Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DfFJfaWdBGgxkWMpiiCezYWtAeB1nSAbLbw7TTaXDevn/0/323830343a353432303a3a2f33322d313238203d3e20323638363330.roa
File:                     323830343a353432303a3a2f33322d313238203d3e20323638363330.roa (raw, json)
Hash identifier:          Lu3O9xydnIIImn4GUzzk6gfKJrUui2+BfC1DvRK7bhs=
Subject key identifier:   D9:00:1A:91:7F:8D:21:7D:2C:A7:D6:9B:3C:75:65:AA:AC:4E:93:AC
Certificate issuer:       /CN=40B6D8D3576BAFCEF553BD1286D615274F258988
Certificate serial:       1CE7A9924310D2BC3720565D3FF0B1B8FA792136
Authority key identifier: 40:B6:D8:D3:57:6B:AF:CE:F5:53:BD:12:86:D6:15:27:4F:25:89:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B6D8D3576BAFCEF553BD1286D615274F258988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfFJfaWdBGgxkWMpiiCezYWtAeB1nSAbLbw7TTaXDevn/0/323830343a353432303a3a2f33322d313238203d3e20323638363330.roa
Signing time:             Tue 26 Nov 2024 17:00:33 +0000
ROA not before:           Tue 26 Nov 2024 16:55:33 +0000
ROA not after:            Tue 25 Nov 2025 17:00:33 +0000
asID:                     268630
IP address blocks:        2804:5420::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DfFJfaWdBGgxkWMpiiCezYWtAeB1nSAbLbw7TTaXDevn/0/40B6D8D3576BAFCEF553BD1286D615274F258988.crl
                          rsync://rpki-repo.registro.br/repo/DfFJfaWdBGgxkWMpiiCezYWtAeB1nSAbLbw7TTaXDevn/0/40B6D8D3576BAFCEF553BD1286D615274F258988.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B6D8D3576BAFCEF553BD1286D615274F258988.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 19:55:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e7:a9:92:43:10:d2:bc:37:20:56:5d:3f:f0:b1:b8:fa:79:21:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40B6D8D3576BAFCEF553BD1286D615274F258988
        Validity
            Not Before: Nov 26 16:55:33 2024 GMT
            Not After : Nov 25 17:00:33 2025 GMT
        Subject: CN=D9001A917F8D217D2CA7D69B3C7565AAAC4E93AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:64:58:ef:0b:6f:7d:20:83:cf:5e:d3:78:d8:
                    fe:ba:16:ac:9a:4b:f8:08:97:2f:0e:ca:db:67:b0:
                    1e:fb:89:d1:65:3d:f3:05:ad:60:1d:d0:e3:f4:a4:
                    2d:2c:9a:39:8c:e3:89:eb:fa:44:42:a6:0a:a4:4a:
                    f8:11:3c:8d:c6:85:0b:70:87:49:b4:a3:3b:1d:f8:
                    57:ac:8d:c7:cd:d0:0c:18:77:62:62:17:4a:a3:eb:
                    92:9e:8c:aa:db:9e:37:40:57:97:03:85:30:02:73:
                    71:89:f6:ac:37:89:08:49:df:8a:7e:3e:99:e8:0f:
                    8b:53:3e:98:fb:f7:97:e5:b1:a8:4f:46:d4:ea:10:
                    fa:a6:36:f4:f2:4b:ba:5d:66:a7:bb:0e:37:87:68:
                    22:ab:99:d8:a3:44:54:6e:7a:1d:55:ed:5d:f3:6d:
                    cb:31:2f:93:93:01:97:ab:69:bc:b1:ca:13:58:7c:
                    ac:0e:6b:a7:6c:d7:07:d5:24:6c:86:05:11:24:4c:
                    7b:76:0e:bf:aa:24:f4:b6:e7:3e:ed:fa:b1:35:5d:
                    b7:43:54:ed:84:34:1e:20:0c:e1:a7:fe:87:fb:dc:
                    8e:42:32:42:3f:76:d7:de:96:1d:58:71:0d:a4:13:
                    49:20:4b:27:c1:81:f5:74:2b:a3:f4:e6:9d:5b:c4:
                    48:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:00:1A:91:7F:8D:21:7D:2C:A7:D6:9B:3C:75:65:AA:AC:4E:93:AC
            X509v3 Authority Key Identifier:
                keyid:40:B6:D8:D3:57:6B:AF:CE:F5:53:BD:12:86:D6:15:27:4F:25:89:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfFJfaWdBGgxkWMpiiCezYWtAeB1nSAbLbw7TTaXDevn/0/40B6D8D3576BAFCEF553BD1286D615274F258988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B6D8D3576BAFCEF553BD1286D615274F258988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfFJfaWdBGgxkWMpiiCezYWtAeB1nSAbLbw7TTaXDevn/0/323830343a353432303a3a2f33322d313238203d3e20323638363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5420::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:84:61:b7:1d:2a:12:b5:82:7e:1d:e8:a7:43:18:0e:cc:77:
         c1:f2:2b:03:57:49:32:85:73:06:13:b2:07:00:76:5f:48:d9:
         04:4e:fb:62:4e:0b:85:07:59:f4:f5:1f:43:c0:04:57:c3:d1:
         66:a1:b5:0f:16:c9:7e:4c:bc:22:87:f2:52:7e:d1:98:89:21:
         7d:10:3b:28:0b:77:7a:fc:77:50:92:2d:a8:66:f3:10:dd:e5:
         cb:bb:7d:e0:57:eb:16:74:33:94:c5:9d:57:52:2e:e4:57:09:
         cb:7b:7c:b1:da:70:f0:a2:1d:4b:cd:cf:c6:c7:02:5c:5f:f8:
         87:81:6c:4c:11:f4:77:1a:7c:1c:36:e0:42:49:44:f2:bd:a6:
         f7:51:d7:b4:a4:d9:69:7b:13:3b:13:29:4b:52:76:fe:77:06:
         25:c3:b9:8b:8d:d7:5b:b3:b1:91:25:67:89:e3:14:b6:ab:5c:
         62:a2:20:0b:f3:3b:26:4d:83:69:6d:2a:8a:a0:e6:0d:b5:a3:
         dc:6d:71:fc:6f:88:54:af:fb:71:4f:5f:a5:14:72:5c:67:77:
         ec:34:70:46:57:ab:4f:e1:8d:0d:31:e1:70:c7:e5:80:aa:b7:
         43:5f:3b:46:7b:c4:d9:2f:ee:7f:81:6e:24:77:57:3f:53:5d:
         37:89:49:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 20:49:05 2024 by rpki-client on console-ams.rpki-client.org