:c1:c7:c6:7d:4b:7f:fe:0d:0b:22:7f:ea:1d:ed:a1:6e:14:
         7b:2a:97:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org