Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/323830313a38303a35303a3a2f34382d3438203d3e203131383032.roa
File:                     323830313a38303a35303a3a2f34382d3438203d3e203131383032.roa (raw, json)
Hash identifier:          5LVxqAa7bo3Gd9aKgyI4jJ7o2zbGewpFACe0rLi933o=
Subject key identifier:   66:74:C0:8D:A4:34:4E:57:18:1C:B4:22:36:7F:3D:06:10:13:99:3B
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       547AF4E80FFBAB98B673B3123171702710350092
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/323830313a38303a35303a3a2f34382d3438203d3e203131383032.roa
Signing time:             Thu 18 Jul 2024 20:00:37 +0000
ROA not before:           Thu 18 Jul 2024 19:55:37 +0000
ROA not after:            Thu 17 Jul 2025 20:00:37 +0000
asID:                     11802
IP address blocks:        2801:80:50::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7a:f4:e8:0f:fb:ab:98:b6:73:b3:12:31:71:70:27:10:35:00:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jul 18 19:55:37 2024 GMT
            Not After : Jul 17 20:00:37 2025 GMT
        Subject: CN=6674C08DA4344E57181CB422367F3D061013993B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:85:94:e3:8f:1a:1e:74:72:27:da:51:d3:93:
                    fb:31:1e:90:3c:f5:87:77:86:dc:0e:90:fc:29:b6:
                    33:21:73:bb:49:3b:08:03:02:1e:67:9e:15:c5:d6:
                    6d:37:79:77:1a:f8:37:73:fb:1f:80:cc:6b:e4:d2:
                    44:32:c2:19:4f:99:08:c9:33:73:99:11:85:11:be:
                    3a:89:ba:8b:f0:31:c3:d8:84:b2:71:81:2b:16:7c:
                    39:0a:c9:02:bd:32:46:fd:bf:18:df:96:db:9a:ff:
                    5b:92:5a:e4:2e:82:e6:cc:84:99:8d:81:db:d5:fa:
                    09:25:d8:cb:04:a6:06:70:3e:37:60:99:bf:6a:55:
                    4b:be:c2:12:8b:bd:9a:a8:43:aa:30:c8:75:61:6f:
                    14:bb:aa:33:6f:5b:35:fb:c0:af:b1:0b:e6:e2:76:
                    32:b7:14:45:d2:ae:8c:57:d8:73:76:1f:a1:b6:18:
                    dd:1d:79:e3:8c:e3:a9:aa:43:58:46:e7:3d:e9:77:
                    09:c8:52:b0:5a:cb:e6:7c:b2:cd:98:d7:1a:30:5d:
                    16:a5:38:65:28:9d:b8:48:92:f8:54:21:c5:49:1b:
                    d4:55:3a:83:7f:18:2b:6c:85:d3:b2:7c:88:ec:ad:
                    3b:d3:19:17:fa:cf:32:b8:fe:04:c6:2d:96:77:a7:
                    f1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:74:C0:8D:A4:34:4E:57:18:1C:B4:22:36:7F:3D:06:10:13:99:3B
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/323830313a38303a35303a3a2f34382d3438203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:50::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:88:dc:f0:18:71:f9:7f:7f:45:39:92:92:64:0d:a0:60:00:
         12:0c:d5:94:bb:59:98:a7:73:b4:f2:81:79:fc:43:59:a2:a6:
         cd:d1:51:fd:29:ec:8e:64:b8:a9:7f:5a:31:f7:1d:30:dc:cb:
         29:f7:de:c3:1c:1c:48:88:20:78:f4:18:5a:b0:ed:f6:4f:db:
         be:cd:a3:2a:df:df:ff:1b:64:e0:44:32:b2:64:dd:cd:35:d7:
         f6:3e:44:c9:f6:c0:54:20:d8:bd:d2:b2:5a:7e:ea:2b:13:aa:
         5b:1d:22:35:5a:c4:5a:ac:ed:55:b3:22:8d:7c:4f:f8:44:ea:
         98:cf:0a:d0:f4:2e:e9:4c:2c:9d:36:35:4d:2c:d4:91:1f:47:
         83:bd:2d:92:fa:17:2b:95:e3:74:45:4e:94:2a:e5:b0:86:d3:
         ca:87:cf:28:67:5f:0c:a8:e4:c5:84:21:91:79:9c:dc:f7:e8:
         13:11:51:62:81:26:ed:a3:77:bb:ad:82:09:37:32:47:77:38:
         16:9b:2e:92:77:10:52:29:f2:e0:fb:3b:99:c2:ea:c3:fc:b8:
         87:0c:e0:b2:25:63:1d:4d:6a:19:06:53:0f:9e:70:5f:84:7c:
         1c:83:2e:ff:7d:e6:ac:92:ea:89:14:94:92:86:24:3c:64:01:
         49:da:50:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:38 2024 by rpki-client on console-ams.rpki-client.org