Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a353666303a3a2f34382d3438203d3e20323632373239.roa
File:                     323830343a313664383a353666303a3a2f34382d3438203d3e20323632373239.roa (raw, json)
Hash identifier:          OWf8EKeWXt+YztC/utlvsmHsDiS5Vn9zigNGC+VotTk=
Subject key identifier:   C9:D1:06:1C:D4:E8:6D:5B:74:84:7F:65:79:6E:FA:BF:BA:8C:27:91
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       2764230BCF0702BC418C4B756EA70C4DB5A3C561
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a353666303a3a2f34382d3438203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:25 +0000
ROA not before:           Mon 15 Jul 2024 13:37:25 +0000
ROA not after:            Mon 14 Jul 2025 13:42:25 +0000
asID:                     262729
IP address blocks:        2804:16d8:56f0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:64:23:0b:cf:07:02:bc:41:8c:4b:75:6e:a7:0c:4d:b5:a3:c5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:25 2024 GMT
            Not After : Jul 14 13:42:25 2025 GMT
        Subject: CN=C9D1061CD4E86D5B74847F65796EFABFBA8C2791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d9:09:b2:13:7a:bc:2f:24:28:c1:b2:e1:44:
                    8d:77:a6:c7:74:0a:58:24:ba:06:9b:a1:be:25:07:
                    56:e0:c8:01:ea:10:6c:17:b7:3b:09:92:77:d4:86:
                    d4:71:c6:6d:30:9d:a8:3a:9b:f2:c8:8a:d6:cc:0d:
                    40:4d:ea:52:91:02:35:d2:f3:57:f4:fd:a4:99:f5:
                    16:1f:22:61:a1:0a:a6:97:38:5d:da:ca:d2:25:16:
                    ee:63:59:1d:93:56:83:04:cf:6d:b3:ca:22:33:92:
                    b4:d9:91:7a:25:11:fd:29:74:03:fb:08:ad:14:be:
                    18:67:10:20:f8:4d:bc:8e:fb:12:61:83:a7:96:9d:
                    bd:6f:80:d6:ef:4e:5f:a3:f5:f9:2f:dd:f4:e6:25:
                    0e:35:36:f9:8d:d2:18:58:85:8b:9e:8b:5e:e4:9c:
                    e1:71:a6:31:69:44:5b:f8:eb:9c:df:14:33:cd:f6:
                    55:7d:43:20:7b:87:88:3e:1e:f1:fc:2f:37:ef:ac:
                    50:e5:c9:11:66:b6:87:66:44:33:6c:31:77:6f:53:
                    80:06:d2:fc:7c:c0:71:c2:3e:5c:ec:34:70:62:6c:
                    6d:0b:db:8a:d8:a2:53:83:c8:d1:2f:be:d7:98:05:
                    44:6d:64:50:be:48:98:56:ec:36:e5:b5:5b:c3:03:
                    39:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D1:06:1C:D4:E8:6D:5B:74:84:7F:65:79:6E:FA:BF:BA:8C:27:91
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a353666303a3a2f34382d3438203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8:56f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:9a:e2:a8:82:e5:c7:aa:b4:e3:ad:1b:72:6f:70:c8:7d:c4:
         e3:99:99:47:ba:34:f6:12:e7:77:3f:ae:e2:f3:f7:92:13:bf:
         45:cf:67:93:50:6e:a6:c9:42:14:73:b1:10:32:ca:44:38:3f:
         30:a5:c2:f7:04:7c:79:41:ee:3d:c0:86:37:f9:6c:5e:be:b0:
         e9:35:88:6f:1a:9c:f6:37:db:56:7d:19:01:db:cd:c9:c7:65:
         56:cc:a9:ac:41:95:2b:0a:64:c6:08:7a:95:34:29:76:f1:32:
         21:29:7e:f4:2a:b3:70:db:55:18:68:b9:23:4d:42:5f:75:04:
         36:f5:04:f3:6f:93:cc:92:ee:34:8c:c3:a4:7d:9a:fd:39:83:
         6a:c0:93:39:1e:48:3d:11:cc:13:e9:66:fa:8f:41:d1:10:13:
         23:eb:aa:93:a9:40:59:7b:a0:61:a4:a5:05:f9:cb:0f:9f:47:
         89:d2:d2:f2:3d:20:35:a1:40:7d:98:15:4e:b0:f4:e2:1a:02:
         12:cb:17:db:a4:c4:8c:3b:70:05:f2:4d:c7:82:63:2f:95:0d:
         50:71:74:3c:2c:6a:f2:f8:26:a6:34:09:35:80:ce:6d:61:75:
         ff:11:e9:fd:99:33:ce:f1:48:8e:b0:66:52:b3:4b:a1:09:58:
         9c:eb:5b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:18:40 2024 by rpki-client on console-ams.rpki-client.org