Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/323830343a336461633a3130303a3a2f34302d3430203d3e20323636353436.roa
File:                     323830343a336461633a3130303a3a2f34302d3430203d3e20323636353436.roa (raw, json)
Hash identifier:          zWkT1VYg7Qg91f8W4yAZnues8ux3g4z4STEWoHXxSbU=
Subject key identifier:   AD:4F:E4:FD:C5:7A:8E:36:EE:93:B8:DD:B5:ED:61:19:DF:10:96:7C
Certificate issuer:       /CN=B850A87858FE7B4C31702DB93D7CE6CC2DF7944C
Certificate serial:       045FFD219853B04627E73E8AFC6ACEFD91EB5F85
Authority key identifier: B8:50:A8:78:58:FE:7B:4C:31:70:2D:B9:3D:7C:E6:CC:2D:F7:94:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/323830343a336461633a3130303a3a2f34302d3430203d3e20323636353436.roa
Signing time:             Thu 01 Aug 2024 03:17:41 +0000
ROA not before:           Thu 01 Aug 2024 03:12:41 +0000
ROA not after:            Thu 31 Jul 2025 03:17:41 +0000
asID:                     266546
IP address blocks:        2804:3dac:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.crl
                          rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5f:fd:21:98:53:b0:46:27:e7:3e:8a:fc:6a:ce:fd:91:eb:5f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B850A87858FE7B4C31702DB93D7CE6CC2DF7944C
        Validity
            Not Before: Aug  1 03:12:41 2024 GMT
            Not After : Jul 31 03:17:41 2025 GMT
        Subject: CN=AD4FE4FDC57A8E36EE93B8DDB5ED6119DF10967C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e1:3e:b7:d3:71:f1:9c:96:3d:97:b4:76:7c:
                    ad:33:68:5e:66:3d:fd:05:34:58:ea:df:08:17:e5:
                    25:97:5b:f8:b6:fe:36:bb:d1:c9:d7:22:ca:25:bf:
                    f1:8c:53:03:c7:08:60:6a:d9:e8:56:78:eb:28:b5:
                    77:00:7a:92:83:77:3c:8e:01:18:00:d1:5c:19:4e:
                    15:40:d0:f6:b6:26:7c:f0:49:23:44:82:f4:c4:39:
                    be:c6:2a:3d:8b:17:fe:1e:19:fd:04:ff:05:74:dd:
                    31:28:73:e8:44:b6:fb:fb:76:78:e1:9b:05:27:0d:
                    05:b0:c0:81:f2:c1:84:e3:77:f5:fa:a6:0f:2d:56:
                    59:88:7a:dd:f5:45:41:3e:02:65:2b:28:82:2e:16:
                    d3:a9:49:06:e6:bc:1f:cc:d5:e2:b2:7e:23:82:78:
                    37:62:b4:2d:6f:81:3f:bf:90:61:88:f8:00:a9:19:
                    7e:c0:8c:2e:53:ff:df:71:97:cf:63:83:3c:cf:5e:
                    d8:46:d8:cd:03:49:b8:c4:72:70:f5:a3:c2:06:e3:
                    0b:70:1b:34:87:86:13:60:04:53:fb:98:e8:9a:bc:
                    4a:a6:eb:4f:c6:c1:02:75:9b:3e:cc:57:6d:90:01:
                    de:c1:bd:70:34:8f:dd:bd:45:b3:44:78:cf:08:00:
                    e7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4F:E4:FD:C5:7A:8E:36:EE:93:B8:DD:B5:ED:61:19:DF:10:96:7C
            X509v3 Authority Key Identifier:
                keyid:B8:50:A8:78:58:FE:7B:4C:31:70:2D:B9:3D:7C:E6:CC:2D:F7:94:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/323830343a336461633a3130303a3a2f34302d3430203d3e20323636353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dac:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:e7:ed:5d:95:38:a2:ac:94:99:68:90:6d:24:25:7e:3e:7e:
         6b:4c:34:81:89:f8:e2:01:87:e4:b0:c2:ea:1a:e7:05:b5:d7:
         89:82:55:3e:1d:4c:94:50:0c:03:cc:bf:d8:f6:ec:0d:2d:31:
         7e:5d:ab:c4:e7:a9:75:6f:89:b7:99:9a:fe:52:06:84:bd:d4:
         5a:e0:ef:6f:fc:1c:bd:a7:82:19:96:42:75:50:25:33:a2:b5:
         ad:94:64:56:22:d2:88:f9:e9:4d:51:87:93:d3:6f:50:54:bc:
         d6:57:73:86:b0:28:85:25:28:65:4e:b1:81:1d:0e:40:d1:dd:
         c4:46:14:f4:73:d7:e9:d6:05:5a:d9:1b:27:5e:6a:eb:28:e4:
         92:88:f1:57:74:14:7d:61:db:5c:7f:a8:87:cb:31:57:3b:c4:
         ff:56:c7:16:e4:59:e5:0f:94:1e:36:ff:dd:4e:cc:e7:07:a8:
         38:85:5c:50:52:53:e0:18:0c:dd:5b:75:2d:06:61:f8:87:6c:
         29:fb:6b:76:44:c6:5e:7f:e6:9e:2c:af:4e:31:08:9c:26:46:
         79:dc:ad:b3:a2:50:0d:59:d9:95:c2:14:ee:12:20:6d:db:f3:
         ce:f7:f6:d7:3b:cc:20:f7:5a:13:0a:8c:ad:87:51:c4:1c:56:
         b2:1c:db:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:12 2024 by rpki-client on console-ams.rpki-client.org