Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a3a2f33322d3336203d3e20323632373635.roa
File:                     323830343a316466633a3a2f33322d3336203d3e20323632373635.roa (raw, json)
Hash identifier:          evGGkb9ay3yU5BzC84sTRtSTwyzCQw9+g++1JfZh7PI=
Subject key identifier:   8A:53:F7:F7:C7:36:0C:B5:E3:6B:FD:C6:38:95:52:B8:BD:36:A1:49
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       6F7D054BC0680BBAFC09AFF768ECB583281DAF63
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a3a2f33322d3336203d3e20323632373635.roa
Signing time:             Fri 01 Nov 2024 13:09:59 +0000
ROA not before:           Fri 01 Nov 2024 13:04:59 +0000
ROA not after:            Fri 31 Oct 2025 13:09:59 +0000
asID:                     262765
IP address blocks:        2804:1dfc::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl
                          rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:7d:05:4b:c0:68:0b:ba:fc:09:af:f7:68:ec:b5:83:28:1d:af:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Nov  1 13:04:59 2024 GMT
            Not After : Oct 31 13:09:59 2025 GMT
        Subject: CN=8A53F7F7C7360CB5E36BFDC6389552B8BD36A149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e1:ba:87:48:48:4c:e5:69:54:d5:1b:ee:de:
                    1f:06:3c:4d:6b:93:0b:9a:84:86:72:73:bf:74:6e:
                    b1:8f:fc:c1:ac:1c:27:3c:1d:b9:a0:16:f1:10:b4:
                    2c:11:ca:df:5d:21:9c:a1:00:ac:f6:4b:ae:a5:55:
                    41:a7:b3:83:fe:5f:ce:da:59:00:4c:7e:ac:06:e6:
                    d9:b8:a1:25:70:af:cf:3d:2f:2f:de:dc:62:11:c5:
                    8f:b6:14:89:99:fe:99:8e:b6:40:8e:65:e5:bd:5d:
                    f0:6b:ac:88:37:62:f7:71:9d:fa:e1:eb:a1:10:7e:
                    b3:b6:39:ed:ec:1d:1b:47:7f:9d:7f:00:41:a1:45:
                    a1:87:e4:ee:8f:cd:de:26:c5:e5:54:ac:46:47:9f:
                    ac:9b:dc:cc:dc:d4:93:e8:a2:ca:ed:ab:b7:85:ec:
                    95:48:15:0b:d3:f5:45:c4:10:4e:55:7a:31:f7:d5:
                    33:0d:45:6a:62:8a:94:8f:4a:87:99:ba:2a:ab:cd:
                    97:f4:c5:97:87:a3:3c:66:26:bf:ff:de:01:99:3e:
                    0f:48:4f:45:1c:61:7b:3b:9f:04:ac:7e:63:60:29:
                    08:01:9f:21:38:e2:fe:48:80:62:91:f3:f3:59:a5:
                    de:a5:70:ee:a1:5c:e7:35:db:9f:4f:0c:7f:a4:1f:
                    1a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:53:F7:F7:C7:36:0C:B5:E3:6B:FD:C6:38:95:52:B8:BD:36:A1:49
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a3a2f33322d3336203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:e2:72:77:e3:bc:d1:a0:ae:89:c0:05:bc:7e:ae:55:52:c5:
         9a:fb:c6:b3:91:bb:5f:b1:18:ab:9e:25:7e:02:1d:79:23:cf:
         bf:8a:75:2b:e2:85:84:0e:b6:2d:ac:24:3f:6c:51:55:68:7e:
         be:70:b2:fc:11:b8:e7:62:ec:5f:9f:38:7f:f7:ff:4b:ee:d8:
         cd:e0:6a:05:ce:fe:97:67:50:ab:96:da:f5:5b:86:42:09:12:
         b8:43:ad:e5:19:60:90:f0:fd:75:db:f5:e4:a0:0e:6c:67:a0:
         20:d7:18:6d:b5:a4:7a:47:c7:de:52:6e:b7:a7:40:30:0a:0d:
         b1:ca:73:dd:63:04:03:67:95:1d:a1:ac:6b:61:82:2c:f8:39:
         89:85:ca:5e:0e:9a:dd:9a:ad:73:6f:93:c4:5d:a8:b2:2c:99:
         15:1b:d6:50:88:99:6b:2a:83:81:be:9a:3a:e8:a6:7a:90:ba:
         ee:3e:5f:87:fa:8f:28:1a:28:c2:78:d8:ea:ca:0c:8a:c9:28:
         04:66:a4:3f:e7:c3:de:1f:be:3c:ae:3e:27:5c:36:0d:fd:e8:
         fe:b1:06:33:49:e1:72:0e:af:d2:ca:ae:ce:0c:38:6d:4e:f1:
         c4:87:c9:b5:d0:38:7f:d8:04:a7:3e:2e:fc:07:cf:17:14:38:
         79:b7:12:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:48 2024 by rpki-client on console-ams.rpki-client.org