Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/323830343a346530383a3a2f33322d3634203d3e20323638323335.roa
File:                     323830343a346530383a3a2f33322d3634203d3e20323638323335.roa (raw, json)
Hash identifier:          eCej0gsTKHhZ/bD47zC2+gQ3Xlnxw5OoK22UGnp13H4=
Subject key identifier:   AB:99:91:FB:C2:D9:5A:C7:52:FE:3F:A8:5F:5E:31:8F:EA:FB:77:07
Certificate issuer:       /CN=1BE8995FC9C395145A97456B64442AC68C0DF4EB
Certificate serial:       40B3885C9FFDDE68BBE186727F0EEFB672A049FC
Authority key identifier: 1B:E8:99:5F:C9:C3:95:14:5A:97:45:6B:64:44:2A:C6:8C:0D:F4:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE8995FC9C395145A97456B64442AC68C0DF4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/323830343a346530383a3a2f33322d3634203d3e20323638323335.roa
Signing time:             Sun 03 Nov 2024 18:59:38 +0000
ROA not before:           Sun 03 Nov 2024 18:54:38 +0000
ROA not after:            Sun 02 Nov 2025 18:59:38 +0000
asID:                     268235
IP address blocks:        2804:4e08::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.crl
                          rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE8995FC9C395145A97456B64442AC68C0DF4EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 00:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b3:88:5c:9f:fd:de:68:bb:e1:86:72:7f:0e:ef:b6:72:a0:49:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE8995FC9C395145A97456B64442AC68C0DF4EB
        Validity
            Not Before: Nov  3 18:54:38 2024 GMT
            Not After : Nov  2 18:59:38 2025 GMT
        Subject: CN=AB9991FBC2D95AC752FE3FA85F5E318FEAFB7707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0a:8c:3d:08:62:4a:47:94:52:3a:14:85:33:
                    60:6e:97:a1:9f:52:ca:97:ea:5f:88:09:f6:0e:65:
                    3f:d4:68:ae:59:de:38:de:94:5e:ef:18:19:7b:d0:
                    aa:33:3a:d9:2d:bf:bd:52:fe:f3:7f:97:ee:a6:ed:
                    b8:b7:04:da:8a:d0:de:71:88:36:21:f7:59:13:68:
                    49:5e:5b:31:82:58:86:b2:ae:ba:6a:64:55:20:18:
                    d7:4f:7b:33:99:9c:d1:55:b1:8a:b0:9c:cc:81:6e:
                    27:65:28:8b:7c:c3:de:60:18:09:d8:c4:70:6f:45:
                    bc:3c:57:d5:c1:39:60:6f:ac:db:36:a4:7a:d4:a5:
                    cb:83:58:22:9f:1c:0d:88:47:d8:d4:3a:d7:8b:78:
                    f1:b7:b9:cc:59:f3:d1:32:ab:d3:0e:22:96:5e:4b:
                    05:71:91:a0:ba:b8:54:e8:c5:48:6a:b9:04:43:fa:
                    39:18:8d:c9:b6:69:3b:b4:d0:62:01:f5:b3:6a:44:
                    07:f9:4a:78:a1:94:26:0e:32:d0:dc:db:27:ce:0f:
                    55:52:8e:03:4c:43:30:5e:07:78:3d:69:b8:1f:d2:
                    44:7c:15:56:3f:b7:ae:05:0f:33:b5:a7:7f:7f:28:
                    c4:4c:0f:69:9b:77:8b:71:ed:32:95:7d:8b:fa:b5:
                    52:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:99:91:FB:C2:D9:5A:C7:52:FE:3F:A8:5F:5E:31:8F:EA:FB:77:07
            X509v3 Authority Key Identifier:
                keyid:1B:E8:99:5F:C9:C3:95:14:5A:97:45:6B:64:44:2A:C6:8C:0D:F4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE8995FC9C395145A97456B64442AC68C0DF4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/323830343a346530383a3a2f33322d3634203d3e20323638323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e08::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:4f:8b:16:ca:b4:32:a7:d3:8a:62:16:aa:86:10:22:69:b7:
         c9:f8:7e:2a:f8:0a:fd:e1:7e:b3:d0:71:d4:8e:83:4c:3d:10:
         ab:24:11:23:73:d6:18:40:e4:17:c7:d1:d8:82:95:45:b4:10:
         5e:a4:a4:98:81:ab:85:72:b7:a2:de:67:a8:ac:98:e0:c4:f2:
         b1:49:1b:e7:7d:2e:f2:5a:38:f1:2c:c6:69:a1:73:a3:d6:b3:
         a7:64:86:b9:00:ca:de:aa:7a:49:59:ce:ff:77:83:89:fb:5b:
         03:5d:3f:7c:df:6d:69:81:84:f9:c3:77:ac:87:7f:5f:df:d6:
         10:c4:46:c6:17:f5:0f:ee:3a:a4:fa:7d:1b:a4:a5:b9:b9:39:
         ee:97:4d:3b:40:44:92:5e:43:07:47:ce:d6:d3:76:34:9b:8d:
         51:72:c8:20:33:ed:65:f8:1f:b3:3a:63:77:66:a5:24:a1:25:
         7a:85:eb:5c:3c:85:fb:fb:d8:9a:55:9f:cf:9b:21:cb:44:55:
         f6:98:24:08:c9:c7:eb:19:ce:47:1d:0d:4f:7e:18:c7:fa:4b:
         11:3c:80:d9:f2:b9:3b:5f:a3:90:1a:15:0b:57:b9:74:2e:47:
         19:b5:71:62:16:6f:0c:6b:32:1e:d5:eb:1f:09:66:d2:d9:21:
         0c:77:89:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:17 2024 by rpki-client on console-ams.rpki-client.org