Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a343138303a3a2f34342d3434203d3e20323635393439.roa
File:                     323830343a343034383a343138303a3a2f34342d3434203d3e20323635393439.roa (raw, json)
Hash identifier:          CutOeiI0pzO2yXb55rKNiniR6g5mvq1Pa0uSDAK7XnE=
Subject key identifier:   ED:7F:92:C7:69:64:BA:AF:03:15:77:D1:9B:2C:B2:F6:63:0B:76:BB
Certificate issuer:       /CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922
Certificate serial:       2665E1A5D4F0C663D0FC6715F0D2DEE55125556D
Authority key identifier: FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a343138303a3a2f34342d3434203d3e20323635393439.roa
Signing time:             Fri 22 Nov 2024 21:13:17 +0000
ROA not before:           Fri 22 Nov 2024 21:08:17 +0000
ROA not after:            Fri 21 Nov 2025 21:13:17 +0000
asID:                     265949
IP address blocks:        2804:4048:4180::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl
                          rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 14:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:65:e1:a5:d4:f0:c6:63:d0:fc:67:15:f0:d2:de:e5:51:25:55:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922
        Validity
            Not Before: Nov 22 21:08:17 2024 GMT
            Not After : Nov 21 21:13:17 2025 GMT
        Subject: CN=ED7F92C76964BAAF031577D19B2CB2F6630B76BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a6:67:3c:a2:9c:bf:99:30:e8:0e:22:e0:c1:
                    33:73:7c:9c:41:4a:3d:94:62:ba:44:8c:db:2d:05:
                    ee:0f:75:62:35:35:5d:67:bb:1d:fb:09:e3:e4:1c:
                    74:17:48:7d:de:80:d6:c8:76:0e:c0:62:b3:e4:dd:
                    64:9a:d5:1b:20:33:e9:2d:49:bd:81:3f:40:7b:87:
                    0b:bf:70:d8:cf:2a:d4:c8:65:20:3d:9b:48:a9:40:
                    db:42:e6:05:1b:42:d2:e3:56:2c:5f:72:62:4d:d7:
                    93:a3:14:16:77:c8:e0:51:b5:25:88:f1:9f:0c:8e:
                    66:83:3b:1c:ef:93:91:88:e6:97:a2:08:10:96:90:
                    d7:9f:55:fc:41:ac:0b:89:8f:00:21:06:07:79:4d:
                    49:a6:07:46:31:e7:de:31:0d:a2:c5:45:97:8d:3d:
                    10:e2:a3:07:43:d8:b0:5f:3f:77:31:c7:3f:b2:f3:
                    ed:7b:1a:03:b6:eb:d5:b9:41:e8:5b:ff:df:60:00:
                    d6:04:be:aa:2b:18:2a:12:0b:a8:f9:27:33:f6:eb:
                    9c:ab:21:6b:a9:d4:9c:e7:cb:be:0b:91:8c:05:4d:
                    ff:c4:47:50:2e:2b:23:42:94:29:e0:cf:de:c7:ff:
                    93:d0:8d:6d:33:41:89:ab:64:99:97:1f:fa:af:b2:
                    f1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7F:92:C7:69:64:BA:AF:03:15:77:D1:9B:2C:B2:F6:63:0B:76:BB
            X509v3 Authority Key Identifier:
                keyid:FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a343138303a3a2f34342d3434203d3e20323635393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4048:4180::/44

    Signature Algorithm: sha256WithRSAEncryption
         42:de:81:6a:d5:af:fd:2d:58:09:83:fe:e6:1d:cc:7f:87:57:
         cd:48:bb:f9:82:24:04:9d:12:40:71:65:f8:8a:e9:8c:fa:9b:
         d4:4b:2c:a1:42:2b:b9:90:94:7d:68:a9:ba:86:6d:27:7a:9f:
         c6:3f:5d:1a:54:f2:23:e4:20:64:9d:a0:08:20:88:e7:95:7a:
         6c:1e:3b:d3:39:10:80:17:7d:dc:dc:d7:55:59:a9:94:3f:c3:
         3e:a6:b6:1b:c4:1d:16:6d:55:69:d2:ee:64:99:db:04:f7:42:
         ff:14:04:d7:d4:83:0a:73:3a:00:ac:df:ff:b3:2e:8c:62:b5:
         34:6b:03:12:fd:dd:7a:62:db:a1:8d:97:15:ef:5e:a4:75:87:
         82:e8:50:2d:7d:00:07:0f:73:b3:fb:a7:23:7c:ac:5e:fd:70:
         18:40:53:60:cb:08:32:2e:23:fc:2b:2c:72:46:f9:9e:52:cb:
         ff:d9:f3:85:ff:23:c3:d6:36:d5:8f:42:71:a7:1a:be:f0:25:
         a4:3e:2f:0a:c9:28:27:31:08:5d:5c:91:f7:f7:a3:d8:b8:28:
         ab:ab:ed:46:1e:08:f8:1f:e7:29:ff:5c:f5:75:40:f2:68:a3:
         47:f1:89:91:6c:8d:1f:f5:ce:97:0a:8a:71:98:55:b4:3d:a2:
         eb:e6:fb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:13:51 2024 by rpki-client on console-fra.rpki-client.org