Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/323830343a333835343a3a2f33322d3438203d3e20323636343730.roa
File:                     323830343a333835343a3a2f33322d3438203d3e20323636343730.roa (raw, json)
Hash identifier:          q6PNHB0ztQ1oP2xVWZUxbnDDa84gUjjshAv4s+Q4JKM=
Subject key identifier:   65:0E:4F:84:25:B6:73:0B:52:14:79:1E:1D:A1:94:3E:34:D7:B0:85
Certificate issuer:       /CN=8B4136D64CC0039806002C711E0AD6370739900D
Certificate serial:       160D1046911F906F48E8616B1D346395A7360503
Authority key identifier: 8B:41:36:D6:4C:C0:03:98:06:00:2C:71:1E:0A:D6:37:07:39:90:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B4136D64CC0039806002C711E0AD6370739900D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/323830343a333835343a3a2f33322d3438203d3e20323636343730.roa
Signing time:             Wed 02 Oct 2024 19:23:28 +0000
ROA not before:           Wed 02 Oct 2024 19:18:28 +0000
ROA not after:            Wed 01 Oct 2025 19:23:28 +0000
asID:                     266470
IP address blocks:        2804:3854::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/8B4136D64CC0039806002C711E0AD6370739900D.crl
                          rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/8B4136D64CC0039806002C711E0AD6370739900D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B4136D64CC0039806002C711E0AD6370739900D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0d:10:46:91:1f:90:6f:48:e8:61:6b:1d:34:63:95:a7:36:05:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B4136D64CC0039806002C711E0AD6370739900D
        Validity
            Not Before: Oct  2 19:18:28 2024 GMT
            Not After : Oct  1 19:23:28 2025 GMT
        Subject: CN=650E4F8425B6730B5214791E1DA1943E34D7B085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:02:0e:eb:e6:ee:38:51:f7:bf:72:67:0e:be:
                    5e:da:03:5d:e6:4d:30:5d:bd:82:2e:55:bb:ba:f3:
                    56:1b:e7:e1:da:0c:7b:0a:2d:a3:ba:b4:4d:e5:49:
                    dc:ff:01:2a:1f:be:51:8a:fc:68:41:56:30:5f:3b:
                    f4:21:5d:a2:59:b6:f4:25:23:ec:71:4f:74:24:35:
                    cc:d4:d2:1d:05:6c:ea:51:89:b7:81:aa:63:fc:98:
                    51:00:30:1c:ba:02:48:bc:27:9f:56:42:e0:1b:94:
                    98:63:00:cf:1e:57:a1:45:b8:77:4f:63:12:d7:de:
                    9d:53:eb:c1:8c:68:71:94:8e:5b:9e:d4:0e:38:40:
                    99:f8:fe:09:39:00:33:e4:76:97:f0:a0:21:ce:53:
                    fd:e7:95:79:69:7a:45:55:63:95:a8:61:28:c8:35:
                    3e:ad:03:bc:e4:5f:48:9b:e4:ba:0a:51:ba:7d:37:
                    ac:20:8c:3a:1f:44:a8:e9:a0:ae:86:3b:3a:d9:4e:
                    7a:e0:79:8a:49:87:cf:f9:de:d9:45:29:fd:44:23:
                    ae:da:e3:ba:3d:2a:37:4d:44:8f:f7:8a:0c:83:24:
                    38:4a:31:19:28:ba:9e:35:1a:3d:cd:27:e3:a8:78:
                    0f:e3:e4:59:06:31:49:5d:8c:cc:f2:06:6f:5f:61:
                    ef:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0E:4F:84:25:B6:73:0B:52:14:79:1E:1D:A1:94:3E:34:D7:B0:85
            X509v3 Authority Key Identifier:
                keyid:8B:41:36:D6:4C:C0:03:98:06:00:2C:71:1E:0A:D6:37:07:39:90:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/8B4136D64CC0039806002C711E0AD6370739900D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B4136D64CC0039806002C711E0AD6370739900D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/323830343a333835343a3a2f33322d3438203d3e20323636343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3854::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:01:a3:c4:88:ce:9a:c4:cb:d0:6a:95:e0:fc:5d:58:75:f9:
         e4:99:c1:d9:76:b0:73:91:67:08:0a:73:10:fd:62:b8:be:39:
         63:f9:f8:9d:cb:46:71:f8:b6:9f:9c:d9:28:33:6c:13:76:1d:
         cf:09:da:74:f3:bb:aa:e8:18:59:47:a0:bd:5b:e6:df:29:87:
         b0:39:3d:4d:7b:de:7f:0e:d2:0e:17:1e:ae:ae:e5:6f:5d:f7:
         9e:32:3d:50:a4:59:f9:fb:f9:e0:cb:63:59:47:52:c4:b3:39:
         d1:08:96:8e:46:da:73:05:3e:e9:25:07:a8:c1:be:17:7f:c2:
         bc:c2:17:4d:21:69:48:f1:81:f7:1c:68:13:c6:63:68:f8:00:
         46:35:4f:c7:c6:de:1b:51:84:fd:28:0c:14:87:59:ea:7e:ea:
         82:5f:16:e2:e7:29:be:9e:3b:c4:f6:58:97:27:50:99:d8:8c:
         6f:8f:5d:1d:6f:23:b6:aa:0d:6a:75:8f:ee:9c:cc:d8:34:6f:
         48:cb:ec:a4:2a:3d:9d:95:6c:21:72:cd:34:97:64:6d:74:c0:
         a4:bd:e1:bc:e5:cd:6a:80:d7:d1:5c:81:09:6a:96:79:a7:2c:
         66:03:43:19:34:93:ed:e7:3b:a9:03:f7:6e:6e:8f:bc:c1:9f:
         7f:ce:6d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:46 2024 by rpki-client on console-ams.rpki-client.org