Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a363030303a3a2f33362d3336203d3e20323637393931.roa
File:                     323830343a353635343a363030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier:          ohTYAjjhvg2bm7vwhs3sUftOtO3dZWWzXLoIrZvZNIE=
Subject key identifier:   82:A8:CF:AE:47:6E:6B:93:02:99:1E:17:9B:3F:A5:65:A2:50:F3:F7
Certificate issuer:       /CN=1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F
Certificate serial:       75999F8674B101D4E3D380EC55974A4BAA9FE7E4
Authority key identifier: 1F:73:8F:23:C0:91:FA:9E:A9:5E:B9:9A:0B:6D:76:AC:F2:55:3D:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a363030303a3a2f33362d3336203d3e20323637393931.roa
Signing time:             Tue 29 Oct 2024 21:13:18 +0000
ROA not before:           Tue 29 Oct 2024 21:08:18 +0000
ROA not after:            Tue 28 Oct 2025 21:13:18 +0000
asID:                     267991
IP address blocks:        2804:5654:6000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:39:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:99:9f:86:74:b1:01:d4:e3:d3:80:ec:55:97:4a:4b:aa:9f:e7:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F
        Validity
            Not Before: Oct 29 21:08:18 2024 GMT
            Not After : Oct 28 21:13:18 2025 GMT
        Subject: CN=82A8CFAE476E6B9302991E179B3FA565A250F3F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d6:43:c3:f4:8c:88:47:6e:82:ec:dc:20:11:
                    f2:cd:97:3a:ba:d8:b8:d5:89:a2:c0:2b:72:28:cc:
                    2c:6a:c3:96:67:fc:2f:a6:2d:68:2a:bd:c5:9a:54:
                    8a:fa:45:08:c4:c7:68:04:3c:c2:30:e2:38:2f:b6:
                    af:9e:44:29:84:a8:87:28:15:25:20:cb:6b:ee:91:
                    f7:28:71:e3:1c:61:49:1a:6c:3d:29:23:0e:ee:75:
                    91:3a:1e:f9:6e:05:da:7f:f5:6b:9b:15:db:b7:a9:
                    68:47:8a:6d:0d:c7:4a:10:f0:ca:9a:36:b6:7a:a6:
                    de:76:85:1a:01:bd:27:1e:6c:50:b3:c0:ec:ee:2b:
                    95:d7:c7:fd:42:6a:66:fd:40:18:13:b9:e2:a7:02:
                    53:18:ec:af:4b:f0:68:b9:d8:56:eb:23:0a:ce:06:
                    4c:e6:69:f0:2d:82:e9:62:63:b6:f3:a0:6d:9b:b2:
                    ec:01:08:37:bb:5d:e8:72:b8:c8:86:75:48:55:2c:
                    12:9a:bd:f2:c7:2b:1a:c2:ef:30:ed:6f:52:94:a0:
                    28:e5:31:ca:65:6d:d6:92:26:8a:d2:b3:cd:1c:46:
                    f4:c0:9e:78:eb:b3:d6:41:e4:e3:8e:e6:1b:12:f1:
                    bc:38:08:b1:ff:5b:37:6a:23:3a:43:ac:2e:bc:54:
                    a3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A8:CF:AE:47:6E:6B:93:02:99:1E:17:9B:3F:A5:65:A2:50:F3:F7
            X509v3 Authority Key Identifier:
                keyid:1F:73:8F:23:C0:91:FA:9E:A9:5E:B9:9A:0B:6D:76:AC:F2:55:3D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a363030303a3a2f33362d3336203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         dc:59:09:9f:36:52:d5:e6:59:4b:ed:5c:78:87:21:bb:7e:03:
         ac:dd:74:18:64:02:36:c9:e1:dc:69:71:86:30:5e:b1:16:c6:
         8a:3f:c0:e5:b1:95:93:37:ee:61:b9:d8:4d:04:63:8d:6c:c0:
         68:55:c5:61:a6:b1:6d:38:6a:3c:3f:fd:53:21:21:f1:0c:87:
         0f:c3:c2:6a:dd:a3:fe:66:bc:be:55:05:d2:64:b0:26:54:ca:
         aa:05:fb:84:30:e6:cd:d9:86:a5:b1:bd:54:ae:0e:4d:ec:18:
         40:c5:68:f3:2e:17:80:0e:d6:ea:2c:72:eb:20:6d:bb:9d:8b:
         c2:fd:d3:46:1e:b9:1d:2b:56:06:05:ee:d0:6b:a7:ad:c4:b6:
         b6:70:63:ce:5b:a6:2e:fe:25:b5:ef:88:06:ac:c1:c8:92:6a:
         85:9b:de:39:aa:61:c4:60:99:f5:40:1c:ce:55:25:ed:f3:e0:
         ac:89:5d:3b:19:b7:17:06:89:5b:63:8d:cd:73:28:ee:89:ec:
         94:4f:96:83:c3:0f:9f:79:91:ee:f5:ab:5d:d9:30:cb:07:f9:
         fc:f2:3e:7e:7f:d4:0a:17:ad:f6:9f:cb:4b:e5:93:65:98:d3:
         09:3b:30:52:93:fb:52:96:26:af:8c:3b:29:7a:67:d1:dd:b2:
         07:54:60:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:08 2024 by rpki-client on console-ams.rpki-client.org