Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a356136653a3a2f34382d3438203d3e20323634343835.roa
File:                     323830343a323035303a356136653a3a2f34382d3438203d3e20323634343835.roa (raw, json)
Hash identifier:          uWK9ZBBHzrNJt8vjRlRRuPN2nJqOr0ZmTNTrkOfOoMw=
Subject key identifier:   D3:9B:49:01:D4:06:9E:26:81:CA:8E:2D:55:B3:8C:1B:8E:8E:D3:3C
Certificate issuer:       /CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
Certificate serial:       48F0620377DEB349C5E14F99AFC62FA5A588B94A
Authority key identifier: 69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a356136653a3a2f34382d3438203d3e20323634343835.roa
Signing time:             Tue 24 Sep 2024 19:47:31 +0000
ROA not before:           Tue 24 Sep 2024 19:42:31 +0000
ROA not after:            Tue 23 Sep 2025 19:47:31 +0000
asID:                     264485
IP address blocks:        2804:2050:5a6e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f0:62:03:77:de:b3:49:c5:e1:4f:99:af:c6:2f:a5:a5:88:b9:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
        Validity
            Not Before: Sep 24 19:42:31 2024 GMT
            Not After : Sep 23 19:47:31 2025 GMT
        Subject: CN=D39B4901D4069E2681CA8E2D55B38C1B8E8ED33C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:da:02:ba:82:8a:c4:2a:61:a1:62:f8:fa:5e:
                    ef:5a:d2:1c:67:d3:85:66:60:da:a1:2b:63:77:41:
                    c8:48:bb:5f:f0:6c:d8:2a:dd:66:3e:c5:18:62:c6:
                    ec:5b:f2:0a:de:5f:4d:a1:35:9a:5d:11:0d:b1:85:
                    61:48:d9:3f:92:a9:2a:d5:9d:75:dd:9e:e1:2b:62:
                    92:91:d2:33:c5:1d:db:6b:d8:2c:e3:87:ce:22:74:
                    4c:7d:c6:c8:c0:06:9d:40:12:9f:5c:9e:58:00:2b:
                    97:ac:6d:4a:f7:7f:55:f2:5e:14:6c:96:9b:bc:fc:
                    a4:30:79:cc:15:13:ec:72:a0:c6:33:e3:22:ea:8f:
                    12:35:2d:76:cf:6b:a2:1e:a9:3f:5c:32:7f:34:32:
                    38:0b:eb:a2:f0:e4:8c:81:6d:c7:65:f7:a7:9b:36:
                    49:b4:c3:31:08:4e:e8:f2:d2:f4:f6:66:28:81:ec:
                    35:6b:1a:a8:a2:75:0a:33:c7:a3:55:b6:e0:65:3d:
                    8d:ea:fe:91:9e:bb:12:22:32:10:38:29:98:8d:89:
                    2c:49:4c:63:8e:d5:33:5b:8f:99:82:ac:e9:65:bb:
                    ec:ac:17:80:ea:1a:cb:5b:26:c7:e4:7e:6b:6a:e3:
                    51:00:bd:2a:1b:23:58:5b:7a:e4:86:59:38:ed:ec:
                    cd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9B:49:01:D4:06:9E:26:81:CA:8E:2D:55:B3:8C:1B:8E:8E:D3:3C
            X509v3 Authority Key Identifier:
                keyid:69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a356136653a3a2f34382d3438203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2050:5a6e::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:51:dd:bd:0f:b5:1d:2d:78:ca:7f:59:9d:f2:72:68:ac:73:
         14:12:a1:c0:20:d4:23:af:59:f1:8f:fe:d9:b3:38:c1:3a:15:
         08:f9:df:d1:16:3c:c0:80:3e:f6:c8:89:d0:67:f5:a4:93:00:
         4b:d6:55:fc:18:14:24:5d:c7:9c:ce:cc:9d:28:28:70:c0:ae:
         bc:bc:7b:30:a7:0f:e2:a2:cd:79:17:28:ae:6a:87:96:af:0a:
         49:31:e6:be:79:17:b2:f9:1f:b6:01:91:9f:02:2a:18:f7:4a:
         99:af:a0:66:71:0c:f2:db:5a:e4:93:72:e7:f4:a7:b2:58:2b:
         11:e6:c1:76:17:f6:c8:79:8a:fa:2f:22:26:db:cd:6f:0e:73:
         72:fe:b0:8f:3e:be:d0:a3:44:51:5a:bf:ca:dc:5a:f7:79:b7:
         28:7e:15:f5:c6:72:ef:d1:a9:96:6c:5f:d7:8b:dc:2f:ee:23:
         3b:cf:fe:68:f9:7d:62:5e:ca:83:f0:3b:25:f9:d5:62:b6:02:
         7c:6e:23:f5:e5:53:ab:1d:b3:15:4e:6c:1f:b6:fc:e7:78:14:
         0c:48:3e:16:3f:76:09:6f:f2:e6:a6:da:53:d0:1e:d7:9b:94:
         89:81:e7:df:0e:4d:e0:73:6a:00:b8:a9:9a:e8:11:6a:92:a3:
         27:7a:21:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:11 2024 by rpki-client on console-fra.rpki-client.org