Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/323830343a376161343a3a2f33322d3332203d3e20323731333833.roa
File:                     323830343a376161343a3a2f33322d3332203d3e20323731333833.roa (raw, json)
Hash identifier:          N3uckESIqzgAe+wCEuU0Y/eK/w6UYWz2IfZXyGqXgr0=
Subject key identifier:   50:5E:6A:0B:0A:CA:E2:B9:D2:34:17:5B:1D:9B:B9:3F:70:9B:51:22
Certificate issuer:       /CN=23235F2B7FAE22B78438698FD00F49F07D286674
Certificate serial:       2C42440A53C7E363B3A10F44801A980408F983BE
Authority key identifier: 23:23:5F:2B:7F:AE:22:B7:84:38:69:8F:D0:0F:49:F0:7D:28:66:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23235F2B7FAE22B78438698FD00F49F07D286674.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/323830343a376161343a3a2f33322d3332203d3e20323731333833.roa
Signing time:             Mon 07 Oct 2024 18:38:01 +0000
ROA not before:           Mon 07 Oct 2024 18:33:01 +0000
ROA not after:            Mon 06 Oct 2025 18:38:01 +0000
asID:                     271383
IP address blocks:        2804:7aa4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/23235F2B7FAE22B78438698FD00F49F07D286674.crl
                          rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/23235F2B7FAE22B78438698FD00F49F07D286674.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23235F2B7FAE22B78438698FD00F49F07D286674.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:42:44:0a:53:c7:e3:63:b3:a1:0f:44:80:1a:98:04:08:f9:83:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23235F2B7FAE22B78438698FD00F49F07D286674
        Validity
            Not Before: Oct  7 18:33:01 2024 GMT
            Not After : Oct  6 18:38:01 2025 GMT
        Subject: CN=505E6A0B0ACAE2B9D234175B1D9BB93F709B5122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:5a:f6:25:a1:73:6d:dd:af:77:a0:29:d4:
                    8b:8a:ce:bd:8d:9b:41:00:33:49:c0:1a:6a:f9:1b:
                    08:b2:26:7b:39:95:ea:3c:e1:5e:13:cc:c0:09:eb:
                    02:b1:e8:ba:20:ae:0c:2a:5e:32:fe:6f:a6:15:43:
                    f3:ab:06:13:d4:72:8c:ba:bf:d7:ff:70:60:29:21:
                    c2:a5:e4:85:f5:f1:7f:10:d5:92:84:54:23:15:ad:
                    a9:58:11:df:30:de:56:6b:5c:ed:06:b1:26:bc:08:
                    7f:c5:8f:06:e8:33:2b:f2:7c:ab:ba:7e:8e:03:b1:
                    72:c0:1e:fc:9d:bc:c1:86:14:50:de:be:98:d6:c4:
                    44:75:f3:cb:f7:81:d8:e4:f7:dd:48:8e:e5:6b:9a:
                    3a:d7:54:f6:21:33:c6:5d:10:c8:e0:06:12:30:ac:
                    25:f6:fc:4a:e5:c2:ec:12:a7:e8:7f:24:c3:1f:0d:
                    0d:1c:1b:9d:c0:5e:7a:46:bb:9a:43:d0:61:0d:51:
                    8b:99:f1:99:f1:e8:a7:81:2e:3a:2e:e5:4e:39:bd:
                    ab:56:17:4f:8f:dc:99:87:44:7c:e0:54:ea:e1:44:
                    64:47:ea:ec:6a:88:81:06:21:83:ac:17:62:db:ec:
                    44:c1:29:12:c5:10:05:a7:1b:c9:61:66:28:b4:81:
                    bb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5E:6A:0B:0A:CA:E2:B9:D2:34:17:5B:1D:9B:B9:3F:70:9B:51:22
            X509v3 Authority Key Identifier:
                keyid:23:23:5F:2B:7F:AE:22:B7:84:38:69:8F:D0:0F:49:F0:7D:28:66:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/23235F2B7FAE22B78438698FD00F49F07D286674.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23235F2B7FAE22B78438698FD00F49F07D286674.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/323830343a376161343a3a2f33322d3332203d3e20323731333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7aa4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:0a:18:d1:82:1c:72:6a:de:d1:a1:3f:4d:4b:b3:2a:53:e4:
         27:c9:ee:66:03:16:ed:dc:de:3d:7e:2f:97:20:3b:97:b9:64:
         ec:d2:a4:d7:bc:c3:d1:c4:1b:9e:76:0a:8b:d9:f2:07:4f:46:
         5e:f0:ba:47:5a:b3:71:b2:22:31:f2:41:e4:ea:03:c9:86:69:
         1d:73:66:ec:c5:60:b9:29:e3:9a:71:10:e8:47:62:2d:64:1b:
         f7:37:1f:a6:2b:f4:c4:89:91:f9:27:a0:7c:7c:2f:24:c3:4d:
         9c:54:9e:36:11:1a:86:19:81:d6:10:b3:47:12:8d:88:c1:aa:
         05:72:2a:5a:3f:02:12:7b:00:41:0f:13:3d:91:de:aa:06:24:
         d4:49:dd:6a:f7:a4:e6:3f:4c:7a:9b:ad:e0:ac:94:43:07:64:
         60:7c:56:97:c0:49:59:5d:c6:cf:44:15:aa:a9:78:b0:44:e0:
         9c:6c:dd:16:ad:40:85:b1:a4:ad:75:af:90:c5:d2:37:a8:ff:
         48:21:98:86:b8:64:7a:3e:02:78:d4:84:d8:2b:91:99:7c:19:
         59:5a:c5:e0:83:c1:c4:a9:7c:6e:a6:c2:d1:8d:cf:b8:fc:ef:
         3a:5c:ef:83:12:19:6c:72:ca:e2:a4:fd:1c:39:46:db:a9:42:
         4c:0e:b8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:29:57 2024 by rpki-client on console-fra.rpki-client.org