Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a3330303a3a2f34302d3430203d3e20323632373239.roa
File:                     323830343a313664383a3330303a3a2f34302d3430203d3e20323632373239.roa (raw, json)
Hash identifier:          A2y5aotT+8jGvY1+TBjtIjciYDc1qt6QVMnfCL302mo=
Subject key identifier:   44:70:7E:38:A5:64:57:57:D4:8D:53:05:39:60:8D:14:92:93:AE:44
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       273754A294973528A3E33FA75E0562CCCF033DC0
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a3330303a3a2f34302d3430203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:25 +0000
ROA not before:           Mon 15 Jul 2024 13:37:25 +0000
ROA not after:            Mon 14 Jul 2025 13:42:25 +0000
asID:                     262729
IP address blocks:        2804:16d8:300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:37:54:a2:94:97:35:28:a3:e3:3f:a7:5e:05:62:cc:cf:03:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:25 2024 GMT
            Not After : Jul 14 13:42:25 2025 GMT
        Subject: CN=44707E38A5645757D48D530539608D149293AE44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:27:a8:df:56:f9:c0:a5:24:c5:60:a9:30:52:
                    f9:a1:2e:b5:69:4d:ac:53:c1:87:e3:8b:88:53:49:
                    75:54:8b:f5:83:7c:86:21:85:40:75:98:32:58:8e:
                    fb:6c:0e:d1:b6:6c:47:f5:2b:a0:f2:8c:08:04:9d:
                    bf:58:9c:a2:22:f2:85:63:81:32:d4:6b:e1:0b:d5:
                    ad:ea:e2:ce:a7:19:e1:42:9d:63:0e:2c:98:c1:9d:
                    dc:9c:ec:98:b1:ce:6b:c7:97:69:f4:62:eb:39:a5:
                    d3:48:56:cb:03:d0:e6:40:0c:ef:df:72:81:b2:83:
                    98:af:af:c9:f4:0d:e3:eb:06:33:eb:81:e8:a8:53:
                    5d:8f:d8:24:7d:f4:a9:3b:40:71:0d:6f:a3:14:dd:
                    e9:13:28:58:df:40:1c:03:36:2b:04:c1:99:2d:37:
                    52:24:12:ca:06:07:c4:e6:fe:e9:67:76:0b:5e:54:
                    d8:69:6b:63:00:21:ab:f8:e8:c5:41:0d:85:8e:51:
                    8b:b0:32:1f:bb:39:f2:67:78:54:e1:6a:70:9a:57:
                    a8:2b:69:e4:d6:de:8e:4c:4d:46:68:81:96:29:40:
                    ec:9b:17:84:7e:b6:35:77:99:a7:a7:81:4d:0d:7b:
                    59:a6:de:76:21:f2:ea:02:22:14:66:c1:fa:a3:07:
                    a2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:70:7E:38:A5:64:57:57:D4:8D:53:05:39:60:8D:14:92:93:AE:44
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a3330303a3a2f34302d3430203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         84:6a:3d:da:9c:34:9e:66:d5:42:8e:a1:64:ed:2b:c1:bb:c4:
         5f:35:12:f8:79:aa:99:e5:aa:62:b0:04:1d:5c:70:f6:2d:b9:
         16:53:25:08:fb:17:d5:54:76:c2:52:29:35:a5:1d:a2:cc:c2:
         5d:0a:04:d9:22:41:85:46:c0:30:54:ba:ee:d8:72:f9:69:b8:
         a4:54:44:07:1b:d8:f8:d0:9c:46:15:c6:13:99:06:b3:19:69:
         b5:0b:c9:de:dc:cc:1b:38:01:75:39:a7:ae:be:7b:b8:83:70:
         d5:e3:90:70:1f:1e:f7:ec:2b:eb:9e:37:39:95:48:53:fd:c7:
         b5:5e:38:82:b6:41:07:46:0a:b2:5b:7c:5d:9e:63:e9:92:fd:
         f1:89:13:fe:ef:f2:96:92:4c:4c:9a:c5:57:08:ce:84:7f:74:
         31:5e:0f:21:7b:e2:46:fa:62:4b:07:3a:f6:1b:6f:a9:1f:27:
         80:42:25:18:8c:fe:b4:50:c9:f7:ea:2b:54:cc:58:2f:30:51:
         88:24:84:e6:da:8f:46:d5:0b:fe:99:c2:b6:64:20:ee:d9:f8:
         0c:bf:39:30:7e:81:c5:69:35:ea:a7:a8:22:41:c1:17:0e:a8:
         b7:96:44:64:ca:5c:70:b9:b9:35:85:98:9f:d1:2a:2e:61:fb:
         4c:f7:08:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:13:40 2024 by rpki-client on console-fra.rpki-client.org