Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a666666663a3a2f34382d3438203d3e20323634353935.roa
File:                     323830343a323232383a666666663a3a2f34382d3438203d3e20323634353935.roa (raw, json)
Hash identifier:          1bIQ3TeWWMsAsMQ7kRiYbFxFHHDfKgbIiNi6I7YoXiw=
Subject key identifier:   1C:25:E1:2B:A6:CA:F0:24:10:FD:32:DD:A5:11:E7:A8:79:26:A4:3B
Certificate issuer:       /CN=B0B9B934434D02C9258B1024C067D277143B182B
Certificate serial:       1E7BEA4DFCE07772E81573EF81DF0CC7B01DF5F0
Authority key identifier: B0:B9:B9:34:43:4D:02:C9:25:8B:10:24:C0:67:D2:77:14:3B:18:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B9B934434D02C9258B1024C067D277143B182B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a666666663a3a2f34382d3438203d3e20323634353935.roa
Signing time:             Fri 26 Jul 2024 17:23:42 +0000
ROA not before:           Fri 26 Jul 2024 17:18:42 +0000
ROA not after:            Fri 25 Jul 2025 17:23:42 +0000
asID:                     264595
IP address blocks:        2804:2228:ffff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/B0B9B934434D02C9258B1024C067D277143B182B.crl
                          rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/B0B9B934434D02C9258B1024C067D277143B182B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B9B934434D02C9258B1024C067D277143B182B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7b:ea:4d:fc:e0:77:72:e8:15:73:ef:81:df:0c:c7:b0:1d:f5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B9B934434D02C9258B1024C067D277143B182B
        Validity
            Not Before: Jul 26 17:18:42 2024 GMT
            Not After : Jul 25 17:23:42 2025 GMT
        Subject: CN=1C25E12BA6CAF02410FD32DDA511E7A87926A43B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:03:d3:c3:de:df:72:30:77:41:e8:b8:13:e3:
                    f7:86:34:5f:a4:0b:7f:0c:72:c6:99:b7:16:92:40:
                    73:74:10:48:f3:5f:8d:74:cf:84:61:97:53:7d:5d:
                    b8:db:7e:4b:c8:5e:38:8a:c5:cf:27:65:54:89:f0:
                    40:f7:5d:b3:8a:a7:3f:f5:a6:f0:93:22:86:45:ee:
                    f2:2c:21:c9:8f:21:2f:db:80:95:e0:82:74:6e:c5:
                    14:28:46:b1:47:fd:a5:6d:91:a6:2a:95:33:c2:8c:
                    55:e5:6e:e7:4a:f7:61:86:d4:fd:90:0b:5b:f6:f6:
                    bd:73:5c:92:b0:09:a6:4f:1e:57:46:97:39:6d:c8:
                    60:0d:06:d7:cf:7e:15:b6:b3:81:dd:77:64:6a:bd:
                    2f:f2:d3:98:ec:86:78:82:fd:e4:62:fd:d3:90:39:
                    50:c9:ce:bc:9e:2c:07:71:f0:b1:25:69:2a:68:79:
                    c5:ad:74:82:0a:e0:31:95:03:18:9f:64:32:82:88:
                    01:10:2d:de:81:80:7d:1c:22:3f:1a:33:c2:c4:fc:
                    0d:3d:f8:fe:cd:91:83:dc:67:5c:73:d8:7c:0a:e1:
                    f7:1e:81:a5:7a:3b:72:ed:9d:64:a4:c6:06:8a:7f:
                    56:00:98:16:2f:14:a4:02:be:f2:8e:c6:91:e1:8d:
                    9d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:25:E1:2B:A6:CA:F0:24:10:FD:32:DD:A5:11:E7:A8:79:26:A4:3B
            X509v3 Authority Key Identifier:
                keyid:B0:B9:B9:34:43:4D:02:C9:25:8B:10:24:C0:67:D2:77:14:3B:18:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/B0B9B934434D02C9258B1024C067D277143B182B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B9B934434D02C9258B1024C067D277143B182B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a666666663a3a2f34382d3438203d3e20323634353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2228:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:b9:59:e6:48:36:82:dc:4e:98:1f:b0:1c:8f:4e:a0:d8:6c:
         9b:29:c3:ff:96:a6:05:db:3b:a6:84:24:50:51:2a:99:99:7f:
         67:dd:ea:fe:c6:23:98:ae:dd:94:64:ed:e3:95:43:ed:b1:c8:
         db:af:3b:2a:02:03:3d:d9:56:08:92:ad:15:1e:66:c9:64:49:
         a8:a4:d0:e3:0e:b4:2d:9d:31:8e:5d:a0:1a:5e:97:a1:69:89:
         7f:cf:33:b3:80:90:15:d0:cc:0b:93:cc:18:a5:18:3e:a2:69:
         86:cf:52:c5:da:d6:bd:9f:a4:2b:ce:6b:48:16:0e:b8:77:2e:
         f1:0a:df:42:c5:16:42:d3:3f:e9:6c:32:4e:e7:ef:ee:4f:48:
         89:86:8b:78:91:81:95:51:e0:d5:3f:1a:20:7a:d9:de:60:d9:
         0b:e0:7f:37:bb:d7:2e:46:ee:57:71:7b:9a:86:12:e6:b9:b5:
         93:38:75:29:4f:be:89:a0:fc:ea:ff:aa:00:86:e7:2d:c3:8a:
         7a:72:ce:23:ac:44:f0:8d:b6:45:2f:42:5e:08:e3:6f:4b:5d:
         db:e8:c7:ef:9c:bf:b2:77:28:3d:80:8a:0d:14:dd:fd:82:c0:
         1e:d9:80:f1:9d:05:28:64:9f:55:b3:5f:e6:67:25:4c:08:90:
         df:f5:27:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org