Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3138353a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a3138353a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          SLhk9BbmJKwCliUvHk1BeY6OG0jwff+nF2Nbt382h2Y=
Subject key identifier:   E9:CE:91:42:6B:82:A5:65:23:FC:74:93:E1:5B:45:B1:7D:CA:89:EA
Certificate issuer:       /CN=09CD2544A4D6A0551862A4D2797E42BCA1C19652
Certificate serial:       671C4314D3D093437230789E59EEEF46C2FB7BD5
Authority key identifier: 09:CD:25:44:A4:D6:A0:55:18:62:A4:D2:79:7E:42:BC:A1:C1:96:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09CD2544A4D6A0551862A4D2797E42BCA1C19652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3138353a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Wed 13 Nov 2024 02:54:22 +0000
ROA not before:           Wed 13 Nov 2024 02:49:22 +0000
ROA not after:            Wed 12 Nov 2025 02:54:22 +0000
asID:                     265919
IP address blocks:        2804:3fd8:185::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/09CD2544A4D6A0551862A4D2797E42BCA1C19652.crl
                          rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/09CD2544A4D6A0551862A4D2797E42BCA1C19652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09CD2544A4D6A0551862A4D2797E42BCA1C19652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1c:43:14:d3:d0:93:43:72:30:78:9e:59:ee:ef:46:c2:fb:7b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09CD2544A4D6A0551862A4D2797E42BCA1C19652
        Validity
            Not Before: Nov 13 02:49:22 2024 GMT
            Not After : Nov 12 02:54:22 2025 GMT
        Subject: CN=E9CE91426B82A56523FC7493E15B45B17DCA89EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:06:92:98:63:5e:a3:fb:af:24:a8:58:9b:93:
                    75:04:f0:a0:73:ad:bb:72:4a:bb:8b:cd:d2:24:cd:
                    62:70:19:d7:19:13:b0:aa:d4:d3:5c:d0:71:10:c6:
                    71:10:a2:35:92:ae:98:27:db:8b:e7:8b:0b:ea:48:
                    17:d3:45:dc:cd:34:95:da:f0:21:68:86:47:b7:2f:
                    b3:86:1e:0c:e2:08:75:cc:12:c9:ee:d1:85:6d:aa:
                    1f:2e:1f:37:95:45:00:ff:ec:50:f1:ec:f2:2c:3c:
                    d6:3d:94:2d:40:a9:81:92:9f:c2:b8:cd:94:fb:60:
                    a4:48:81:5c:81:b2:b5:5d:70:fb:39:36:be:29:26:
                    b0:83:28:7b:75:d5:cd:49:d9:ac:65:f0:83:c2:6f:
                    50:9b:06:48:1d:19:87:6a:ba:38:4f:40:f3:be:4e:
                    e4:07:c4:b2:93:54:72:6d:b7:a0:a5:30:db:70:89:
                    72:f6:cf:ae:75:ee:d0:2e:e7:59:e3:77:21:13:e0:
                    31:f6:a4:11:17:d9:86:3d:3e:e3:7e:0a:3d:14:23:
                    af:c0:69:21:e2:38:02:a4:ec:cd:e7:98:13:79:5a:
                    5f:44:8d:67:59:ef:31:f9:e3:5f:97:e9:d0:e3:67:
                    0b:36:32:ae:00:e8:28:74:54:4b:39:48:d4:89:35:
                    f5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CE:91:42:6B:82:A5:65:23:FC:74:93:E1:5B:45:B1:7D:CA:89:EA
            X509v3 Authority Key Identifier:
                keyid:09:CD:25:44:A4:D6:A0:55:18:62:A4:D2:79:7E:42:BC:A1:C1:96:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/09CD2544A4D6A0551862A4D2797E42BCA1C19652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09CD2544A4D6A0551862A4D2797E42BCA1C19652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3138353a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:185::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:8f:56:48:5e:d6:14:9d:78:fa:00:5e:8c:ea:80:90:f2:50:
         10:17:a5:72:2a:46:68:d4:27:a5:1a:8e:bc:a9:be:7b:b8:28:
         ee:7e:b2:c3:90:7a:22:44:66:4f:bb:37:16:9b:b3:36:6a:f9:
         ce:23:16:84:58:e2:4f:e5:03:90:96:13:09:5f:12:57:8d:e3:
         19:ed:35:89:9e:22:13:f8:18:43:d0:02:57:d0:f3:0e:45:b9:
         bf:b3:bf:ad:47:53:e7:a2:d9:6d:59:02:64:e2:fd:4f:e5:0d:
         b9:d3:24:81:d4:7d:7b:d6:87:be:8f:37:4e:d4:8c:dd:ac:57:
         60:2e:8c:b1:cb:5e:e3:41:4f:9d:96:c5:f3:b9:a0:02:57:dd:
         e4:c4:f1:b6:10:ce:c2:db:46:e8:6d:00:67:14:61:0b:ca:ff:
         ea:08:ef:d3:fb:8a:79:1d:bb:f4:89:1e:32:8c:5e:39:d9:e0:
         17:54:c4:d6:e6:33:12:ab:c3:4f:19:13:53:41:af:3f:9b:48:
         ab:21:44:c2:e4:96:ac:97:64:4c:f8:eb:d5:29:7e:fa:fc:99:
         7a:a4:f7:25:d0:29:6d:68:54:bf:0b:28:ae:2d:b7:f5:f9:fa:
         d7:cf:71:1e:a2:10:c1:ae:df:05:b9:9d:68:fe:bc:bb:dc:4a:
         f1:7c:db:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:13:40 2024 by rpki-client on console-fra.rpki-client.org