Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a633030303a3a2f33352d3335203d3e20323632333933.roa
File:                     323830343a3863383a633030303a3a2f33352d3335203d3e20323632333933.roa (raw, json)
Hash identifier:          /7/LweHlZcX3HV3JTihMEw42lxAz9XmFl/Nz3CWkLds=
Subject key identifier:   29:40:E1:29:3D:FA:BF:40:02:01:A0:C6:D6:CB:B9:F0:74:A5:8A:B6
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       7F8CDAFE553219EAD358B7A792E1B10CB460319B
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a633030303a3a2f33352d3335203d3e20323632333933.roa
Signing time:             Sun 05 May 2024 21:40:36 +0000
ROA not before:           Sun 05 May 2024 21:35:36 +0000
ROA not after:            Sun 04 May 2025 21:40:36 +0000
asID:                     262393
IP address blocks:        2804:8c8:c000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:46:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8c:da:fe:55:32:19:ea:d3:58:b7:a7:92:e1:b1:0c:b4:60:31:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: May  5 21:35:36 2024 GMT
            Not After : May  4 21:40:36 2025 GMT
        Subject: CN=2940E1293DFABF400201A0C6D6CBB9F074A58AB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:67:dd:fd:da:15:50:64:9e:5f:60:d2:3c:21:
                    21:cb:d3:0e:e6:7a:4d:ef:e8:4d:54:16:a5:82:59:
                    ca:ab:5b:21:a9:89:51:e9:74:ee:d2:ac:0a:cc:ba:
                    2c:c7:b6:bb:57:67:e9:11:23:56:b3:8d:fc:b8:c0:
                    c3:7a:45:69:05:67:fb:0f:e4:e3:13:82:78:2a:66:
                    f8:90:7f:e9:bf:98:95:f3:37:29:e1:59:7a:44:79:
                    ca:d2:8d:6a:87:dd:bf:73:8f:8f:85:af:c3:78:89:
                    7c:90:f2:96:42:9e:91:62:b9:36:81:7d:24:ca:9d:
                    38:ec:46:dd:2c:74:43:8e:19:d3:78:ca:de:82:09:
                    f9:ba:02:f0:a4:60:0f:1e:d4:41:1d:2f:a6:4c:a3:
                    11:89:59:d7:8d:cd:75:d1:27:e7:6c:09:fc:52:5b:
                    df:b0:5d:d8:2b:49:69:18:4a:1d:08:68:6d:78:d6:
                    fd:d4:26:e5:1f:ac:77:e8:17:00:40:ce:69:1a:27:
                    e6:82:31:3f:9d:5b:c1:20:e7:8d:38:a8:50:00:29:
                    83:ec:18:da:53:a2:5e:5b:a8:1b:92:fd:2d:ae:d6:
                    ff:35:29:db:e0:bf:9e:9d:d4:a6:29:61:aa:c3:99:
                    61:36:37:87:e6:63:0f:97:13:66:e4:42:26:d1:76:
                    ac:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:40:E1:29:3D:FA:BF:40:02:01:A0:C6:D6:CB:B9:F0:74:A5:8A:B6
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a633030303a3a2f33352d3335203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c8:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         23:ac:48:5f:4d:28:d0:1d:05:fc:af:0c:e0:67:37:38:b5:75:
         ca:20:f2:8f:27:e8:9b:62:f0:2a:c4:73:ab:e3:c6:d4:0c:a2:
         f1:55:4f:1d:e8:8b:2f:d4:a2:d8:69:e7:65:bd:ba:42:a0:57:
         1f:ad:78:2e:57:4d:88:ee:a1:55:df:e6:9a:e6:be:e7:92:1c:
         4a:7d:3a:93:90:a3:91:de:31:9d:9c:0c:f9:f0:28:c6:03:2f:
         31:60:4d:dc:01:32:ea:7e:84:e6:60:17:df:cf:1a:04:1c:72:
         3b:44:ec:8c:ca:bf:b7:82:c1:9d:47:df:8c:e0:d0:be:a8:de:
         63:08:f7:ce:29:d9:4b:2c:e8:fa:24:b3:a4:bd:74:29:aa:ea:
         4b:e8:80:0d:5c:e5:11:72:0e:c1:35:e4:d5:25:03:f8:d5:cc:
         84:42:17:68:20:f4:7e:38:d7:68:7f:66:68:3b:1e:04:6e:51:
         6d:9b:de:02:2b:3e:d2:3e:c1:e5:21:80:50:d4:41:31:34:2c:
         c5:74:b5:64:4c:cd:bf:46:f2:04:e7:eb:91:63:c5:bd:fe:8a:
         ee:f6:49:75:c3:ff:47:22:d6:97:ca:cb:44:d6:9d:91:9d:4b:
         6d:ad:60:4c:71:14:fa:ff:ce:15:d8:3a:3a:39:69:74:84:4b:
         4f:39:81:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:17 2024 by rpki-client on console-ams.rpki-client.org