Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/323830343a316238303a3266653a3a2f34382d3438203d3e20323632393933.roa
File:                     323830343a316238303a3266653a3a2f34382d3438203d3e20323632393933.roa (raw, json)
Hash identifier:          mNBJRwEZQchpEJQ22aH+J3kADJor0zwoXg2QFIsfBTs=
Subject key identifier:   DC:8C:8A:CE:1E:CF:B0:F1:79:18:0F:BD:B8:5E:AC:1B:F9:D6:C4:83
Certificate issuer:       /CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
Certificate serial:       3552B4575E984E9A3485D7BBC184679718E49468
Authority key identifier: 21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/323830343a316238303a3266653a3a2f34382d3438203d3e20323632393933.roa
Signing time:             Wed 21 Aug 2024 12:06:09 +0000
ROA not before:           Wed 21 Aug 2024 12:01:09 +0000
ROA not after:            Wed 20 Aug 2025 12:06:09 +0000
asID:                     262993
IP address blocks:        2804:1b80:2fe::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl
                          rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:52:b4:57:5e:98:4e:9a:34:85:d7:bb:c1:84:67:97:18:e4:94:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
        Validity
            Not Before: Aug 21 12:01:09 2024 GMT
            Not After : Aug 20 12:06:09 2025 GMT
        Subject: CN=DC8C8ACE1ECFB0F179180FBDB85EAC1BF9D6C483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:76:f9:90:1d:70:90:85:cf:c5:90:37:c7:8b:
                    60:46:be:39:6f:37:c1:49:bb:75:7d:2f:c1:4d:a1:
                    1d:75:f4:cf:d5:97:1e:fc:d4:fa:af:0b:bb:0a:9d:
                    1f:40:22:b1:d7:3b:d7:a4:21:14:cd:9b:50:ac:c4:
                    e7:3a:f5:ab:4a:e5:ae:8f:0c:95:64:ed:a4:2b:2f:
                    6b:36:c6:67:a3:76:5b:c1:5e:ce:87:6c:ff:56:99:
                    60:d1:97:fb:63:6e:8b:d7:20:99:ad:34:5b:cb:cf:
                    cf:98:31:9a:31:6a:98:dd:84:5e:16:69:26:84:c6:
                    47:7c:42:e3:80:fd:c4:1f:8e:a0:d5:1f:79:f3:e8:
                    14:20:10:85:32:81:29:02:d0:e2:71:73:29:b2:1b:
                    3a:7c:14:7c:5f:0f:b6:07:29:9c:06:a4:b5:7f:cf:
                    8d:ec:65:83:58:27:9b:99:34:78:93:ac:f7:d1:91:
                    c5:5d:02:94:6b:2d:1b:01:b5:4a:ff:2c:ad:ac:59:
                    8c:02:e5:5d:ee:00:52:36:67:f6:62:70:88:3c:60:
                    82:42:2b:66:c2:1a:53:aa:61:d3:85:ba:5b:91:e2:
                    c3:c9:aa:f7:08:40:bb:a9:26:5e:aa:f1:10:ec:0a:
                    43:20:34:e8:8d:6f:f9:72:d8:e2:df:b1:dd:db:ac:
                    c5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8C:8A:CE:1E:CF:B0:F1:79:18:0F:BD:B8:5E:AC:1B:F9:D6:C4:83
            X509v3 Authority Key Identifier:
                keyid:21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/323830343a316238303a3266653a3a2f34382d3438203d3e20323632393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b80:2fe::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:c4:30:43:33:70:97:dd:79:bf:bb:34:fe:f7:ff:bf:41:24:
         b5:4e:a1:a4:a7:8e:eb:b0:ac:6f:81:ef:55:9a:ff:c2:17:6c:
         2f:b7:d2:14:13:b6:10:f7:23:8e:3a:26:50:70:3d:89:9f:d7:
         14:02:53:03:3e:fa:0f:70:49:44:86:6d:ec:2d:e2:99:02:4a:
         65:dd:ff:c8:c1:e5:b8:51:57:c3:3f:54:2c:b4:12:16:e0:cf:
         b1:25:99:38:01:88:79:b6:c9:a3:74:82:a5:c7:7a:1c:e6:a0:
         ad:a1:3b:84:52:a5:61:ab:a5:e7:e5:58:89:17:84:66:e2:fd:
         62:9d:e2:1d:f1:d4:00:ec:bb:ca:7f:ab:b3:18:ac:88:a2:79:
         0e:6c:e3:f6:eb:07:b4:2a:07:2c:63:e2:de:6d:fc:d5:a1:5b:
         61:26:2b:6d:3f:23:68:92:f1:26:a6:14:43:f6:36:7d:49:44:
         7b:18:55:b8:55:2f:7e:ab:08:63:c1:f4:42:da:05:dc:7a:19:
         d3:f2:00:3f:23:06:cf:b9:d9:f7:43:00:30:c6:27:8e:6b:4d:
         70:f9:a5:1b:37:09:c8:b8:4d:6f:04:9a:1b:d0:b9:6f:35:63:
         60:e6:93:c4:84:de:2b:84:b0:21:ee:dc:44:6a:f1:9f:49:9c:
         80:a3:92:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:59 2024 by rpki-client on console-fra.rpki-client.org