Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/323830343a376463383a3a2f33322d313238203d3e20323731353832.roa
File:                     323830343a376463383a3a2f33322d313238203d3e20323731353832.roa (raw, json)
Hash identifier:          PWE1Ij/nanQgkjraF4mvn8xUbF0dcqFiY4VVaY9Bp0c=
Subject key identifier:   D2:CC:CD:6B:47:36:9C:7C:C2:BB:31:67:B5:B6:D5:EA:7A:14:66:2D
Certificate issuer:       /CN=4B29A9A89597A4D4F57700CCA0C13155971D9465
Certificate serial:       631E7B88FD6E1D7E87F4341B59BE7C0B61AAC9B7
Authority key identifier: 4B:29:A9:A8:95:97:A4:D4:F5:77:00:CC:A0:C1:31:55:97:1D:94:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B29A9A89597A4D4F57700CCA0C13155971D9465.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/323830343a376463383a3a2f33322d313238203d3e20323731353832.roa
Signing time:             Sat 23 Nov 2024 14:25:59 +0000
ROA not before:           Sat 23 Nov 2024 14:20:59 +0000
ROA not after:            Sat 22 Nov 2025 14:25:59 +0000
asID:                     271582
IP address blocks:        2804:7dc8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/4B29A9A89597A4D4F57700CCA0C13155971D9465.crl
                          rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/4B29A9A89597A4D4F57700CCA0C13155971D9465.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B29A9A89597A4D4F57700CCA0C13155971D9465.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:1e:7b:88:fd:6e:1d:7e:87:f4:34:1b:59:be:7c:0b:61:aa:c9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B29A9A89597A4D4F57700CCA0C13155971D9465
        Validity
            Not Before: Nov 23 14:20:59 2024 GMT
            Not After : Nov 22 14:25:59 2025 GMT
        Subject: CN=D2CCCD6B47369C7CC2BB3167B5B6D5EA7A14662D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c1:59:d1:80:3e:73:f9:c3:40:92:1d:8d:ee:
                    bc:e1:f7:48:f6:a3:1f:fa:a0:34:47:1f:ec:62:4d:
                    11:0f:78:43:3d:9f:f3:46:fc:66:a0:8c:30:ca:a0:
                    ec:33:2b:d1:30:0d:1f:b7:b7:51:25:95:a4:44:c5:
                    af:f6:8e:7e:6a:f7:1c:ac:fe:b5:a3:d9:0c:f7:e0:
                    8b:e7:53:cc:7f:5c:dd:69:ce:94:e3:1c:9b:bf:4e:
                    ba:f1:d1:39:04:07:db:ac:e8:a8:f6:a5:87:16:d3:
                    1b:79:de:f6:df:39:a3:07:70:03:98:b2:4d:94:5e:
                    3d:61:58:a3:2c:5f:6d:7f:dd:cf:cf:0e:07:e9:2b:
                    81:04:de:18:01:7d:c6:56:c9:83:55:5e:e7:d0:88:
                    0e:22:16:c2:a9:1d:d6:44:07:26:c8:6e:10:6e:5c:
                    74:e5:e2:33:f2:4e:12:2f:8f:18:c3:5c:bb:3f:1e:
                    88:b9:eb:e2:f3:fb:61:b0:6e:9e:86:a6:53:ea:3d:
                    6d:9a:0e:b3:75:66:e8:7f:bf:ed:21:c2:d2:c3:ce:
                    b2:1e:e2:7e:ac:d4:91:e8:55:8b:ab:a5:ef:59:7c:
                    68:e6:24:fb:4d:0c:c6:a2:69:91:64:a3:7c:b5:6d:
                    f5:c5:e4:fb:76:16:be:38:f9:32:5b:47:a7:be:0f:
                    90:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CC:CD:6B:47:36:9C:7C:C2:BB:31:67:B5:B6:D5:EA:7A:14:66:2D
            X509v3 Authority Key Identifier:
                keyid:4B:29:A9:A8:95:97:A4:D4:F5:77:00:CC:A0:C1:31:55:97:1D:94:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/4B29A9A89597A4D4F57700CCA0C13155971D9465.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B29A9A89597A4D4F57700CCA0C13155971D9465.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/323830343a376463383a3a2f33322d313238203d3e20323731353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7dc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:dd:35:cb:c8:80:b6:93:40:12:9a:0b:0f:8b:29:b9:43:92:
         e8:d4:6f:95:dc:62:b2:cd:47:01:00:49:3d:09:d6:b8:27:e2:
         d3:9e:51:23:a5:64:6d:12:bf:79:17:73:06:a3:bf:2e:f1:45:
         ac:2e:df:5f:d2:20:22:fb:9c:55:5d:9f:e1:20:0c:52:22:2e:
         c8:26:0b:70:4c:18:b0:ed:2a:f0:cc:8a:a5:40:ab:ab:f8:78:
         9e:99:e6:75:bf:0c:e0:a8:ad:3b:f5:51:0e:30:37:b7:51:7a:
         7a:83:2f:b9:ee:88:6c:eb:b4:af:eb:11:5f:6c:c7:60:ab:4c:
         16:08:80:b4:44:5d:61:0e:6e:d1:cd:ef:a7:5a:8f:c9:6f:99:
         54:fb:5c:ea:8b:0d:6c:4e:1b:69:13:ba:88:c6:0e:d1:28:84:
         f7:fc:fb:38:80:48:73:0b:7f:83:38:70:76:5a:fc:b3:5b:b5:
         86:f1:83:cd:8e:71:96:97:ae:d1:bd:8c:55:03:c2:78:61:d7:
         18:05:61:2f:57:fb:1d:d2:d1:a8:12:32:60:b8:83:79:e4:fd:
         ab:87:5a:35:2a:33:7f:48:2a:b5:60:ae:dd:cf:c8:db:94:a0:
         f5:d5:29:f1:e6:78:18:0e:63:f7:04:5e:8c:e4:a6:36:de:1a:
         30:42:24:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:03:01 2024 by rpki-client on console-fra.rpki-client.org