Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a3a2f33322d3332203d3e20323632333933.roa
File:                     323830343a3863383a3a2f33322d3332203d3e20323632333933.roa (raw, json)
Hash identifier:          AzCdzXIpklEwTwGlpS32kzw5h/MVe1xPZDQeXktmrcs=
Subject key identifier:   21:54:17:7E:9E:06:E8:99:CF:B8:D1:F1:3D:DB:28:4A:F8:09:80:9D
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       5175D48B5D44BCEE6914351137D07A3087FF006A
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a3a2f33322d3332203d3e20323632333933.roa
Signing time:             Sun 05 May 2024 21:40:37 +0000
ROA not before:           Sun 05 May 2024 21:35:37 +0000
ROA not after:            Sun 04 May 2025 21:40:37 +0000
asID:                     262393
IP address blocks:        2804:8c8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:46:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:75:d4:8b:5d:44:bc:ee:69:14:35:11:37:d0:7a:30:87:ff:00:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: May  5 21:35:37 2024 GMT
            Not After : May  4 21:40:37 2025 GMT
        Subject: CN=2154177E9E06E899CFB8D1F13DDB284AF809809D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bb:66:02:84:c2:20:87:ab:d5:e5:b1:57:9b:
                    70:82:c3:87:c0:be:fc:8f:48:01:96:df:6b:b6:d2:
                    f7:46:46:7a:9e:51:03:ba:96:4d:d6:ca:18:95:e4:
                    c6:70:1a:3a:5e:06:e0:cc:c7:7b:62:c8:a9:83:27:
                    46:64:97:89:73:67:dc:da:9f:6f:2f:fd:35:59:d9:
                    0a:11:b6:24:f5:ce:b8:5e:d1:d8:09:cc:77:69:78:
                    f8:3c:fb:d9:6c:03:dd:a5:38:b6:81:59:85:fb:c3:
                    22:fe:a7:ff:14:eb:f5:fe:98:95:23:d1:7d:db:c6:
                    6b:fb:94:6c:ae:67:9c:3c:8a:29:4f:9b:44:db:e5:
                    fe:00:69:1f:2e:9b:da:fa:25:91:03:cd:fe:73:5e:
                    9b:6b:4f:78:65:df:48:3c:3c:35:3f:da:84:01:8c:
                    7e:64:5e:2e:4c:27:60:09:ea:99:69:cb:9b:11:bf:
                    0f:8c:46:b1:32:2e:cd:c2:31:dc:fd:57:3f:90:a0:
                    a1:69:4e:09:f3:74:32:3d:3d:0b:da:9b:7e:0e:b1:
                    ae:4b:3f:17:76:ef:da:e8:f7:1b:ff:42:f7:47:99:
                    f4:00:cc:c2:2f:b9:1d:f5:a8:f9:84:d3:90:7d:91:
                    82:a5:e3:49:14:da:3f:19:e2:3a:78:24:f9:4c:ea:
                    be:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:54:17:7E:9E:06:E8:99:CF:B8:D1:F1:3D:DB:28:4A:F8:09:80:9D
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a3a2f33322d3332203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:ef:ad:05:09:21:9d:69:c9:bf:51:20:be:9c:f7:e4:7f:65:
         04:84:6e:6f:08:f6:2b:de:6a:6a:2f:25:3a:d8:38:5a:15:d8:
         e4:87:83:8d:26:26:5d:a5:02:cd:a7:43:d3:07:24:7e:53:bc:
         93:94:79:87:12:ff:5c:23:4f:ad:ef:75:c9:bb:9c:7d:47:6b:
         6a:bc:37:d2:58:c7:6a:43:a6:a9:72:cc:4e:c2:c1:f8:d9:3c:
         f2:79:c7:f2:ce:07:31:5e:8a:58:72:78:e4:72:1d:54:55:05:
         4e:23:b8:a2:d8:42:0f:98:5f:00:52:43:ba:85:e7:f1:17:f4:
         bc:2e:84:4e:ad:39:a4:93:7e:0d:14:2e:74:10:d6:e1:e8:b2:
         f7:2f:47:cc:97:aa:b2:43:2e:27:6a:f5:13:53:5a:77:5f:ce:
         31:2f:bc:89:e1:06:6a:7c:5c:fe:0c:25:85:9e:4e:bd:59:f2:
         2f:fc:86:cc:57:e7:9f:c9:32:95:97:7a:a6:31:e8:25:c3:98:
         59:47:14:0e:58:c2:28:18:c4:9b:5a:2c:00:76:ac:af:92:3d:
         6c:3a:9c:19:e6:ca:dc:d6:87:6b:b7:e1:ac:0f:28:68:a4:49:
         9d:74:f9:2e:35:32:7b:19:6c:ea:e6:37:2b:a8:eb:07:b9:6d:
         41:3f:fb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:17 2024 by rpki-client on console-ams.rpki-client.org