Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a666163653a3a2f34382d3438203d3e20323634343835.roa
File:                     323830343a323035303a666163653a3a2f34382d3438203d3e20323634343835.roa (raw, json)
Hash identifier:          Lg2Xmt+78I2/KRYLVK+swAJRPeGrnoeBoQThLWAhKs4=
Subject key identifier:   8B:A0:03:25:6F:CB:26:09:19:93:0D:BF:DD:57:96:34:80:49:60:FD
Certificate issuer:       /CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
Certificate serial:       2655D70BEF86F15B49385FDE07BD328A6EBA63B8
Authority key identifier: 69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a666163653a3a2f34382d3438203d3e20323634343835.roa
Signing time:             Tue 24 Sep 2024 19:48:00 +0000
ROA not before:           Tue 24 Sep 2024 19:43:00 +0000
ROA not after:            Tue 23 Sep 2025 19:48:00 +0000
asID:                     264485
IP address blocks:        2804:2050:face::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:55:d7:0b:ef:86:f1:5b:49:38:5f:de:07:bd:32:8a:6e:ba:63:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
        Validity
            Not Before: Sep 24 19:43:00 2024 GMT
            Not After : Sep 23 19:48:00 2025 GMT
        Subject: CN=8BA003256FCB260919930DBFDD579634804960FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:10:51:37:70:a1:a5:b7:c7:e5:f9:b3:cc:
                    82:79:09:2a:3d:ae:81:a6:46:3b:f2:ff:32:75:e6:
                    51:28:94:d8:8d:d8:09:46:22:25:fe:8b:fe:d9:0f:
                    f5:79:f6:28:c5:43:ed:ad:a7:82:b9:b8:e4:78:9a:
                    cc:4f:3c:4e:b2:fe:62:85:3e:d5:ee:de:dd:a9:5e:
                    0b:ee:06:5a:5a:40:93:03:3f:c7:49:2f:e8:d5:8c:
                    01:33:03:cb:a3:ee:a7:fe:59:9d:2c:c8:e8:a0:e1:
                    b5:2d:7b:36:de:0e:3a:fd:6f:a6:8b:3e:0f:60:be:
                    11:44:19:45:68:76:9e:58:88:c6:1b:10:94:6b:57:
                    82:f9:ed:1c:20:d1:ee:33:f0:ae:8a:43:ea:84:33:
                    81:0a:f1:8c:72:ab:c1:fb:b5:e7:14:ed:d0:b7:db:
                    8a:ab:25:fc:5d:c4:05:72:9a:47:ed:7f:d1:c0:d7:
                    4d:08:e5:37:4b:61:66:f9:27:8b:7d:e4:ff:60:89:
                    c5:c2:be:a1:56:ad:c1:0b:11:79:cd:ae:9f:20:39:
                    a2:d5:b3:58:20:bc:1b:34:14:bb:ae:8e:62:3e:c4:
                    94:6e:be:e7:f6:f6:76:e5:3a:70:48:c3:e7:4d:89:
                    8f:1e:20:5b:43:ba:de:34:48:2f:c7:94:21:ae:38:
                    85:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A0:03:25:6F:CB:26:09:19:93:0D:BF:DD:57:96:34:80:49:60:FD
            X509v3 Authority Key Identifier:
                keyid:69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a666163653a3a2f34382d3438203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2050:face::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:e9:cb:92:45:d8:de:74:47:67:f7:e5:ec:5a:95:9e:be:88:
         8c:77:d2:5b:a8:88:d7:2c:ca:e3:7c:81:f9:da:63:a8:2a:f3:
         8c:36:d3:6e:90:f4:6b:2f:8e:33:91:ff:7a:19:16:9f:5a:7d:
         54:e0:dd:ce:fc:f1:ba:86:65:06:ed:d5:b0:c1:58:ac:84:68:
         26:48:77:b6:c0:7f:03:01:ee:57:e5:03:cb:74:4c:7e:c6:a3:
         e7:87:7b:21:ab:09:36:2a:38:ec:b0:fe:02:62:f2:4e:27:74:
         54:75:93:a9:16:55:0f:58:6f:70:ce:4f:95:aa:8d:b7:a0:6e:
         f2:e9:b5:b5:32:ea:06:42:22:ee:c6:96:f0:fe:44:63:36:57:
         e3:36:d7:df:c5:8e:16:ff:cd:ec:10:5e:2e:7e:34:4c:73:70:
         53:18:c4:6d:13:5e:76:53:74:a1:62:c4:58:ee:8f:19:dd:99:
         ba:06:02:bb:7d:e2:4a:2d:2d:ec:ab:a3:e8:d1:a6:a4:fe:58:
         8e:59:f7:f6:6e:61:44:b8:eb:60:cc:a1:31:86:e3:fd:4e:77:
         87:0f:57:12:cc:69:10:b6:5e:d2:83:61:7e:0f:6a:46:1c:f7:
         38:8c:30:b6:19:f8:cc:6b:55:1a:71:1a:0a:c3:e3:c4:fb:a1:
         02:d0:21:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:21 2024 by rpki-client on console-ams.rpki-client.org