Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a633039363a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a633039363a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          O8KtAUXig9iG69jC6uWj03IOtkRBG1A3mxQtOmEAQHY=
Subject key identifier:   39:EC:49:86:99:24:14:7B:38:12:45:EE:96:02:B9:F0:CF:07:68:52
Certificate issuer:       /CN=09CD2544A4D6A0551862A4D2797E42BCA1C19652
Certificate serial:       45D12615EF1F2D52A80112D40506577958D3F3AA
Authority key identifier: 09:CD:25:44:A4:D6:A0:55:18:62:A4:D2:79:7E:42:BC:A1:C1:96:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09CD2544A4D6A0551862A4D2797E42BCA1C19652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a633039363a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Wed 13 Nov 2024 02:55:35 +0000
ROA not before:           Wed 13 Nov 2024 02:50:35 +0000
ROA not after:            Wed 12 Nov 2025 02:55:35 +0000
asID:                     265919
IP address blocks:        2804:3fd8:c096::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/09CD2544A4D6A0551862A4D2797E42BCA1C19652.crl
                          rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/09CD2544A4D6A0551862A4D2797E42BCA1C19652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09CD2544A4D6A0551862A4D2797E42BCA1C19652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d1:26:15:ef:1f:2d:52:a8:01:12:d4:05:06:57:79:58:d3:f3:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09CD2544A4D6A0551862A4D2797E42BCA1C19652
        Validity
            Not Before: Nov 13 02:50:35 2024 GMT
            Not After : Nov 12 02:55:35 2025 GMT
        Subject: CN=39EC49869924147B381245EE9602B9F0CF076852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:de:d7:e9:09:bc:4b:b1:52:3d:6d:13:e2:1a:
                    7a:30:4f:89:4a:9b:d8:c8:e3:e8:b7:45:44:e0:4c:
                    54:e5:9e:00:e2:54:fc:5d:a6:a7:59:4c:b1:5b:c6:
                    06:08:bf:e9:dd:c6:1d:cb:32:13:7d:85:d0:6b:06:
                    ff:88:3d:a5:c4:88:ce:ce:25:b8:3c:a0:be:1a:01:
                    72:f3:73:48:1f:42:af:11:c0:99:f0:ee:af:28:3f:
                    1b:1f:4e:4a:b5:62:2c:ca:2e:40:8e:57:2a:f6:d1:
                    fa:28:aa:59:5e:97:4d:6b:cf:0f:82:68:78:27:64:
                    c4:be:da:b7:c3:22:a1:4a:e3:7f:a2:03:9d:70:7d:
                    28:15:8f:93:53:bb:11:be:cf:f7:14:44:84:55:aa:
                    ce:ad:d7:39:e1:1b:17:d3:07:7c:55:81:d2:ab:41:
                    80:bf:86:13:f2:91:06:ee:24:8a:d5:ec:42:87:a2:
                    04:37:30:79:84:1d:43:c8:6d:02:55:63:bf:3d:12:
                    e3:8b:2d:34:19:7a:61:b0:6c:9e:8a:ab:6b:aa:71:
                    61:75:43:59:42:71:03:ae:b8:e1:21:d5:32:ba:3b:
                    5b:8d:59:ac:64:27:a0:c1:b1:ba:d9:eb:8c:3e:c0:
                    0d:90:8d:3c:b9:38:e2:a3:e2:42:0c:43:7e:49:11:
                    a7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:EC:49:86:99:24:14:7B:38:12:45:EE:96:02:B9:F0:CF:07:68:52
            X509v3 Authority Key Identifier:
                keyid:09:CD:25:44:A4:D6:A0:55:18:62:A4:D2:79:7E:42:BC:A1:C1:96:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/09CD2544A4D6A0551862A4D2797E42BCA1C19652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09CD2544A4D6A0551862A4D2797E42BCA1C19652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a633039363a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:c096::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:ab:14:92:28:f2:3b:b2:94:45:d9:5a:51:1f:df:10:55:13:
         b2:73:10:e5:8f:00:1d:bf:0b:12:b8:d3:98:23:70:9e:5b:ca:
         6a:02:70:e4:44:ad:02:63:08:c5:bd:d2:16:a3:5c:31:a9:c1:
         4a:cc:5b:64:9d:85:b0:19:de:bc:d9:0e:e0:34:fe:c0:80:c4:
         1b:08:de:c9:6b:7d:6a:b8:4a:00:2a:34:96:4e:13:25:c6:7d:
         77:4e:28:fd:3b:82:97:96:fb:22:21:55:71:5c:82:3e:8b:e6:
         bc:2b:ea:28:97:25:ed:68:20:5f:ff:59:b2:ed:9c:b4:68:cb:
         00:30:a2:03:13:7b:2d:af:c8:e2:02:03:b0:74:12:ce:c4:6a:
         f0:6f:75:69:df:a0:5a:e7:9a:66:7a:9d:f9:6d:f1:b2:14:1b:
         9c:a9:4c:43:e4:46:13:14:f1:c8:d6:e5:34:04:fd:43:cf:aa:
         c5:d4:b9:0c:da:7f:4f:85:d2:0d:55:e0:4d:2d:c0:53:5a:93:
         2f:1f:f7:a7:35:bc:c9:b8:23:b9:e6:29:c6:3f:03:de:d4:1f:
         f6:4d:c3:02:d2:f8:f5:ce:9f:7d:b6:6f:5c:80:c9:ce:a9:f1:
         bb:6d:55:f8:81:4d:b9:4d:ea:56:14:94:b2:7f:3e:c6:6a:6b:
         c2:25:7b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:18:40 2024 by rpki-client on console-ams.rpki-client.org