Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383830303a3a2f33382d3338203d3e20323733333039.roa
File:                     323830343a386337633a383830303a3a2f33382d3338203d3e20323733333039.roa (raw, json)
Hash identifier:          XiKZ9yQo366T2EzBRZsZaymkxqHjPHElt5QtRnwBkF8=
Subject key identifier:   A2:85:05:70:5B:D4:7C:60:E2:54:43:FC:4F:F1:E4:C9:55:38:43:53
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       65A3148ACBF5AFA3C679336D33FFCB89978DDA54
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383830303a3a2f33382d3338203d3e20323733333039.roa
Signing time:             Thu 18 Apr 2024 18:03:46 +0000
ROA not before:           Thu 18 Apr 2024 17:58:46 +0000
ROA not after:            Thu 17 Apr 2025 18:03:46 +0000
asID:                     273309
IP address blocks:        2804:8c7c:8800::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a3:14:8a:cb:f5:af:a3:c6:79:33:6d:33:ff:cb:89:97:8d:da:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 18 17:58:46 2024 GMT
            Not After : Apr 17 18:03:46 2025 GMT
        Subject: CN=A28505705BD47C60E25443FC4FF1E4C955384353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b3:74:5b:66:a8:ea:08:94:f1:df:1a:53:1b:
                    9c:d5:19:64:30:f2:e6:5f:e6:53:43:e9:f3:91:f6:
                    77:d9:7f:2f:a6:dc:87:de:a8:4b:24:7c:cb:ea:32:
                    81:29:9b:72:9e:82:d3:57:c5:80:0c:0e:b7:80:62:
                    4d:d5:58:e4:c0:85:30:57:ce:de:f3:33:ab:25:be:
                    e2:07:17:8b:b5:d8:a5:e2:06:04:8b:13:bc:db:81:
                    3b:41:b9:e4:5c:4c:e4:69:83:05:90:da:70:b1:e6:
                    f0:be:3d:bc:59:f5:7b:38:7b:a8:aa:80:16:40:50:
                    75:96:4f:e4:27:20:e5:b6:75:96:be:a7:f8:ab:9e:
                    36:ac:98:6b:fc:6b:d2:3e:4d:a2:e0:e1:c0:d3:7e:
                    45:39:1c:de:ec:90:f2:54:5c:64:0c:6a:e0:b0:04:
                    f2:5b:08:2e:b0:02:65:ca:cf:09:bc:15:56:88:0d:
                    71:72:f6:8d:37:d5:f3:5f:f2:79:0a:6c:34:c1:82:
                    ad:9e:87:0e:33:21:7c:12:8b:39:6d:7b:ac:27:26:
                    1c:ac:ef:d3:cf:b9:25:37:73:f6:2d:bc:4a:fb:cc:
                    52:6d:8f:df:1a:52:c7:fe:f2:9f:e8:64:f5:f9:af:
                    d6:61:1e:00:32:36:6a:f5:c3:e3:aa:39:3e:1c:37:
                    c3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:85:05:70:5B:D4:7C:60:E2:54:43:FC:4F:F1:E4:C9:55:38:43:53
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383830303a3a2f33382d3338203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c:8800::/38

    Signature Algorithm: sha256WithRSAEncryption
         91:36:2d:83:71:54:a5:c8:9b:44:e6:0d:18:b6:52:d1:e5:ca:
         50:11:81:8f:c0:2b:45:0e:9b:73:78:e9:f5:7d:01:21:db:b6:
         d5:55:5f:d5:14:18:1c:e7:57:f1:7a:78:c4:3f:c5:28:6e:e8:
         ad:b0:40:b4:7f:5d:9a:3a:ab:d7:c2:35:4a:ec:5d:e5:0d:5a:
         9f:73:f8:51:e9:29:b7:2b:ec:b6:46:35:0e:1f:34:35:10:40:
         71:b4:7f:11:07:81:29:23:6c:e3:3c:0c:72:08:c0:bd:9f:25:
         56:af:bc:87:f4:7f:c1:4e:25:dc:6b:09:8d:fd:c8:e0:e9:52:
         bf:30:c7:da:ae:f2:26:1a:73:ed:ab:2f:df:e6:12:f0:41:9b:
         21:a6:bb:df:f2:49:05:1f:b7:1c:63:ee:81:c5:42:a5:b3:ec:
         6a:81:a0:eb:09:78:77:f0:0e:91:cf:87:bc:4e:06:d6:8e:59:
         58:75:36:25:fc:1b:7c:b2:eb:d9:e1:4c:00:d7:9b:74:d4:13:
         1b:80:13:08:c2:6d:0d:7d:30:77:d8:69:da:ca:71:54:73:54:
         80:e5:af:b6:9a:d5:e0:2c:16:7d:9f:80:86:ac:fb:6e:a9:8a:
         df:2d:bf:4e:81:53:ca:43:a7:2d:64:e7:fc:bd:02:88:fe:b2:
         49:3b:fe:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:09 2024 by rpki-client on console-ams.rpki-client.org