Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/323830343a343133303a3a2f33322d3438203d3e20323636303039.roa
File:                     323830343a343133303a3a2f33322d3438203d3e20323636303039.roa (raw, json)
Hash identifier:          1wNRn/TwGco2ALH9g5V36+uIvhBj+af78vGLX4slgSY=
Subject key identifier:   3F:29:10:A4:19:2B:56:B8:E2:87:29:EA:55:11:D9:40:32:61:AE:A1
Certificate issuer:       /CN=87430CCF52566FCFE1A19B4C1F3DDE5C6D6BA149
Certificate serial:       65ED358CF9166D372A51288D547CDC473872F7AF
Authority key identifier: 87:43:0C:CF:52:56:6F:CF:E1:A1:9B:4C:1F:3D:DE:5C:6D:6B:A1:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87430CCF52566FCFE1A19B4C1F3DDE5C6D6BA149.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/323830343a343133303a3a2f33322d3438203d3e20323636303039.roa
Signing time:             Thu 14 Nov 2024 12:42:46 +0000
ROA not before:           Thu 14 Nov 2024 12:37:46 +0000
ROA not after:            Thu 13 Nov 2025 12:42:46 +0000
asID:                     266009
IP address blocks:        2804:4130::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/87430CCF52566FCFE1A19B4C1F3DDE5C6D6BA149.crl
                          rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/87430CCF52566FCFE1A19B4C1F3DDE5C6D6BA149.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87430CCF52566FCFE1A19B4C1F3DDE5C6D6BA149.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 11:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ed:35:8c:f9:16:6d:37:2a:51:28:8d:54:7c:dc:47:38:72:f7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87430CCF52566FCFE1A19B4C1F3DDE5C6D6BA149
        Validity
            Not Before: Nov 14 12:37:46 2024 GMT
            Not After : Nov 13 12:42:46 2025 GMT
        Subject: CN=3F2910A4192B56B8E28729EA5511D9403261AEA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:90:8c:72:94:d1:5c:2d:0c:fe:99:97:f8:73:
                    94:8a:69:2f:1e:0e:7a:8a:e2:5f:30:09:7b:68:a3:
                    44:68:e0:a9:ed:0f:87:b6:cb:7d:55:16:14:7f:a1:
                    b2:b0:77:75:d3:4e:a6:1b:4a:24:a5:99:be:d3:6c:
                    16:8e:b5:aa:06:cd:74:88:56:83:64:4e:02:2a:7f:
                    38:ff:c2:eb:4d:a2:91:33:ad:52:03:ce:65:66:b7:
                    b1:cb:96:27:a3:f8:c8:08:72:7d:2c:e4:ff:3b:b3:
                    9b:ff:e2:14:30:ed:66:4a:f6:bd:55:6d:53:b4:06:
                    9a:c7:f5:60:52:20:af:76:d6:08:dd:4e:9f:74:88:
                    4b:ec:11:49:48:f6:6a:8f:8c:9c:9a:da:5b:a7:61:
                    5a:98:35:5c:9a:ec:49:f0:36:28:bc:42:a9:14:34:
                    e2:5d:31:87:0e:d0:d3:27:c8:ff:5f:e4:12:28:94:
                    98:bf:5c:ad:14:fa:69:39:52:2e:1b:86:d5:cd:06:
                    fb:d7:ab:0c:a8:8d:23:4b:94:27:da:c7:51:99:90:
                    b3:a8:97:e5:27:09:d2:9f:e4:04:2d:cb:df:62:78:
                    20:e1:95:6c:c7:72:8f:b4:b5:7e:ca:da:55:35:e1:
                    c6:19:1d:21:f8:82:ea:e2:65:b2:fb:28:8a:3f:c7:
                    9a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:29:10:A4:19:2B:56:B8:E2:87:29:EA:55:11:D9:40:32:61:AE:A1
            X509v3 Authority Key Identifier:
                keyid:87:43:0C:CF:52:56:6F:CF:E1:A1:9B:4C:1F:3D:DE:5C:6D:6B:A1:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/87430CCF52566FCFE1A19B4C1F3DDE5C6D6BA149.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87430CCF52566FCFE1A19B4C1F3DDE5C6D6BA149.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/323830343a343133303a3a2f33322d3438203d3e20323636303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4130::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:f8:21:5a:17:c6:41:32:4a:fc:66:31:76:e3:08:96:2a:b9:
         da:09:a4:3e:1b:6b:2f:1f:a6:65:c0:ec:dd:aa:8d:f6:17:f9:
         79:41:b6:87:f6:46:cf:3a:f4:e3:f8:e6:87:70:99:3e:84:30:
         16:c5:33:08:07:38:e8:4f:b0:e9:b2:9f:3e:32:44:4d:73:66:
         7f:a9:71:b6:cb:7c:89:11:09:80:20:9f:bb:33:a2:c8:ef:66:
         30:a6:b4:01:88:8d:12:73:a3:6a:bb:19:59:e5:20:ea:46:2a:
         32:cb:95:3e:ef:fb:25:7b:23:f8:1c:3d:cb:bb:e8:e1:cd:af:
         e7:2d:7b:f9:e0:d5:ba:51:a7:f6:4b:0f:b8:d5:a2:c5:d5:b5:
         cc:13:90:7a:38:63:b1:ec:3e:6f:c8:a3:bf:56:27:88:88:6d:
         59:4b:13:70:a1:96:c0:5a:f4:4f:2a:aa:64:2c:1a:0a:f4:6b:
         90:76:51:65:ef:fd:a6:58:07:98:7d:a4:b3:82:1c:cf:82:5e:
         5f:a0:ad:45:e6:df:57:2a:12:4f:1b:5f:40:e0:b6:0c:ed:35:
         a3:1c:28:0a:e7:0e:10:70:59:9d:18:a4:86:72:ce:47:85:72:
         57:65:14:48:6c:f8:df:4d:db:1b:cd:83:4b:88:14:1d:79:3d:
         eb:01:7f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:19 2024 by rpki-client on console-fra.rpki-client.org