Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/323830343a373963303a3a2f33322d3332203d3e20323731333235.roa
File:                     323830343a373963303a3a2f33322d3332203d3e20323731333235.roa (raw, json)
Hash identifier:          DpwhjlXnwWMMNsXu4slHaRJZQyMHJFPdrLGJnOoUkoM=
Subject key identifier:   BE:64:27:01:A4:28:F9:FD:58:1A:CD:54:A3:1F:47:50:F2:B1:C8:7C
Certificate issuer:       /CN=09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57
Certificate serial:       7E9625A30B0DEDE36C03ADA7F3A24CF255483ED1
Authority key identifier: 09:25:18:26:C5:FE:59:A1:11:0B:FF:DB:5B:8A:A1:3F:B9:F3:AC:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/323830343a373963303a3a2f33322d3332203d3e20323731333235.roa
Signing time:             Fri 16 Aug 2024 01:56:58 +0000
ROA not before:           Fri 16 Aug 2024 01:51:58 +0000
ROA not after:            Fri 15 Aug 2025 01:56:58 +0000
asID:                     271325
IP address blocks:        2804:79c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.crl
                          rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:96:25:a3:0b:0d:ed:e3:6c:03:ad:a7:f3:a2:4c:f2:55:48:3e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57
        Validity
            Not Before: Aug 16 01:51:58 2024 GMT
            Not After : Aug 15 01:56:58 2025 GMT
        Subject: CN=BE642701A428F9FD581ACD54A31F4750F2B1C87C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c2:9a:dc:7a:5f:54:b0:da:ff:60:92:dc:89:
                    ed:9e:13:9b:ee:62:62:39:be:58:55:74:a8:78:94:
                    3f:30:aa:77:1b:30:8c:bf:52:9d:7e:32:7b:9d:26:
                    8e:70:85:c1:94:9a:17:fb:69:6e:c1:89:9d:40:1d:
                    a8:60:d5:ff:35:86:52:0e:98:78:2c:5b:01:73:7f:
                    fd:22:13:db:86:cb:16:55:c8:f3:81:d0:22:be:6a:
                    03:a1:f4:d4:f2:e8:7b:a7:68:15:5a:fe:11:50:54:
                    8a:17:c2:a0:d5:63:58:c6:ee:f6:0d:80:ef:3e:3c:
                    70:81:90:4b:29:e2:2e:22:e3:ab:7d:5b:01:f7:00:
                    a2:9e:9d:c6:2b:70:ba:b6:4d:12:dc:5b:76:9d:b3:
                    7c:43:e2:cd:6c:50:33:69:fb:a7:20:78:ae:8e:62:
                    bd:83:9a:8f:42:11:02:32:43:9e:68:f1:e4:fe:5e:
                    31:a1:f7:b5:e6:3f:24:bf:40:38:15:b4:d9:64:20:
                    9e:93:29:64:c9:c4:e7:a5:15:75:e6:45:dc:ac:b4:
                    e3:dd:d7:5d:e6:75:7f:4a:25:cd:be:64:20:ea:d8:
                    5c:dc:e8:be:00:02:71:b6:99:c7:cc:38:af:62:a7:
                    cf:65:e7:b3:24:94:1b:d7:0e:c6:42:59:2c:ed:ff:
                    d4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:64:27:01:A4:28:F9:FD:58:1A:CD:54:A3:1F:47:50:F2:B1:C8:7C
            X509v3 Authority Key Identifier:
                keyid:09:25:18:26:C5:FE:59:A1:11:0B:FF:DB:5B:8A:A1:3F:B9:F3:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/323830343a373963303a3a2f33322d3332203d3e20323731333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:4d:cd:08:ef:0f:21:2d:30:3d:d4:3f:f8:b4:d7:7c:2c:54:
         a6:bd:b2:fb:fa:cd:a0:95:4b:9a:13:83:ed:55:db:ab:72:0d:
         d2:85:5a:20:6b:ab:98:68:2f:df:92:35:a2:65:98:65:e6:5f:
         ae:fa:bf:1e:39:a1:65:f9:86:3a:cb:19:ce:2f:7d:74:78:e6:
         f0:d3:79:75:4d:de:bb:20:22:86:5f:6e:cc:98:d7:9a:19:cb:
         78:0b:20:13:37:94:03:d1:d6:4e:84:0b:00:46:26:dd:ba:4a:
         9a:18:dd:2e:2a:84:b3:d8:9a:ec:28:e6:08:f0:9d:56:cf:16:
         ee:f5:02:4a:90:a2:55:01:20:68:0a:d5:4b:36:1e:76:a5:be:
         3a:d9:ca:00:4c:55:8f:03:e5:ea:b9:4d:a9:f0:14:ec:96:ba:
         ce:fc:20:ab:f0:08:65:37:18:4e:4d:37:45:25:b6:13:54:27:
         26:2e:72:76:95:6b:33:b4:44:d0:a1:41:36:e6:cd:4a:81:d5:
         f1:ab:13:4c:6c:b0:8c:9b:82:e6:49:c6:e5:a8:a0:0f:c4:34:
         82:e7:25:1e:14:98:07:1f:6c:6c:d5:42:55:2a:f8:29:f6:34:
         21:29:1f:37:ed:1e:34:11:ca:f5:dc:71:b6:ab:8f:d4:b8:e4:
         45:5a:cc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:39 2024 by rpki-client on console-fra.rpki-client.org