Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/323830343a313234633a3a2f33322d3438203d3e20323633343638.roa
File:                     323830343a313234633a3a2f33322d3438203d3e20323633343638.roa (raw, json)
Hash identifier:          nZ5KuAXZg2aWGCFw9ya1/qGdHPxbUavRBBQNOwd9rfc=
Subject key identifier:   9F:C5:46:DE:80:4F:7A:DC:9E:85:26:23:00:42:E2:F0:9D:E6:8C:07
Certificate issuer:       /CN=202A215BC63DBE2780EE0F38F4AF642154D4DDD6
Certificate serial:       08602E121AC8AC4A4238FB4EBF47A0458573F0A8
Authority key identifier: 20:2A:21:5B:C6:3D:BE:27:80:EE:0F:38:F4:AF:64:21:54:D4:DD:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202A215BC63DBE2780EE0F38F4AF642154D4DDD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/323830343a313234633a3a2f33322d3438203d3e20323633343638.roa
Signing time:             Mon 25 Nov 2024 17:34:04 +0000
ROA not before:           Mon 25 Nov 2024 17:29:04 +0000
ROA not after:            Mon 24 Nov 2025 17:34:04 +0000
asID:                     263468
IP address blocks:        2804:124c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/202A215BC63DBE2780EE0F38F4AF642154D4DDD6.crl
                          rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/202A215BC63DBE2780EE0F38F4AF642154D4DDD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202A215BC63DBE2780EE0F38F4AF642154D4DDD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:60:2e:12:1a:c8:ac:4a:42:38:fb:4e:bf:47:a0:45:85:73:f0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202A215BC63DBE2780EE0F38F4AF642154D4DDD6
        Validity
            Not Before: Nov 25 17:29:04 2024 GMT
            Not After : Nov 24 17:34:04 2025 GMT
        Subject: CN=9FC546DE804F7ADC9E8526230042E2F09DE68C07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2b:a8:57:f8:6f:86:8e:cb:0f:a9:2f:f5:e1:
                    96:b0:44:39:b9:fd:bd:f4:3e:94:6f:be:5f:74:f1:
                    e7:61:76:34:ff:f9:55:bc:1a:2f:90:94:49:f7:6f:
                    da:10:11:a7:2f:b4:f1:f4:76:59:31:76:1d:56:e8:
                    79:b8:01:4c:78:60:97:87:92:29:29:02:9f:62:96:
                    6c:aa:43:c3:c0:54:eb:62:9e:39:e0:2e:a2:1b:76:
                    e0:e4:a0:67:02:28:ac:53:72:9c:47:16:a5:37:65:
                    18:8c:db:2f:7b:fd:fc:bf:65:42:a1:71:58:4a:ee:
                    bd:b4:10:66:59:86:bc:45:8f:4b:6a:95:27:95:1c:
                    36:a8:d8:60:80:33:9a:70:28:ba:27:7c:a9:43:b7:
                    97:23:6a:0a:91:64:00:99:3d:2f:25:94:92:4d:91:
                    c1:5e:53:0d:6b:5d:d6:ef:41:b5:49:e2:f6:f9:d2:
                    7f:6e:51:dd:e3:89:57:f5:ce:3b:14:90:71:f3:16:
                    27:a7:3b:a3:25:0c:94:4c:bf:82:15:60:a0:91:f1:
                    dc:7c:34:07:39:06:91:79:70:39:15:b1:5d:61:1a:
                    ca:01:ea:10:c5:8b:08:2a:11:3e:15:ba:0a:a5:af:
                    d2:9e:cb:23:2b:a4:fd:ca:76:35:80:d2:81:af:4a:
                    33:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C5:46:DE:80:4F:7A:DC:9E:85:26:23:00:42:E2:F0:9D:E6:8C:07
            X509v3 Authority Key Identifier:
                keyid:20:2A:21:5B:C6:3D:BE:27:80:EE:0F:38:F4:AF:64:21:54:D4:DD:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/202A215BC63DBE2780EE0F38F4AF642154D4DDD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202A215BC63DBE2780EE0F38F4AF642154D4DDD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/323830343a313234633a3a2f33322d3438203d3e20323633343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:124c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:1a:fe:80:93:26:30:64:ba:46:10:97:60:57:2d:fb:fe:88:
         6c:1b:11:70:a3:ea:64:39:40:95:6a:f8:b8:10:92:fa:a2:fa:
         c4:8d:8d:d9:51:dc:52:80:1d:bb:09:97:87:8c:27:c5:91:50:
         d4:b7:53:12:73:4a:52:73:8c:9c:a3:48:22:35:20:58:90:42:
         ef:a6:a3:71:d6:bb:20:49:0d:d5:cd:cf:93:8a:ae:3e:e0:05:
         31:dd:a1:c7:2b:f9:0d:5e:ab:52:c8:71:15:80:59:f5:fb:63:
         d2:15:0c:31:58:c9:ac:90:56:49:0d:52:80:8f:fc:99:25:e1:
         c7:96:ad:b7:0e:48:a7:32:38:ba:f9:f4:b9:06:ff:07:48:5e:
         d0:0e:89:58:76:81:b0:58:0a:84:15:4a:5b:c5:ca:f3:af:c0:
         4f:07:28:2c:0d:02:b4:ce:07:9c:f7:f9:c7:1c:fe:12:d4:63:
         10:fd:1e:cc:4c:79:82:31:38:78:27:4f:19:a9:45:41:67:b8:
         05:25:e1:f0:ef:b0:47:cf:b1:bd:3b:77:58:83:cd:70:09:1e:
         5a:e5:6c:5c:96:2c:bd:30:38:a0:e7:bb:35:6e:cb:1b:05:6d:
         f1:ce:61:14:72:4d:ac:60:e4:35:88:33:e7:c7:ca:5b:81:fe:
         57:2b:b1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:16:47 2024 by rpki-client on console-ams.rpki-client.org