Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a333030303a3a2f33362d3336203d3e20323637393931.roa
File:                     323830343a353635343a333030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier:          /Fhz6UXyJ//Mq3OqOMg10YE82NrYh/okM4xqCngy6O0=
Subject key identifier:   0E:51:42:1B:6A:E9:FE:6A:18:36:78:E2:90:E5:C4:F0:D1:53:05:41
Certificate issuer:       /CN=1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F
Certificate serial:       511B18E53D34F020F14F845B2FBD2F1111DAE67F
Authority key identifier: 1F:73:8F:23:C0:91:FA:9E:A9:5E:B9:9A:0B:6D:76:AC:F2:55:3D:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a333030303a3a2f33362d3336203d3e20323637393931.roa
Signing time:             Tue 29 Oct 2024 21:13:16 +0000
ROA not before:           Tue 29 Oct 2024 21:08:16 +0000
ROA not after:            Tue 28 Oct 2025 21:13:16 +0000
asID:                     267991
IP address blocks:        2804:5654:3000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:39:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1b:18:e5:3d:34:f0:20:f1:4f:84:5b:2f:bd:2f:11:11:da:e6:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F
        Validity
            Not Before: Oct 29 21:08:16 2024 GMT
            Not After : Oct 28 21:13:16 2025 GMT
        Subject: CN=0E51421B6AE9FE6A183678E290E5C4F0D1530541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:12:ea:43:27:8c:05:2f:b9:cd:e3:bd:9f:
                    d1:32:52:26:f7:cc:d8:e2:bc:22:8d:83:0f:ac:ce:
                    b7:5d:1c:ec:dd:bb:1f:9b:30:0b:3f:10:3b:f4:ba:
                    4e:50:ca:6f:f3:c8:4c:08:ba:cb:06:90:b1:9a:df:
                    18:eb:0b:ae:da:60:07:bc:34:be:5f:52:1d:50:95:
                    03:03:9b:d2:65:66:02:fa:d4:68:eb:4b:7b:13:84:
                    d3:11:27:2e:95:78:cc:97:6a:5e:b3:98:2e:ec:93:
                    f0:33:ad:4c:30:ec:56:7a:04:4d:2f:4d:14:63:02:
                    47:19:c0:8b:03:7a:9d:9c:42:47:59:56:e6:79:26:
                    ed:45:96:9e:cd:bb:fd:71:a0:6f:9b:d4:57:58:00:
                    2f:0b:0d:36:e0:85:4b:b1:9d:11:6a:dc:50:bc:88:
                    5f:d6:b1:13:e1:30:3b:d5:89:ea:4d:51:81:07:b1:
                    09:90:5d:6c:d8:83:73:68:cb:f1:ca:aa:fd:5f:f6:
                    6f:d3:e7:4f:04:d5:c9:8a:c1:6b:54:74:87:50:9a:
                    9b:fa:8a:e1:09:95:c7:6d:58:c1:4d:2a:b5:d0:11:
                    c5:4b:89:39:16:79:aa:73:c8:0f:76:e0:18:3a:2f:
                    25:18:b1:86:15:63:93:82:df:97:8f:0a:c6:09:fa:
                    2b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:51:42:1B:6A:E9:FE:6A:18:36:78:E2:90:E5:C4:F0:D1:53:05:41
            X509v3 Authority Key Identifier:
                keyid:1F:73:8F:23:C0:91:FA:9E:A9:5E:B9:9A:0B:6D:76:AC:F2:55:3D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a333030303a3a2f33362d3336203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8a:d4:b5:69:a3:a8:18:b9:e8:42:34:d8:3a:9b:57:d2:66:36:
         f0:f2:c5:06:17:8f:e7:de:05:66:03:45:2c:8e:99:a3:48:d5:
         91:9d:0e:f4:23:36:af:32:c5:81:0b:be:68:c5:f4:6b:b8:3e:
         00:3e:03:1a:3b:b2:a2:21:68:a9:7c:37:18:3e:77:2c:12:28:
         8a:c5:0c:da:57:af:df:31:24:54:ad:b0:e7:e0:d6:9f:5a:7b:
         1c:ac:8f:2b:25:0c:5c:fb:ae:3a:c9:8a:41:91:6a:64:35:b0:
         11:9f:7c:a9:30:07:f0:4c:5a:d0:a9:3b:77:8e:a9:bf:26:39:
         8b:a2:90:f7:29:d0:ab:7d:2d:29:b6:9b:e0:1a:4c:6a:11:63:
         b7:92:26:f5:18:c9:d7:fe:6b:38:db:c1:f5:9a:59:14:43:90:
         5c:9f:03:ba:7a:f4:31:75:f3:cb:2f:f0:f2:21:c0:65:0e:26:
         cb:fb:a0:1e:a8:bd:4e:e1:e1:ac:c6:a1:81:05:fa:69:b4:a3:
         e4:73:8a:7f:ff:aa:72:86:21:7b:00:65:69:17:aa:84:dd:90:
         fd:d7:5f:61:99:da:3a:77:5d:27:31:22:2f:f1:b6:5a:02:a4:
         9d:83:79:af:f9:e0:43:d0:9b:d1:ac:b2:38:b9:a2:85:45:22:
         0d:a3:f9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:08 2024 by rpki-client on console-ams.rpki-client.org