Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393630303a3a2f33392d3339203d3e20323733333039.roa
File:                     323830343a386337633a393630303a3a2f33392d3339203d3e20323733333039.roa (raw, json)
Hash identifier:          16oXn0Xzg5D3QdDWgjPFoQhCFJ7BqRPFaQs1iWmRrl8=
Subject key identifier:   09:8B:27:FC:0C:D1:DD:88:23:0F:C3:11:ED:7B:16:38:F6:20:AE:93
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       18B41EC69A50158199D9A59B041A6ABB3B681E2D
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393630303a3a2f33392d3339203d3e20323733333039.roa
Signing time:             Wed 08 May 2024 16:20:35 +0000
ROA not before:           Wed 08 May 2024 16:15:35 +0000
ROA not after:            Wed 07 May 2025 16:20:35 +0000
asID:                     273309
IP address blocks:        2804:8c7c:9600::/39 maxlen: 39

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b4:1e:c6:9a:50:15:81:99:d9:a5:9b:04:1a:6a:bb:3b:68:1e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  8 16:15:35 2024 GMT
            Not After : May  7 16:20:35 2025 GMT
        Subject: CN=098B27FC0CD1DD88230FC311ED7B1638F620AE93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:af:02:67:de:13:0d:7f:d4:c9:ae:53:d8:5d:
                    74:e7:1a:ee:d3:cb:f4:97:69:04:1b:19:a8:0d:4f:
                    29:80:4c:12:9b:1d:b1:6e:3a:1b:96:98:2e:de:ea:
                    00:7e:89:c7:27:6b:af:34:85:74:28:d8:34:38:aa:
                    8f:be:40:2e:05:7f:94:9c:82:d6:32:57:75:56:e2:
                    19:a4:84:52:7d:4e:56:02:51:a5:27:34:48:bc:bc:
                    8e:86:81:0b:64:b1:b7:2c:08:a6:75:0d:3a:3e:d3:
                    ed:b7:c6:13:aa:f4:83:38:58:08:8b:2c:b8:6d:3c:
                    b9:c5:7b:ac:0f:85:35:4f:57:e3:bd:69:b8:71:78:
                    7b:f5:42:c1:12:bd:a4:8d:39:53:fb:47:36:a8:d9:
                    9e:18:b0:82:e8:1d:75:31:d9:c6:60:19:77:ae:35:
                    49:3d:83:bc:90:40:24:51:17:df:f2:63:fd:bd:d2:
                    2d:cd:91:f4:52:94:fc:66:2c:00:82:a1:ea:3a:2f:
                    9a:31:b0:71:3f:92:d0:88:7b:89:bb:db:e2:0d:41:
                    32:18:75:27:75:29:9c:f2:b4:78:58:87:bb:5e:43:
                    7c:45:1a:77:21:fc:50:56:1d:72:e8:7f:81:d1:16:
                    92:f8:a9:a5:ab:8b:5d:ce:d2:ec:c2:8a:7b:dd:07:
                    07:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8B:27:FC:0C:D1:DD:88:23:0F:C3:11:ED:7B:16:38:F6:20:AE:93
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393630303a3a2f33392d3339203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c:9600::/39

    Signature Algorithm: sha256WithRSAEncryption
         45:5b:75:a3:69:6b:80:39:ec:bd:04:28:d9:50:5c:87:7a:e6:
         ef:d0:20:52:a4:54:fe:d1:52:01:06:4d:d3:f2:8e:e4:26:f3:
         cf:bb:54:4f:67:3e:fb:bc:39:b4:56:55:5e:0f:42:6b:2b:c7:
         f2:c2:9c:30:02:f0:11:46:ca:5e:09:a0:55:5d:4a:f3:92:cd:
         77:5e:d8:d2:3d:9f:0e:f9:15:bd:02:3c:21:a8:b4:0b:22:4f:
         a9:6e:16:e0:b1:48:8c:fa:04:91:34:c4:b6:bf:fc:32:f9:49:
         7c:a6:98:f5:fc:c5:ea:bc:e2:37:3e:8b:c9:b6:8a:9b:11:8b:
         c7:d6:25:41:66:82:4c:05:83:1c:46:a0:7e:a5:8d:4c:a9:86:
         13:6a:36:3c:29:56:68:5f:f2:71:92:61:7f:b3:6e:a4:cf:00:
         c2:92:4f:a7:d4:ff:74:f8:b9:4e:b1:56:df:a0:75:7c:ca:b7:
         72:66:7d:1a:73:f6:76:51:f8:82:47:41:0a:7c:dd:9b:2f:09:
         4c:78:69:27:b7:82:56:44:94:82:ef:01:80:5f:c2:27:b0:c4:
         f5:04:8a:bb:2d:21:86:d2:af:f5:29:40:1f:f5:ff:1e:2b:9d:
         f7:05:08:a6:db:c4:14:80:da:71:fc:2b:95:f4:b2:9c:7e:79:
         f6:35:87:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:09 2024 by rpki-client on console-ams.rpki-client.org