Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a613030303a3a2f33352d3335203d3e20323632333933.roa
File:                     323830343a3863383a613030303a3a2f33352d3335203d3e20323632333933.roa (raw, json)
Hash identifier:          R6KNBVX//P8/0slaW3/zjOM8oUGZoABt3hJcU/6G9SU=
Subject key identifier:   9F:15:D0:E5:C5:50:CC:5E:49:0D:5A:D1:6B:1F:DD:B5:EF:ED:60:D8
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       41DFEBAA16AEE5545DCC493E226B8DD8C30D73FF
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a613030303a3a2f33352d3335203d3e20323632333933.roa
Signing time:             Sun 05 May 2024 21:40:38 +0000
ROA not before:           Sun 05 May 2024 21:35:38 +0000
ROA not after:            Sun 04 May 2025 21:40:38 +0000
asID:                     262393
IP address blocks:        2804:8c8:a000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:38:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:df:eb:aa:16:ae:e5:54:5d:cc:49:3e:22:6b:8d:d8:c3:0d:73:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: May  5 21:35:38 2024 GMT
            Not After : May  4 21:40:38 2025 GMT
        Subject: CN=9F15D0E5C550CC5E490D5AD16B1FDDB5EFED60D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:eb:16:df:f7:e7:16:ed:56:95:49:d3:4c:0c:
                    1e:f2:21:a1:16:36:dd:5a:df:a2:63:de:a2:fc:f7:
                    63:e2:3e:dd:12:c6:9a:6a:8d:e7:d9:23:e7:15:54:
                    60:e6:a6:85:b4:dd:61:3d:38:35:e5:c2:52:1c:4e:
                    58:fc:46:77:fb:43:ee:43:2f:18:50:6a:6a:f2:26:
                    7e:81:39:26:b7:00:cf:61:75:13:dd:9a:0a:ff:78:
                    f2:04:98:38:a2:01:d3:93:06:5f:8e:0e:ef:d1:02:
                    da:51:bf:b8:5d:40:2a:a9:9a:fa:6c:54:50:3e:0a:
                    fc:6c:62:5f:92:d5:2d:ee:8e:6a:f1:35:af:51:30:
                    c2:98:75:58:86:cf:6d:e9:bc:a1:27:d1:b8:ba:f6:
                    0c:92:da:e3:48:1f:a2:10:02:d4:3e:0e:88:61:7b:
                    c4:42:47:1f:b0:41:c1:bc:5e:8d:76:c6:f7:d0:a3:
                    46:c3:a6:30:26:bb:97:d6:de:c5:6a:b1:ed:f4:99:
                    eb:f0:4e:55:41:13:3a:1e:94:a8:4a:f6:66:c0:d7:
                    44:ca:ce:cb:8a:92:91:03:a1:9e:44:5c:60:1b:64:
                    32:54:42:7f:3f:1f:e3:53:f4:75:08:72:c9:26:2b:
                    87:95:7b:65:c1:24:1f:93:4c:d7:e0:77:ab:6f:e8:
                    51:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:15:D0:E5:C5:50:CC:5E:49:0D:5A:D1:6B:1F:DD:B5:EF:ED:60:D8
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a613030303a3a2f33352d3335203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c8:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         07:0c:e9:53:e6:00:3f:b3:43:fa:06:ab:33:30:82:5b:5f:76:
         a2:ba:19:8c:65:90:1c:4a:b9:b5:d8:0a:fc:b7:c5:03:79:13:
         0e:7e:43:82:d2:2c:36:6d:65:44:34:62:55:80:b3:af:97:85:
         ee:86:b4:4b:89:8c:a7:42:e2:61:88:75:f7:3d:39:63:d7:ac:
         8a:04:5a:f9:98:94:70:18:65:4b:11:a6:b5:27:c1:46:07:a5:
         87:e1:32:ac:b2:23:4f:c3:df:9d:62:ee:bd:35:8c:8a:04:46:
         cd:8f:f0:96:c5:29:78:e8:f4:16:99:7c:e3:d3:a1:8f:12:98:
         5d:bb:75:9b:12:37:57:e0:ec:b3:39:5e:69:15:17:77:10:9f:
         2e:02:c9:9d:3c:3d:ca:15:0d:86:03:27:28:30:d3:dc:a9:ce:
         94:3a:3c:8f:6d:3b:0c:6c:75:a2:2d:96:52:52:75:ef:1e:45:
         2d:f4:34:a0:86:8f:79:f1:8d:02:23:98:30:61:a1:b5:4b:1c:
         be:85:71:02:b6:c2:40:46:e9:fd:32:f3:26:17:ef:cb:a2:7c:
         ae:98:7a:8a:90:22:6a:cd:d8:80:a1:b1:f4:f4:1d:d5:51:ab:
         95:b7:58:b8:a8:5a:74:6e:7f:d6:f6:ec:e8:cd:98:c3:d2:f3:
         e8:fd:da:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:37 2024 by rpki-client on console-ams.rpki-client.org