Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/323830343a6638633a3a2f33322d313238203d3e20323633353931.roa
File:                     323830343a6638633a3a2f33322d313238203d3e20323633353931.roa (raw, json)
Hash identifier:          H2L2X0xT12uSa3ivW37dhaEG9+qziOGGo28u8DYesj8=
Subject key identifier:   08:D9:14:3C:BE:DE:F2:A2:09:58:67:3C:FE:1D:D7:C8:95:1C:60:CC
Certificate issuer:       /CN=E88143BD048E79E9125CF1D3F9F8C9DC289052CB
Certificate serial:       43F8E92C144FEF6D39BC3517305E1D1E8A0CC463
Authority key identifier: E8:81:43:BD:04:8E:79:E9:12:5C:F1:D3:F9:F8:C9:DC:28:90:52:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E88143BD048E79E9125CF1D3F9F8C9DC289052CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/323830343a6638633a3a2f33322d313238203d3e20323633353931.roa
Signing time:             Thu 18 Jul 2024 17:25:20 +0000
ROA not before:           Thu 18 Jul 2024 17:20:20 +0000
ROA not after:            Thu 17 Jul 2025 17:25:20 +0000
asID:                     263591
IP address blocks:        2804:f8c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/E88143BD048E79E9125CF1D3F9F8C9DC289052CB.crl
                          rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/E88143BD048E79E9125CF1D3F9F8C9DC289052CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E88143BD048E79E9125CF1D3F9F8C9DC289052CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f8:e9:2c:14:4f:ef:6d:39:bc:35:17:30:5e:1d:1e:8a:0c:c4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E88143BD048E79E9125CF1D3F9F8C9DC289052CB
        Validity
            Not Before: Jul 18 17:20:20 2024 GMT
            Not After : Jul 17 17:25:20 2025 GMT
        Subject: CN=08D9143CBEDEF2A20958673CFE1DD7C8951C60CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a3:e3:43:8b:e1:7b:52:1a:7a:51:d1:a5:3b:
                    d2:af:c3:16:ca:61:b8:9f:21:88:56:fc:06:26:73:
                    27:e1:90:b1:77:07:00:31:b9:be:8c:50:60:49:12:
                    48:14:af:76:2d:89:d8:e9:ad:43:e6:7e:96:25:f5:
                    47:5f:06:a3:a0:ee:1a:a0:20:b2:c0:d6:96:b8:5e:
                    ee:8d:96:b7:84:0f:ef:7a:7a:80:a0:a9:87:47:9e:
                    7e:ae:7e:fc:4a:42:ac:b9:5f:ef:9c:a0:95:21:d6:
                    0c:5e:65:84:9e:b1:a3:b1:28:39:7b:6a:15:a4:68:
                    ec:40:4b:e0:96:03:a7:56:1b:57:ec:a3:b4:c6:1b:
                    a8:08:5c:0b:05:6d:de:df:ef:78:8e:a7:6e:9d:27:
                    ed:91:0c:90:ad:07:ab:e3:06:87:2a:de:ad:d8:ea:
                    ab:61:30:87:37:d4:40:20:9d:71:5f:4c:d4:af:c6:
                    e1:b1:fc:f9:86:9d:08:a1:5a:e4:ea:83:e4:65:78:
                    25:20:84:69:ee:f9:03:bf:32:54:cf:f4:fe:c3:1c:
                    84:56:70:30:0b:85:2d:c7:06:06:5e:7e:3e:74:65:
                    fd:a7:44:5a:c2:dd:44:0a:0c:56:da:6a:15:27:e3:
                    57:ad:cb:36:db:94:d9:94:5f:68:a4:c5:8c:04:3d:
                    d2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D9:14:3C:BE:DE:F2:A2:09:58:67:3C:FE:1D:D7:C8:95:1C:60:CC
            X509v3 Authority Key Identifier:
                keyid:E8:81:43:BD:04:8E:79:E9:12:5C:F1:D3:F9:F8:C9:DC:28:90:52:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/E88143BD048E79E9125CF1D3F9F8C9DC289052CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E88143BD048E79E9125CF1D3F9F8C9DC289052CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/323830343a6638633a3a2f33322d313238203d3e20323633353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:4d:77:ff:8b:ff:86:c9:12:98:4b:ee:12:d3:71:e0:bf:68:
         59:c0:d7:65:b4:09:17:0c:a0:36:73:7c:52:d2:d6:06:4b:da:
         67:5b:12:32:37:56:3d:60:90:a7:04:b6:8a:b9:5a:9b:87:b7:
         7d:d5:e1:d3:c0:a7:f7:61:45:76:c6:8a:d7:ed:04:44:09:cf:
         5e:3b:51:fc:98:f6:2a:08:54:7b:30:07:52:a9:50:d0:b7:02:
         a7:89:ab:2d:27:d6:e8:0e:99:00:67:cc:5b:20:f4:00:7d:a9:
         46:ce:05:79:36:50:43:31:af:b2:3f:1b:40:25:a3:72:d3:98:
         1c:57:54:aa:b6:c3:d1:f7:28:65:29:42:7f:65:d5:cc:25:80:
         08:05:86:67:f8:23:d7:cf:6e:da:6c:71:b0:2b:10:c3:f5:d9:
         64:25:6a:82:e5:ee:0a:ba:b4:e1:08:18:0e:4e:6e:fd:d4:3d:
         7e:a6:b3:61:84:f5:df:0d:60:85:4d:d1:eb:ea:f2:5d:1a:15:
         06:fd:77:34:e7:25:db:86:3c:4b:66:84:68:33:2f:ad:6e:d1:
         a2:f3:cc:af:cf:42:d2:b8:e7:0a:e2:d9:bc:01:e6:31:0e:6b:
         d1:ce:5c:27:f2:39:83:f5:46:ad:26:b9:d9:73:ae:c7:d3:f9:
         35:12:0c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:58 2024 by rpki-client on console-ams.rpki-client.org