Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a336662633a3230303a3a2f34302d3430203d3e20323635393131.roa
File:                     323830343a336662633a3230303a3a2f34302d3430203d3e20323635393131.roa (raw, json)
Hash identifier:          l3GENLtk4ODbaYlHCt2JIdfRKl1qDQehJ8dCXmrFS90=
Subject key identifier:   B1:89:F1:F8:25:6D:66:08:54:84:64:B4:E8:15:26:F5:26:19:90:EE
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       032308F87F92E86BEE898B9F840D2B1EB4169000
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a336662633a3230303a3a2f34302d3430203d3e20323635393131.roa
Signing time:             Fri 12 Jul 2024 19:53:09 +0000
ROA not before:           Fri 12 Jul 2024 19:48:09 +0000
ROA not after:            Fri 11 Jul 2025 19:53:09 +0000
asID:                     265911
IP address blocks:        2804:3fbc:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:23:08:f8:7f:92:e8:6b:ee:89:8b:9f:84:0d:2b:1e:b4:16:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Jul 12 19:48:09 2024 GMT
            Not After : Jul 11 19:53:09 2025 GMT
        Subject: CN=B189F1F8256D6608548464B4E81526F5261990EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1a:43:5e:ad:29:15:12:24:84:ca:04:ac:47:
                    29:ba:bf:86:de:c2:04:23:2b:96:76:95:49:fb:a7:
                    ff:37:d7:a2:a7:e6:3f:17:6c:e6:e3:fa:86:c9:10:
                    fc:f0:8b:c8:b1:cf:33:01:29:e2:4f:66:09:2c:b4:
                    f2:4e:9d:da:b5:58:dc:7d:5c:00:73:3a:81:23:30:
                    c4:38:17:a8:ce:bc:05:a1:24:81:8f:f9:15:2c:1f:
                    74:e5:4c:9f:88:55:9a:68:da:63:fa:bd:39:ec:bf:
                    55:3e:f5:77:15:26:a7:69:1e:05:a6:c4:4a:99:b9:
                    2c:15:dd:c8:01:f5:e5:74:26:46:2f:ae:54:db:95:
                    0c:70:58:55:08:39:c2:02:34:3d:3d:47:0c:f9:4c:
                    b4:91:ed:46:6d:d6:4c:ff:aa:60:3e:8d:e2:ca:b9:
                    fc:e4:3d:66:e1:cc:2c:62:d5:c3:44:07:f1:db:a6:
                    b0:4f:70:62:3b:f8:25:17:89:1b:ac:52:dc:ba:44:
                    34:5e:b7:b5:8c:70:d3:ee:ee:5e:4f:d5:ce:3b:6f:
                    63:ea:0a:39:12:f9:ef:cc:4c:e3:90:24:5b:1a:6d:
                    5c:6b:5b:ab:a5:a5:20:10:d8:2d:71:4d:a3:47:15:
                    d5:49:d9:44:32:80:92:1c:a2:5e:13:6f:32:66:51:
                    07:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:89:F1:F8:25:6D:66:08:54:84:64:B4:E8:15:26:F5:26:19:90:EE
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a336662633a3230303a3a2f34302d3430203d3e20323635393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fbc:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:37:d1:2d:a8:17:56:aa:f1:ca:2e:0d:76:47:6e:ae:f6:4b:
         66:ce:8a:49:92:04:43:39:f8:5e:57:7e:37:2a:47:77:e8:28:
         a2:40:53:dc:0c:45:e5:57:29:1c:16:a7:5e:1e:65:fa:e6:cd:
         e7:b7:c7:cd:5d:39:93:54:14:70:40:99:c0:2c:dd:ee:49:2a:
         a4:b0:e9:4c:a0:ec:73:b4:f8:40:dc:4f:37:20:b3:6c:3a:26:
         a7:f6:a3:b3:2f:74:90:de:73:47:80:a6:15:7e:59:b9:a1:2d:
         48:09:e0:57:b4:d5:77:87:ab:25:2c:ae:0d:58:46:90:b4:a9:
         88:02:46:fa:79:cf:f9:bf:e6:a5:3e:42:24:35:6f:1f:85:95:
         c7:02:f6:85:ac:56:cd:a5:f9:3c:e7:d9:6c:85:3c:0b:45:9c:
         b5:ab:33:bc:04:1a:3c:8a:37:05:dd:ce:c5:71:26:f4:51:bd:
         37:76:f2:fb:67:a3:95:e7:75:bc:0e:1a:f2:92:18:05:2b:74:
         68:fd:6e:ef:0f:81:7c:fa:20:f6:14:ea:17:a0:4a:e0:70:26:
         8d:e9:c9:ff:de:27:77:f3:4e:26:52:17:39:fb:46:2f:bd:a4:
         3c:d0:e3:90:04:06:53:f0:c5:d5:93:00:02:f2:f8:09:94:dd:
         8b:cc:8f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:12:24 2024 by rpki-client on console-ams.rpki-client.org