Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/323830343a343861343a3a2f33332d3333203d3e20323637313335.roa
File:                     323830343a343861343a3a2f33332d3333203d3e20323637313335.roa (raw, json)
Hash identifier:          dUnuuGq9J3MHbPvtEEC8db5ekMIbqCyz4vaB/iox+rg=
Subject key identifier:   E5:32:BD:60:22:C5:57:86:56:12:17:3D:80:97:57:14:7E:D7:C5:72
Certificate issuer:       /CN=8ABB79087ACA27A21985F6F05B9103D446BB65F4
Certificate serial:       1E79D72A08B61A60EF729B50CBF5ED129F47B985
Authority key identifier: 8A:BB:79:08:7A:CA:27:A2:19:85:F6:F0:5B:91:03:D4:46:BB:65:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/323830343a343861343a3a2f33332d3333203d3e20323637313335.roa
Signing time:             Tue 26 Nov 2024 17:22:55 +0000
ROA not before:           Tue 26 Nov 2024 17:17:55 +0000
ROA not after:            Tue 25 Nov 2025 17:22:55 +0000
asID:                     267135
IP address blocks:        2804:48a4::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.crl
                          rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 19:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:79:d7:2a:08:b6:1a:60:ef:72:9b:50:cb:f5:ed:12:9f:47:b9:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABB79087ACA27A21985F6F05B9103D446BB65F4
        Validity
            Not Before: Nov 26 17:17:55 2024 GMT
            Not After : Nov 25 17:22:55 2025 GMT
        Subject: CN=E532BD6022C557865612173D809757147ED7C572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:cd:8d:c4:f5:57:b6:6a:e2:f4:cf:61:9c:
                    58:b6:63:ce:a3:0d:b3:01:f4:c9:99:9d:a4:08:06:
                    c2:8a:4a:fa:e7:c4:cc:ed:70:65:7e:f8:b2:dc:75:
                    2d:1e:72:3f:ec:bc:b0:a5:9a:20:aa:ce:9c:2c:1f:
                    f6:fc:75:37:59:aa:92:a7:ef:4e:a3:bc:24:eb:75:
                    66:78:bc:54:9b:de:c4:1a:46:14:d9:cc:26:51:55:
                    75:2e:ab:21:64:61:fc:87:c3:5c:e2:7c:2a:1e:e6:
                    ac:d0:cf:19:ce:2b:f3:7d:cc:f7:e8:02:72:3a:e4:
                    7b:5e:20:2b:68:fd:80:92:28:2d:63:6e:0d:4d:cf:
                    06:3f:cb:ea:6f:19:c5:ea:3c:1f:54:98:16:ec:01:
                    1b:83:c5:ef:13:94:33:b3:67:78:2e:b4:4a:23:d6:
                    d3:6b:08:24:1c:7f:93:44:cf:5d:49:36:85:cb:6a:
                    23:52:fd:79:ac:bf:02:9d:9b:7b:08:3f:f6:50:c2:
                    9f:6d:e5:9c:11:56:f3:ec:e2:0d:46:35:97:9e:4f:
                    8c:13:c9:0c:35:5d:ff:68:79:37:df:c0:b5:d9:68:
                    c2:12:2a:bd:82:5c:65:bc:bb:51:54:68:d6:49:65:
                    70:c2:b3:0a:ff:27:cb:6e:56:7a:ac:64:21:a5:71:
                    15:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:32:BD:60:22:C5:57:86:56:12:17:3D:80:97:57:14:7E:D7:C5:72
            X509v3 Authority Key Identifier:
                keyid:8A:BB:79:08:7A:CA:27:A2:19:85:F6:F0:5B:91:03:D4:46:BB:65:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/323830343a343861343a3a2f33332d3333203d3e20323637313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48a4::/33

    Signature Algorithm: sha256WithRSAEncryption
         80:96:6c:46:a3:f7:e0:fc:25:a0:4d:11:13:ba:6c:0b:78:51:
         d2:11:0a:24:3c:9e:28:70:c4:c1:77:02:50:eb:cd:22:e5:84:
         5f:9f:ea:ad:6f:f9:6f:4c:d4:58:92:00:a7:96:1a:c4:c1:d2:
         2f:93:86:36:a4:9c:f0:2c:13:09:c8:51:cf:8c:f4:a3:ef:1e:
         f5:1c:0f:81:06:fd:d2:7e:db:ad:4a:9b:08:07:6b:3b:7b:3c:
         9a:7a:be:fc:e4:8a:8c:57:13:38:46:56:57:aa:9a:89:57:2c:
         99:51:d3:67:72:35:9e:ad:9f:b1:82:f6:ba:87:1c:9d:07:8b:
         b6:3f:b1:00:53:a6:39:a7:87:ab:21:00:38:7d:52:a4:1d:a6:
         ab:a6:01:8b:d9:c1:e6:08:b9:7c:f7:3a:b3:7c:7a:24:8c:98:
         cf:9d:d0:f2:8e:f7:1e:9f:7a:33:88:5e:e7:bd:b1:2f:67:a4:
         3c:73:33:29:5f:2b:a7:a0:b3:1e:c0:4f:a8:60:c2:01:e5:8d:
         3c:d0:a2:6b:31:c4:84:c4:13:e9:4c:0f:bf:0c:3f:77:08:32:
         87:a5:9b:c0:85:01:68:c3:3e:ad:f9:02:b3:95:73:66:ca:31:
         2f:1e:03:9e:73:81:8e:e5:a8:34:fd:1d:b6:31:e3:f2:c3:4d:
         97:bd:88:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:05:49 2024 by rpki-client on console-fra.rpki-client.org