Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a386330303a3a2f33392d3339203d3e20323733333039.roa
File:                     323830343a386337633a386330303a3a2f33392d3339203d3e20323733333039.roa (raw, json)
Hash identifier:          8pFNa0rWv+/X13kMExqew4g5Bot5HgrnEZlk0AxBf0I=
Subject key identifier:   63:B0:6B:E9:86:9A:BE:66:18:D9:CA:54:CD:56:6B:B9:33:E6:BE:1B
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       0F4E60B42CD0E45565B974210909D9ABAE302404
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a386330303a3a2f33392d3339203d3e20323733333039.roa
Signing time:             Thu 18 Apr 2024 18:03:43 +0000
ROA not before:           Thu 18 Apr 2024 17:58:43 +0000
ROA not after:            Thu 17 Apr 2025 18:03:43 +0000
asID:                     273309
IP address blocks:        2804:8c7c:8c00::/39 maxlen: 39

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:4e:60:b4:2c:d0:e4:55:65:b9:74:21:09:09:d9:ab:ae:30:24:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 18 17:58:43 2024 GMT
            Not After : Apr 17 18:03:43 2025 GMT
        Subject: CN=63B06BE9869ABE6618D9CA54CD566BB933E6BE1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d3:f0:d7:6b:fe:de:a8:31:8c:07:5a:12:c1:
                    dd:76:14:a5:8c:5c:ed:bf:3b:1c:8c:8d:ac:2d:ab:
                    9f:cf:32:aa:0e:c6:bc:f6:6c:2f:5d:58:cb:6f:17:
                    e2:ae:2b:51:47:2b:d0:bf:3b:a0:71:a4:93:b8:8c:
                    dd:c7:28:43:5b:32:d6:ef:41:8a:ff:df:f7:5a:a6:
                    4f:63:42:75:78:e7:5b:30:e4:58:ec:c5:d4:d7:e8:
                    5c:b1:37:82:3c:26:2d:b4:4c:a2:d9:21:6e:ea:7c:
                    68:75:3d:f6:05:1e:de:b3:bb:7f:e9:b8:f9:56:b3:
                    b7:ba:83:fc:23:4d:0c:b5:0f:ba:61:df:39:8c:0b:
                    02:bf:57:ae:34:e7:88:4a:13:de:c2:f7:eb:36:21:
                    fe:de:8b:1b:3d:3f:d8:1e:a6:02:d2:0a:2a:59:da:
                    38:94:36:b2:51:e4:b3:15:6a:9a:1f:24:bf:68:46:
                    84:e3:79:f7:99:9f:9f:0c:48:64:b4:6a:c5:4d:0b:
                    e9:62:c7:6c:5b:ca:93:f9:b6:08:cc:e1:6d:87:6e:
                    b6:95:21:12:a2:aa:11:7a:61:06:2c:c1:48:7a:03:
                    08:43:c5:f9:7d:66:41:e0:8b:54:0c:43:c4:d6:0c:
                    d3:11:f5:37:db:27:ac:8c:5b:8b:ed:d9:bd:35:67:
                    1e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B0:6B:E9:86:9A:BE:66:18:D9:CA:54:CD:56:6B:B9:33:E6:BE:1B
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a386330303a3a2f33392d3339203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c:8c00::/39

    Signature Algorithm: sha256WithRSAEncryption
         8b:66:2f:78:ce:f4:f6:7f:55:f0:e0:a7:8f:bf:96:bf:9c:37:
         4a:62:99:48:45:0c:23:19:57:7f:04:1b:eb:81:62:e7:ef:4c:
         f3:76:97:14:eb:28:c8:23:56:bc:4b:8c:da:08:3b:2e:19:9f:
         33:fc:0b:b8:4c:72:0b:75:e6:63:c1:4b:48:6d:fa:b1:04:22:
         41:34:db:38:48:7e:5a:2b:c4:74:41:08:d2:d9:6b:61:b6:d1:
         de:2b:3a:1a:03:3b:f7:53:90:20:ec:27:a1:69:54:72:1c:a2:
         21:ce:b8:63:90:a8:2b:c8:c3:98:3c:3e:8e:38:4e:b4:3d:8e:
         e3:4c:2c:8d:97:37:04:2d:49:3b:ec:f6:4e:c0:13:03:0d:0d:
         c9:c6:dc:06:9c:ed:ff:84:ae:d1:b3:30:49:ca:8a:a0:c9:22:
         4a:87:0a:16:6a:60:85:80:ab:b2:b8:8d:9d:e2:1a:5c:27:33:
         8d:7c:db:a5:82:bb:bf:99:c1:06:01:5d:ac:7c:97:98:6c:a6:
         02:ee:b4:bd:00:b4:d2:03:af:7f:c1:6d:7c:8b:37:b1:1b:31:
         3d:de:90:55:b8:6c:d1:44:05:76:1c:f2:df:f6:71:c0:08:86:
         1a:51:d0:4c:b5:89:85:98:c3:1a:54:1f:c2:9c:78:08:de:8f:
         3a:0b:02:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:04 2024 by rpki-client on console-fra.rpki-client.org