Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/323830343a333464303a3a2f33322d3438203d3e20323635343832.roa
File:                     323830343a333464303a3a2f33322d3438203d3e20323635343832.roa (raw, json)
Hash identifier:          qK6qs9Z/zu+ER89JZwZHLXwLwD9wrEAgdBo0EqUt74o=
Subject key identifier:   1F:8D:EB:BC:5B:0C:40:09:C5:E8:0C:77:C4:8D:6C:D2:D6:FD:E0:F0
Certificate issuer:       /CN=AB0A9EADB83F739FC241A002FB1C2A394EECBF50
Certificate serial:       03B8A8BCCBDD076A52A44C53288DA45842BF7D4B
Authority key identifier: AB:0A:9E:AD:B8:3F:73:9F:C2:41:A0:02:FB:1C:2A:39:4E:EC:BF:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/323830343a333464303a3a2f33322d3438203d3e20323635343832.roa
Signing time:             Wed 05 Jun 2024 19:22:32 +0000
ROA not before:           Wed 05 Jun 2024 19:17:32 +0000
ROA not after:            Wed 04 Jun 2025 19:22:32 +0000
asID:                     265482
IP address blocks:        2804:34d0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.crl
                          rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b8:a8:bc:cb:dd:07:6a:52:a4:4c:53:28:8d:a4:58:42:bf:7d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB0A9EADB83F739FC241A002FB1C2A394EECBF50
        Validity
            Not Before: Jun  5 19:17:32 2024 GMT
            Not After : Jun  4 19:22:32 2025 GMT
        Subject: CN=1F8DEBBC5B0C4009C5E80C77C48D6CD2D6FDE0F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:90:7b:a6:1f:31:f4:62:40:f4:07:fc:f0:
                    af:c5:68:84:1a:7d:cb:d1:db:9c:f5:c8:28:50:5b:
                    d9:f9:a2:94:8e:26:6c:ef:2a:83:24:19:74:2a:0f:
                    bc:0a:ee:8b:c5:dd:69:a8:03:26:78:d2:7e:65:04:
                    6f:be:c3:1f:5e:6e:6b:9a:1a:8d:b1:99:df:e3:fe:
                    7a:64:34:48:b6:4c:25:a5:72:09:57:f8:5f:4c:22:
                    69:90:af:67:4e:07:67:be:1a:f6:b1:37:c7:1c:47:
                    86:22:60:1d:3a:93:bb:cb:cb:a4:02:45:56:e2:47:
                    40:7e:c2:0b:81:d7:c1:09:e7:4d:de:2f:b1:12:1a:
                    a0:48:89:d0:97:c3:fe:1f:8e:06:b5:1f:2e:dc:e5:
                    f0:66:7a:5b:aa:63:4f:a7:a0:16:3f:16:6e:ba:a2:
                    b2:fe:39:e5:52:2b:d8:46:cb:99:88:39:7a:2f:43:
                    ec:03:4e:2f:1c:79:41:d5:d0:d6:9b:de:94:11:9e:
                    da:81:df:48:06:ef:05:7b:c2:fc:fc:86:78:6c:db:
                    55:c2:e8:87:c7:e0:17:ea:05:03:5c:7a:3a:70:a6:
                    27:49:63:42:c3:cd:26:d6:af:44:95:d0:31:78:0f:
                    2d:0a:d9:fc:98:75:f6:5c:a1:76:2c:3a:bc:63:cb:
                    38:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8D:EB:BC:5B:0C:40:09:C5:E8:0C:77:C4:8D:6C:D2:D6:FD:E0:F0
            X509v3 Authority Key Identifier:
                keyid:AB:0A:9E:AD:B8:3F:73:9F:C2:41:A0:02:FB:1C:2A:39:4E:EC:BF:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/323830343a333464303a3a2f33322d3438203d3e20323635343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         cf:7e:ed:7e:dd:71:ea:66:20:d8:c7:ac:33:e6:f2:0c:e5:06:
         1d:89:c2:7d:75:4a:26:d0:1a:51:df:b6:e6:8b:12:9e:3e:4f:
         6e:08:c6:38:74:8c:ce:dd:96:9e:d2:cc:6b:98:56:32:df:ea:
         ab:d9:bb:de:b8:b1:03:10:bd:df:67:7a:d1:b2:34:95:19:a9:
         d2:15:af:83:89:78:db:05:8c:fb:c5:51:74:14:d3:12:63:ff:
         bc:8c:94:df:b8:36:80:39:63:19:ee:52:54:59:c8:8c:70:6e:
         5f:79:52:03:c5:97:4d:a2:d2:41:a6:f8:10:7f:68:e9:f8:d2:
         3f:96:cb:4c:f9:9d:fa:e2:6d:9e:70:79:66:1d:8d:89:c6:c8:
         fb:96:fd:c3:9a:62:1f:5c:bf:4e:5f:b6:1d:c9:1f:52:10:6b:
         e3:f3:bb:dc:53:94:98:3b:88:3a:8f:a4:95:95:ad:1c:7f:bf:
         c7:23:19:44:61:76:f9:4d:b7:b1:9a:bc:66:22:4e:40:5d:70:
         e5:f4:8e:0e:15:c6:93:9a:8e:d0:3b:d3:9f:b9:bb:a2:b2:ee:
         62:9d:4b:30:22:8b:89:53:f4:92:47:ae:5f:7c:d9:d1:31:f6:
         cc:c7:ca:60:92:f9:00:e5:f8:40:1a:d0:1b:13:e9:a7:02:3f:
         21:89:8b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:26 2024 by rpki-client on console-ams.rpki-client.org