Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/323830343a346464303a3a2f33322d3336203d3e20323638323231.roa
File:                     323830343a346464303a3a2f33322d3336203d3e20323638323231.roa (raw, json)
Hash identifier:          cd/o+cgKT+7B5IJvmnlfVE22M1Gk5tst27TuMc9NCmo=
Subject key identifier:   E8:C2:4B:C2:60:59:29:FE:69:AA:7A:81:94:3D:8D:3F:AB:9D:68:29
Certificate issuer:       /CN=42D604698AFA9BA492807398AA6527B6E7B04AB4
Certificate serial:       19361B87BDE70EA30A0FA866FEFB5AB1DD2E8AC8
Authority key identifier: 42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/323830343a346464303a3a2f33322d3336203d3e20323638323231.roa
Signing time:             Tue 28 May 2024 19:21:03 +0000
ROA not before:           Tue 28 May 2024 19:16:03 +0000
ROA not after:            Tue 27 May 2025 19:21:03 +0000
asID:                     268221
IP address blocks:        2804:4dd0::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.crl
                          rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:36:1b:87:bd:e7:0e:a3:0a:0f:a8:66:fe:fb:5a:b1:dd:2e:8a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42D604698AFA9BA492807398AA6527B6E7B04AB4
        Validity
            Not Before: May 28 19:16:03 2024 GMT
            Not After : May 27 19:21:03 2025 GMT
        Subject: CN=E8C24BC2605929FE69AA7A81943D8D3FAB9D6829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:5e:6f:87:6a:6f:d1:88:38:82:4d:06:ee:10:
                    ea:59:ea:a8:a4:e5:3b:27:b3:e6:60:e3:55:73:66:
                    a5:3b:c1:54:8d:7a:a2:f6:24:ab:2a:dc:71:51:8a:
                    df:c9:d8:4c:da:0a:1a:1d:de:dd:c5:f6:4d:61:4d:
                    b6:0b:a6:73:66:ce:0e:76:fb:72:40:c3:76:92:18:
                    30:3c:c7:23:ae:9f:56:9a:2c:b5:14:e7:72:63:a2:
                    24:b3:cd:37:c8:37:ba:a5:5c:1f:70:7b:68:90:5b:
                    53:c5:62:4a:20:34:f7:b1:1d:bf:5b:20:a5:1d:0e:
                    53:af:0f:8c:ed:6e:3c:11:ba:eb:2a:eb:4b:2f:55:
                    86:29:96:77:f7:e3:84:01:12:7d:a0:36:82:b8:6d:
                    78:b8:35:b4:63:42:d2:26:1c:76:bd:72:dd:6b:91:
                    db:e1:75:da:90:e2:c2:6a:3f:a3:b9:40:9d:25:e1:
                    6c:41:38:53:b1:3f:fa:15:20:9c:9f:bd:7b:ed:c2:
                    86:35:75:1d:c1:91:2a:05:d2:54:35:2d:d7:f8:81:
                    d9:d0:e7:bc:57:e2:83:36:a5:c5:e1:5f:91:28:7c:
                    a8:da:c1:1b:cd:3e:2c:71:f8:3b:11:1f:0e:b8:a8:
                    90:7e:b3:9a:f2:8c:ea:7d:87:37:06:6c:82:42:72:
                    01:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C2:4B:C2:60:59:29:FE:69:AA:7A:81:94:3D:8D:3F:AB:9D:68:29
            X509v3 Authority Key Identifier:
                keyid:42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/323830343a346464303a3a2f33322d3336203d3e20323638323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4dd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:ab:d7:b8:01:2b:1e:85:4e:2b:7e:f1:d6:67:39:63:8d:ab:
         57:82:a4:a9:a9:cf:99:ce:f5:a0:2d:17:1f:33:c9:31:33:3b:
         7c:bb:2f:22:a3:44:91:9e:36:52:58:59:f3:6f:d9:5f:a8:52:
         a0:13:33:b5:92:70:2c:5a:0d:d1:14:a5:de:b9:98:60:27:ea:
         c9:69:68:8a:1a:7c:f6:ac:1b:69:4b:64:a8:ec:1c:e3:35:00:
         36:6f:1a:a8:4f:f8:92:f0:f0:cb:41:ce:99:c5:a7:16:bb:c9:
         14:7a:a5:71:71:d6:17:ed:44:cd:5a:77:71:51:ba:63:d1:0a:
         d7:78:f8:f6:ea:ee:72:80:52:3f:84:b9:24:66:e0:6b:4c:90:
         77:92:98:c7:1c:2a:54:e7:0a:84:da:91:18:51:67:8f:9b:d9:
         f9:16:77:9b:f0:73:39:80:09:24:cd:fa:b6:48:7b:b3:15:4a:
         0d:87:fa:cd:a2:b4:1a:fe:11:02:88:a0:81:03:81:d5:e9:d7:
         14:24:dd:d3:2b:7f:17:24:9a:56:6c:36:b0:4f:26:3a:94:9c:
         9d:08:87:c8:53:a1:c6:c5:36:1f:d6:01:7a:fb:81:d8:1e:ad:
         51:2b:db:6f:77:b5:27:5b:20:be:95:6e:c7:32:a5:f0:2e:a3:
         46:af:13:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:56 2024 by rpki-client on console-ams.rpki-client.org