Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/323830343a373963303a3230303a3a2f34382d3438203d3e20323731333235.roa
File:                     323830343a373963303a3230303a3a2f34382d3438203d3e20323731333235.roa (raw, json)
Hash identifier:          H7HrP255Jg4G8AV+uRL2hOtY6u3rFrZDNbcFY/DuzWc=
Subject key identifier:   5E:FF:1E:E1:A1:01:23:B0:2E:0A:FA:6C:AA:F7:BE:26:EE:0D:0B:51
Certificate issuer:       /CN=09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57
Certificate serial:       7AA59737E9A5D6A590E9829A4FFB0DDFD443FADA
Authority key identifier: 09:25:18:26:C5:FE:59:A1:11:0B:FF:DB:5B:8A:A1:3F:B9:F3:AC:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/323830343a373963303a3230303a3a2f34382d3438203d3e20323731333235.roa
Signing time:             Fri 16 Aug 2024 01:57:04 +0000
ROA not before:           Fri 16 Aug 2024 01:52:04 +0000
ROA not after:            Fri 15 Aug 2025 01:57:04 +0000
asID:                     271325
IP address blocks:        2804:79c0:200::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.crl
                          rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a5:97:37:e9:a5:d6:a5:90:e9:82:9a:4f:fb:0d:df:d4:43:fa:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57
        Validity
            Not Before: Aug 16 01:52:04 2024 GMT
            Not After : Aug 15 01:57:04 2025 GMT
        Subject: CN=5EFF1EE1A10123B02E0AFA6CAAF7BE26EE0D0B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ad:60:73:cc:ce:82:5e:1a:41:7e:46:26:c0:
                    9c:9e:c0:a4:f8:6d:fe:c4:82:dd:f1:cd:0f:16:48:
                    de:cc:10:bc:b9:13:43:f0:e9:0a:66:73:cd:c5:fd:
                    ec:37:ed:97:5e:4b:2b:23:4a:62:3b:bf:2d:49:41:
                    0b:eb:57:75:7c:a8:09:38:d5:02:e2:26:83:9d:4c:
                    64:b1:93:07:14:e9:f4:fd:e7:32:49:5f:08:77:c7:
                    4a:34:5c:d5:a6:72:35:ad:52:67:58:ed:c8:49:7d:
                    9b:08:68:45:b9:b8:12:c8:0d:4b:12:46:6b:1d:b0:
                    46:46:96:e1:2a:6d:b7:36:3a:a3:dd:cb:03:e0:a2:
                    96:c7:4a:c9:5e:d5:62:b8:17:90:40:4b:73:04:7a:
                    9c:e1:53:38:47:8e:39:c8:6b:fe:16:29:b2:43:c6:
                    a5:94:37:91:71:21:fc:f3:a1:3b:a4:84:69:22:77:
                    99:6b:97:29:7d:bf:bf:89:8f:22:4a:c8:d1:b4:44:
                    93:89:c9:a7:1f:c5:71:1e:b3:86:c2:29:51:7a:8c:
                    db:5c:3c:3f:af:70:d6:0a:ba:4f:0d:08:f6:01:b9:
                    8a:3e:16:75:0e:5c:ad:7e:ee:b9:40:b5:94:37:ac:
                    69:92:0b:0c:21:bb:3d:39:c0:bf:39:c7:9e:1f:d9:
                    66:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FF:1E:E1:A1:01:23:B0:2E:0A:FA:6C:AA:F7:BE:26:EE:0D:0B:51
            X509v3 Authority Key Identifier:
                keyid:09:25:18:26:C5:FE:59:A1:11:0B:FF:DB:5B:8A:A1:3F:B9:F3:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/323830343a373963303a3230303a3a2f34382d3438203d3e20323731333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79c0:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:18:6b:78:bc:b3:fb:65:1d:e7:1a:15:c8:8b:7e:cf:1e:70:
         5e:9a:dd:f1:62:a4:0b:30:6a:97:50:23:09:e6:40:a4:69:28:
         cb:98:a2:75:b7:87:f5:99:e0:e2:8b:70:37:1d:55:55:32:b5:
         d0:90:cb:15:22:1b:ea:2a:f3:b9:1a:3f:4c:37:15:69:d2:f4:
         14:ac:80:e7:e8:1c:8d:3f:94:97:64:d5:2e:10:c1:7b:e7:4e:
         89:be:7a:2a:2e:24:c1:b3:5a:fa:45:98:a1:d5:cf:73:44:7a:
         fc:e4:b8:6d:a0:82:61:48:aa:e9:35:1b:b6:e4:79:3b:22:66:
         34:50:3f:94:fc:40:15:4e:e4:a2:cc:eb:4f:95:d9:6d:c1:4d:
         08:12:02:c9:be:84:c8:3a:50:73:4e:f2:e5:bd:b3:83:a1:18:
         60:0c:b0:4c:84:9d:17:0d:4a:3a:86:69:0c:9c:12:6c:39:c4:
         9a:9c:f7:1f:56:1e:ce:bd:1d:a1:20:81:df:d8:7a:77:74:4c:
         1c:d6:10:3f:80:40:07:8a:11:d5:71:11:cb:d8:5e:04:7e:84:
         d5:79:a9:77:df:b6:5b:52:f8:8e:04:f3:53:50:73:7f:c6:c2:
         24:d6:5a:73:dd:ff:02:52:ce:d5:96:e7:29:f2:fc:c7:7a:8c:
         c3:37:3f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:45:00 2024 by rpki-client on console-ams.rpki-client.org