Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a383030303a3a2f33352d3335203d3e20323632333933.roa
File:                     323830343a3863383a383030303a3a2f33352d3335203d3e20323632333933.roa (raw, json)
Hash identifier:          Lxda8hxJBtAIaKtnoYyuE5n4YWQz9vjwiiDeu5E2boE=
Subject key identifier:   31:FD:9A:41:74:D2:46:56:FD:D5:BD:8A:EC:4B:5D:14:C7:55:6B:1E
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       0AE073AC6C280D2AD6FBB675AEEC640FF720759C
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a383030303a3a2f33352d3335203d3e20323632333933.roa
Signing time:             Sun 05 May 2024 21:40:38 +0000
ROA not before:           Sun 05 May 2024 21:35:38 +0000
ROA not after:            Sun 04 May 2025 21:40:38 +0000
asID:                     262393
IP address blocks:        2804:8c8:8000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:38:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e0:73:ac:6c:28:0d:2a:d6:fb:b6:75:ae:ec:64:0f:f7:20:75:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: May  5 21:35:38 2024 GMT
            Not After : May  4 21:40:38 2025 GMT
        Subject: CN=31FD9A4174D24656FDD5BD8AEC4B5D14C7556B1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:20:8a:31:b7:60:d7:54:75:b0:c7:40:8f:88:
                    97:1f:87:97:0d:3b:f5:1b:14:27:c5:63:a6:31:d0:
                    52:f4:46:31:02:d1:d3:a6:58:fa:e9:a4:3d:9b:bd:
                    2d:d1:7c:68:ce:61:da:08:ea:22:b1:28:32:f6:60:
                    99:de:d3:54:c5:9f:1a:95:1a:4a:8a:f7:dd:25:92:
                    b1:f5:cc:cd:a2:8b:d9:34:92:47:2e:68:2d:7b:2e:
                    19:6a:f7:f1:c0:57:93:93:80:d2:d3:0f:8f:fa:18:
                    61:11:fb:2d:fa:1f:34:91:08:13:f9:89:f3:fc:33:
                    87:75:34:b4:c3:72:68:87:64:b8:3a:fe:27:cc:60:
                    69:81:08:d0:b9:9f:36:cd:de:1b:cf:b9:ed:a9:7d:
                    6c:bb:0e:21:8c:45:f4:c1:e5:41:77:a5:af:19:ba:
                    bc:52:6c:98:0a:0c:bd:a1:b1:ac:f7:c7:df:35:ec:
                    f7:3e:02:53:2e:5c:f9:18:6e:28:23:e1:1f:2f:cc:
                    42:af:51:7c:cd:ce:3e:82:90:de:d9:51:d1:5b:0e:
                    aa:3a:db:4a:1d:f5:9c:27:0e:91:7f:61:f0:1c:73:
                    98:a9:b9:bc:74:7a:3e:52:a2:8a:12:a6:35:4b:eb:
                    24:3f:58:8f:8f:4d:fb:cd:e0:3f:25:af:b2:49:da:
                    6e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FD:9A:41:74:D2:46:56:FD:D5:BD:8A:EC:4B:5D:14:C7:55:6B:1E
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a383030303a3a2f33352d3335203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c8:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         83:d7:96:bd:e8:e3:ab:ae:d0:94:3e:19:7f:80:fb:27:28:1b:
         26:3f:a6:e9:ad:21:46:18:a8:ac:e4:01:00:71:16:de:54:36:
         86:61:01:8c:44:5f:33:cd:64:b9:0c:30:86:9b:6a:42:cf:43:
         28:e1:89:16:ed:fd:ff:ef:08:f4:53:42:23:e3:8c:4c:df:08:
         d3:25:92:ff:77:d1:67:20:8e:da:d7:a9:a4:67:f8:86:73:d3:
         b1:25:e5:ef:de:96:24:8d:3f:bb:88:58:1f:f7:ff:ae:b5:24:
         4e:c5:c8:2b:d9:09:d6:39:c6:62:8d:15:fc:ac:d8:af:8f:3e:
         67:f1:79:dd:96:be:1f:bd:f0:c8:f9:e3:bf:b4:0e:a5:f5:5f:
         ef:b2:9a:76:df:5a:90:f3:4d:e6:7a:82:88:d2:e5:ff:71:1f:
         9b:fb:e9:5f:89:21:07:55:e2:6b:05:9f:24:71:a7:2e:a1:fa:
         5f:17:a4:fa:2b:14:38:34:49:53:7a:23:78:ea:29:c7:62:cd:
         f3:ae:b4:14:87:08:54:f9:14:2d:7b:4e:2a:88:24:c6:c0:c3:
         64:44:ad:09:e9:6f:44:d1:b6:b8:88:b7:73:89:62:6d:8c:ae:
         94:4e:b7:af:f4:1c:cf:bd:91:f8:9b:ad:80:4d:46:ff:0e:3b:
         ed:a1:35:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:39 2024 by rpki-client on console-fra.rpki-client.org