Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a3a2f33322d3332203d3e20323733333039.roa
File:                     323830343a386337633a3a2f33322d3332203d3e20323733333039.roa (raw, json)
Hash identifier:          s14Qr+jetbsCIPBUaUECWby+Y2/YkUkLDtbK/NWuUaQ=
Subject key identifier:   8E:C4:0D:C9:59:0F:B5:0D:DB:61:F4:4E:22:8C:C4:0F:F5:70:9E:19
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       7B33CA0C458562D299A041A62E352CFA98BCB698
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a3a2f33322d3332203d3e20323733333039.roa
Signing time:             Wed 08 May 2024 15:34:36 +0000
ROA not before:           Wed 08 May 2024 15:29:36 +0000
ROA not after:            Wed 07 May 2025 15:34:36 +0000
asID:                     273309
IP address blocks:        2804:8c7c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:33:ca:0c:45:85:62:d2:99:a0:41:a6:2e:35:2c:fa:98:bc:b6:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  8 15:29:36 2024 GMT
            Not After : May  7 15:34:36 2025 GMT
        Subject: CN=8EC40DC9590FB50DDB61F44E228CC40FF5709E19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:62:0b:54:7c:2d:dc:75:b2:8f:6c:c4:d9:33:
                    2b:f9:4c:6b:4b:52:5f:b6:ec:d9:3c:fe:d4:e5:16:
                    bb:b1:d6:95:af:53:36:5b:99:e8:28:3b:b1:29:37:
                    47:85:12:84:c9:93:d7:03:73:23:3f:e9:6f:fa:2f:
                    fe:a9:39:46:14:06:7b:23:36:ce:f6:68:18:b2:d1:
                    51:02:94:93:d3:7b:31:f2:b3:16:e3:e2:4f:42:fa:
                    1e:5c:88:2b:99:8b:c2:71:93:4c:7c:c1:7e:d4:5d:
                    4e:af:61:ad:be:88:fc:35:2e:b1:36:14:63:b6:42:
                    2e:51:98:c3:9d:6e:14:0c:81:23:98:d2:4d:39:b7:
                    00:5c:ed:32:01:bb:cc:b3:f7:fc:bb:4b:e1:55:16:
                    a6:54:81:3f:3c:6d:45:9b:38:73:c6:44:ef:4b:4d:
                    08:a0:b7:44:37:fd:1e:37:da:64:13:4e:21:66:3a:
                    43:a6:ed:d2:6d:05:fa:2e:37:1f:37:de:a5:83:32:
                    fc:ec:37:bb:14:03:53:a9:0b:88:d1:5a:5e:02:df:
                    fc:59:e4:50:cc:75:42:c3:7b:20:85:e7:23:4e:5e:
                    c7:e1:d4:9c:d8:b0:1c:8d:a8:92:af:12:21:52:f9:
                    7c:08:4d:ec:cc:34:75:44:d2:36:1c:ff:72:ce:8f:
                    b6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C4:0D:C9:59:0F:B5:0D:DB:61:F4:4E:22:8C:C4:0F:F5:70:9E:19
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a3a2f33322d3332203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:a7:a3:fb:7f:fd:2b:29:66:26:7b:d7:ff:c0:db:b9:9b:67:
         d6:b1:bf:9f:dd:7a:65:dd:19:96:64:a9:7b:12:db:f5:9d:fa:
         d0:f0:72:ee:34:37:d4:09:70:42:ae:6b:4b:d6:17:6f:59:74:
         59:d9:19:14:91:eb:1b:6a:04:8a:b8:9b:bc:ab:0e:90:9d:bd:
         23:ff:f2:fd:80:4e:30:89:1b:c9:88:d2:39:1f:0d:7d:e7:a4:
         ee:cc:7a:4e:f9:7a:91:6c:2a:dc:64:e0:93:21:63:e4:98:e8:
         1e:af:b3:df:26:50:6d:15:c4:df:74:35:07:ec:a3:58:8a:05:
         1c:58:a0:bb:87:95:8d:a8:2d:e0:fa:b5:c8:ff:ee:00:9b:49:
         9a:9e:8a:0a:0d:2c:2b:ca:48:dd:dc:5a:ce:f8:15:07:9d:16:
         87:3c:e7:43:cd:fd:a4:1d:c5:e5:1a:26:0e:2a:56:36:fe:5e:
         fd:8b:f1:3d:a6:5d:ac:a6:fc:30:a3:45:2f:de:40:5f:b1:ee:
         f1:af:aa:95:4e:11:4f:08:e0:ee:f5:1d:8d:b0:59:02:93:45:
         49:0b:39:43:06:4c:77:2a:96:d2:8a:f6:60:ff:be:7b:f7:9a:
         4e:15:56:b7:be:ea:c8:29:2e:23:2a:8e:40:4d:56:fa:9a:36:
         52:e2:48:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:04 2024 by rpki-client on console-fra.rpki-client.org