Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a3a2f33322d3332203d3e20323639343136.roa
File:                     323830343a363434303a3a2f33322d3332203d3e20323639343136.roa (raw, json)
Hash identifier:          iMPozj0XvplRji6Np2Uyw54F1Jxr/jjqAt/CuBN+Izs=
Subject key identifier:   57:16:08:90:09:66:B4:A1:9E:6A:65:F9:29:80:9E:3C:57:27:18:3F
Certificate issuer:       /CN=2431B91B2498F01C25C009C9345EE622B155100B
Certificate serial:       53FCF7D778D5B085391B1759B74E4D12AEDD2887
Authority key identifier: 24:31:B9:1B:24:98:F0:1C:25:C0:09:C9:34:5E:E6:22:B1:55:10:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a3a2f33322d3332203d3e20323639343136.roa
Signing time:             Wed 30 Oct 2024 15:02:53 +0000
ROA not before:           Wed 30 Oct 2024 14:57:53 +0000
ROA not after:            Wed 29 Oct 2025 15:02:53 +0000
asID:                     269416
IP address blocks:        2804:6440::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.crl
                          rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fc:f7:d7:78:d5:b0:85:39:1b:17:59:b7:4e:4d:12:ae:dd:28:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2431B91B2498F01C25C009C9345EE622B155100B
        Validity
            Not Before: Oct 30 14:57:53 2024 GMT
            Not After : Oct 29 15:02:53 2025 GMT
        Subject: CN=571608900966B4A19E6A65F929809E3C5727183F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:77:c1:93:1f:02:d0:81:eb:e8:9a:0b:2a:b8:
                    75:fd:86:9b:0d:af:e0:31:ba:0a:35:83:3b:d0:4c:
                    bd:8f:6f:ee:b8:18:7d:5b:01:76:44:6e:d9:72:31:
                    a2:b9:ba:14:42:36:8c:41:46:a9:14:f6:a7:6a:c9:
                    12:90:7c:14:97:35:af:5e:e5:48:93:ca:53:76:99:
                    f6:78:23:2d:e7:22:a6:9f:0e:ea:4b:01:42:b5:e6:
                    3b:cf:32:0f:d6:f4:f2:ad:b2:33:40:ea:5e:5b:af:
                    c5:a6:af:bd:d4:d8:44:2b:50:77:17:93:f8:b0:1c:
                    99:82:1d:8a:c1:1d:80:cc:bf:04:33:9b:37:e0:25:
                    49:a3:21:9b:ad:55:44:18:23:f7:66:f2:72:d2:80:
                    f8:7a:af:2e:44:e0:b2:cf:9d:7b:df:73:16:61:34:
                    8a:5b:5c:0d:a4:5f:90:18:57:d2:88:f3:fa:f8:6d:
                    20:14:0c:49:f1:e4:40:dc:16:06:4e:53:a4:d3:cb:
                    3e:9d:56:a2:c5:57:87:c0:56:cd:39:2d:b5:27:7c:
                    ef:75:7b:03:8b:49:19:a9:f6:2b:e5:d8:00:11:33:
                    c2:1c:a1:0e:f2:9a:c7:19:ab:48:b2:d9:e3:03:f4:
                    c0:b8:5a:2f:3e:79:dd:40:e9:22:e9:07:4a:f9:6e:
                    e8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:16:08:90:09:66:B4:A1:9E:6A:65:F9:29:80:9E:3C:57:27:18:3F
            X509v3 Authority Key Identifier:
                keyid:24:31:B9:1B:24:98:F0:1C:25:C0:09:C9:34:5E:E6:22:B1:55:10:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a3a2f33322d3332203d3e20323639343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6440::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:4a:32:dc:b5:b8:cd:19:76:4a:8c:48:95:13:d6:6d:1b:2e:
         e3:b1:cf:85:0b:fc:18:bd:32:4b:ff:6e:6e:d4:72:92:5a:9c:
         3a:ca:5c:80:83:10:d3:cf:e2:01:37:ba:49:ae:f6:db:b8:d0:
         cb:e2:51:8c:9f:a2:02:00:d2:bc:43:e0:f1:09:28:ed:61:e7:
         74:c7:6d:4e:98:9c:ef:eb:0c:27:2b:2b:04:40:59:de:70:e2:
         98:bb:54:5e:b4:4c:79:ce:4b:42:97:56:dc:e2:2a:31:3b:83:
         9c:d6:05:fe:65:cc:df:1e:cb:a5:9b:9d:7f:2a:54:09:e8:81:
         62:05:7a:31:0a:b5:48:06:95:c2:30:0c:47:70:fc:74:74:fa:
         42:aa:46:66:ff:d3:c3:ae:c9:3d:3b:32:29:7d:be:c9:3b:70:
         a1:f6:bb:b5:af:50:92:00:ac:8c:5d:6f:c5:df:f9:d5:2d:c2:
         b6:73:cb:a4:d5:d3:97:4d:51:7e:f3:74:a9:7c:11:d8:2c:6e:
         fa:46:bb:77:22:26:5e:f4:ca:29:21:15:e8:35:fc:f0:0f:7f:
         98:ac:5d:49:94:dd:08:68:00:e4:fb:0b:c6:a5:08:cc:24:f6:
         67:41:a8:0b:45:eb:f9:ff:0a:0a:c3:da:0b:d7:6c:19:62:1b:
         a2:52:30:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:53 2024 by rpki-client on console-fra.rpki-client.org