Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/323830343a316262383a3a2f33322d313238203d3e203631373435.roa
File:                     323830343a316262383a3a2f33322d313238203d3e203631373435.roa (raw, json)
Hash identifier:          dpARCrJGTbLpg4On6cAirQCdXCQ94JOs1o9PPF+Mus8=
Subject key identifier:   DA:34:0F:FB:58:0D:E9:27:5C:5A:E3:CD:D7:9B:55:53:C8:98:55:10
Certificate issuer:       /CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
Certificate serial:       6E398CDD51B93779BF8AC72CF0CEF35F4A693323
Authority key identifier: 4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/323830343a316262383a3a2f33322d313238203d3e203631373435.roa
Signing time:             Tue 26 Nov 2024 10:17:46 +0000
ROA not before:           Tue 26 Nov 2024 10:12:46 +0000
ROA not after:            Tue 25 Nov 2025 10:17:46 +0000
asID:                     61745
IP address blocks:        2804:1bb8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.crl
                          rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 12:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:39:8c:dd:51:b9:37:79:bf:8a:c7:2c:f0:ce:f3:5f:4a:69:33:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
        Validity
            Not Before: Nov 26 10:12:46 2024 GMT
            Not After : Nov 25 10:17:46 2025 GMT
        Subject: CN=DA340FFB580DE9275C5AE3CDD79B5553C8985510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8a:0f:c5:8f:1a:8f:f0:5a:e9:9d:11:ab:c7:
                    45:ae:1c:29:e2:60:4c:a2:13:3b:a7:ea:02:b6:ef:
                    76:7e:cb:fa:ef:91:d2:29:02:83:b7:62:c2:da:d8:
                    96:66:f2:4c:d4:db:95:b1:30:47:0f:08:db:07:91:
                    75:41:c0:d3:1c:c8:7e:59:83:69:f3:db:9f:69:ce:
                    f7:e0:3c:f7:d7:d8:e5:f3:83:f3:0f:1e:53:52:a3:
                    ca:e3:fb:7a:8b:73:78:4b:14:de:68:e6:e8:19:63:
                    19:c5:f1:f8:be:a0:6c:62:18:b0:a7:31:bf:3c:d2:
                    12:dc:bf:0b:06:02:fe:79:8f:f0:4c:c2:0b:de:e4:
                    7f:9d:fa:c4:ea:51:01:6c:36:29:ff:9e:3b:1e:66:
                    24:ea:f3:3a:85:b3:b1:d0:cb:25:98:a2:fc:46:86:
                    fd:f4:7e:b5:dc:fa:08:78:65:f1:b5:ca:3d:9b:b9:
                    f9:30:b1:b5:ba:e6:9f:1d:93:b6:0d:da:92:bd:26:
                    ad:18:bf:49:20:8c:66:33:7e:79:84:a5:ad:3c:8c:
                    72:eb:6b:1a:d3:d0:f2:1a:28:63:88:06:5a:44:52:
                    c6:6c:9b:ce:0a:80:ef:94:9c:35:90:95:79:c7:bb:
                    ad:e0:a3:19:3a:db:a1:23:ce:16:7d:02:1c:a9:6b:
                    a4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:34:0F:FB:58:0D:E9:27:5C:5A:E3:CD:D7:9B:55:53:C8:98:55:10
            X509v3 Authority Key Identifier:
                keyid:4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/323830343a316262383a3a2f33322d313238203d3e203631373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1bb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         d3:7f:71:b3:e8:d6:3b:59:df:78:0a:98:df:ab:a4:dc:b0:6d:
         52:df:bf:bd:a8:c5:70:cf:9d:1c:d4:01:68:1e:92:e6:68:74:
         74:ea:5c:fa:ae:dc:90:be:4b:1f:87:be:00:f5:3e:8e:f1:f2:
         d8:bc:1f:a8:8f:24:07:13:ef:61:bb:c1:6f:e3:41:66:67:e1:
         17:e7:67:cb:25:59:af:eb:a0:36:85:1d:42:32:37:1a:1e:70:
         6d:59:76:cf:8e:61:4f:5d:c3:23:15:f4:76:da:be:0f:42:17:
         21:2a:7d:dc:c5:e4:18:9d:3d:6b:99:fe:36:fb:f8:61:dd:b1:
         6d:3d:ea:61:5b:97:90:0c:49:1f:95:9b:53:eb:23:03:a8:ef:
         d4:59:60:f3:f1:37:5e:e4:b9:1e:2a:f9:1e:41:df:cf:f7:72:
         69:00:24:d8:be:ea:82:05:3e:91:19:b1:03:c4:97:14:c4:4a:
         38:01:c8:17:6d:05:6f:9f:88:60:3a:f1:9e:29:ca:df:d4:fb:
         70:4e:e4:1d:d7:50:c8:c1:30:d5:49:63:df:0d:57:39:a7:af:
         6b:5a:67:34:88:6c:00:74:c7:7d:7a:bc:42:04:59:fa:db:50:
         e4:5c:f6:98:00:59:c3:51:12:35:08:4b:7f:82:2a:ad:d0:d0:
         eb:d3:69:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:43 2024 by rpki-client on console-ams.rpki-client.org