Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/323830313a38303a333964303a3a2f34382d3438203d3e20323731303437.roa
File:                     323830313a38303a333964303a3a2f34382d3438203d3e20323731303437.roa (raw, json)
Hash identifier:          ymQ02tR2zKyGGxtg+tvP2ivdb9rXaRbQTHI2ytbeM14=
Subject key identifier:   1B:46:CB:28:E9:A7:F8:19:39:4B:B6:BD:74:ED:58:A2:ED:44:7D:68
Certificate issuer:       /CN=834325D3983126D2D723BBC6EC0C6196882A6196
Certificate serial:       1F771CD2AFDEB1DA7C3F84BF60FED436C96FEAC7
Authority key identifier: 83:43:25:D3:98:31:26:D2:D7:23:BB:C6:EC:0C:61:96:88:2A:61:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/834325D3983126D2D723BBC6EC0C6196882A6196.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/323830313a38303a333964303a3a2f34382d3438203d3e20323731303437.roa
Signing time:             Fri 16 Aug 2024 13:56:11 +0000
ROA not before:           Fri 16 Aug 2024 13:51:11 +0000
ROA not after:            Fri 15 Aug 2025 13:56:11 +0000
asID:                     271047
IP address blocks:        2801:80:39d0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.crl
                          rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/834325D3983126D2D723BBC6EC0C6196882A6196.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:77:1c:d2:af:de:b1:da:7c:3f:84:bf:60:fe:d4:36:c9:6f:ea:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834325D3983126D2D723BBC6EC0C6196882A6196
        Validity
            Not Before: Aug 16 13:51:11 2024 GMT
            Not After : Aug 15 13:56:11 2025 GMT
        Subject: CN=1B46CB28E9A7F819394BB6BD74ED58A2ED447D68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:96:93:ab:eb:87:2a:be:77:40:43:ea:0e:30:
                    44:92:7f:e7:1d:20:14:87:ce:e2:3b:aa:cf:6c:9f:
                    fd:82:ee:7f:69:0f:50:e0:a0:df:80:18:df:04:6f:
                    fc:82:ab:b3:29:69:68:e5:44:9a:67:32:0d:a0:72:
                    e7:66:15:14:93:c4:8e:f8:f9:4b:02:0c:61:8d:14:
                    f3:3c:f3:56:fa:e3:ef:1e:09:8a:dc:74:49:9e:3a:
                    e9:8d:00:9a:e8:64:8f:74:65:45:28:35:20:e0:89:
                    df:51:40:7f:f9:63:b1:00:bd:fa:24:5a:af:17:c5:
                    b0:0c:ae:9c:d3:cf:03:c4:ee:15:ad:3a:02:e9:4f:
                    69:20:81:56:f2:89:72:36:c4:ec:a1:32:78:04:8e:
                    54:09:04:9b:8c:f0:60:fa:54:d2:94:aa:01:4a:ba:
                    82:cb:6d:86:3e:33:d9:14:1f:68:1a:c2:29:38:a0:
                    29:a8:17:db:f7:e7:16:97:be:54:14:6e:69:99:84:
                    23:d5:26:b4:9b:4c:c9:db:33:5b:45:cc:70:b5:d3:
                    91:5e:01:d5:d9:30:a3:02:71:8b:f1:97:f3:7d:95:
                    73:11:b4:77:9f:5b:ce:a7:18:f1:7c:4b:86:a9:75:
                    49:07:56:2f:65:ed:5b:ac:8d:64:35:e4:23:81:2f:
                    e5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:46:CB:28:E9:A7:F8:19:39:4B:B6:BD:74:ED:58:A2:ED:44:7D:68
            X509v3 Authority Key Identifier:
                keyid:83:43:25:D3:98:31:26:D2:D7:23:BB:C6:EC:0C:61:96:88:2A:61:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/834325D3983126D2D723BBC6EC0C6196882A6196.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/323830313a38303a333964303a3a2f34382d3438203d3e20323731303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:39d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:2e:23:43:25:f8:c1:f9:6a:cb:fa:97:33:56:a2:54:36:5c:
         54:b1:8e:52:3f:f9:09:5f:52:05:a5:47:d3:ee:3c:46:65:4c:
         24:c4:b9:c1:4f:92:b2:94:55:2f:d4:c1:79:5d:a3:d5:e4:47:
         04:9a:1e:e0:48:7f:cd:5d:e0:de:fb:e2:6e:c3:c7:ab:1e:f7:
         77:6c:15:6e:04:90:c0:dd:29:c4:ac:17:96:1a:64:c4:03:91:
         78:e7:d9:e3:f7:d7:85:3c:0e:79:63:96:a4:9b:37:6c:eb:df:
         39:06:60:e0:c3:c6:e0:68:14:00:b0:84:95:9c:b8:0b:bc:27:
         e4:49:6a:e9:85:f2:bd:0c:10:99:72:a2:97:9b:b5:38:41:c8:
         37:51:92:5b:d1:92:86:19:b7:0f:27:95:ad:cf:da:c4:e8:56:
         66:39:31:37:9c:00:04:0d:7c:6f:52:64:37:b0:7c:dc:b9:38:
         c9:79:d1:1f:b1:88:51:4e:ea:2d:9c:a6:2b:8f:f4:e1:70:4d:
         f4:74:1b:0b:4d:41:f0:f9:73:07:7c:ac:bd:e1:1d:64:7c:7a:
         71:cf:93:14:8c:85:ca:fc:6c:00:0f:a1:d4:5d:0c:a5:4f:04:
         aa:93:68:7f:b9:4e:74:a3:fa:30:49:f5:3c:fa:93:43:ea:ab:
         a3:e7:81:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:33 2024 by rpki-client on console-fra.rpki-client.org