Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a3330303a3a2f34302d3430203d3e20323638343235.roa
File:                     323830343a353130343a3330303a3a2f34302d3430203d3e20323638343235.roa (raw, json)
Hash identifier:          qSUKR3JWZ7peOcAHSZStekrngA7wZLaJng5LqEAc+tY=
Subject key identifier:   CE:AD:99:A0:6C:26:A5:55:E4:63:0F:FF:6D:B2:AC:66:56:88:7C:7C
Certificate issuer:       /CN=401E64DC4591B39EEF36B1700B289C705583F254
Certificate serial:       0DBBE435CCDF7510D822496FFF0FB91381CA6B0B
Authority key identifier: 40:1E:64:DC:45:91:B3:9E:EF:36:B1:70:0B:28:9C:70:55:83:F2:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/401E64DC4591B39EEF36B1700B289C705583F254.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a3330303a3a2f34302d3430203d3e20323638343235.roa
Signing time:             Tue 19 Nov 2024 14:36:08 +0000
ROA not before:           Tue 19 Nov 2024 14:31:08 +0000
ROA not after:            Tue 18 Nov 2025 14:36:08 +0000
asID:                     268425
IP address blocks:        2804:5104:300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/401E64DC4591B39EEF36B1700B289C705583F254.crl
                          rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/401E64DC4591B39EEF36B1700B289C705583F254.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/401E64DC4591B39EEF36B1700B289C705583F254.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:bb:e4:35:cc:df:75:10:d8:22:49:6f:ff:0f:b9:13:81:ca:6b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=401E64DC4591B39EEF36B1700B289C705583F254
        Validity
            Not Before: Nov 19 14:31:08 2024 GMT
            Not After : Nov 18 14:36:08 2025 GMT
        Subject: CN=CEAD99A06C26A555E4630FFF6DB2AC6656887C7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3e:48:88:81:4b:98:db:8b:7c:85:bf:0f:66:
                    1f:a5:f0:14:f7:a9:b5:bb:61:f5:67:ae:a8:ab:6b:
                    25:ea:d5:cc:35:0c:1d:cc:24:35:7d:5a:52:76:2f:
                    07:2f:ab:9b:c0:1e:8d:9b:0f:88:03:b7:e9:88:db:
                    9d:f2:ec:a1:0f:c0:6b:28:fb:9f:3f:fb:c3:91:9c:
                    ae:0c:81:f0:31:a9:97:fd:86:0a:a3:42:8a:1a:b0:
                    cb:01:70:b4:98:9a:24:05:b8:3d:fc:46:c3:cf:d4:
                    43:5d:30:44:4c:57:1f:fe:79:aa:39:f6:3a:aa:30:
                    06:33:14:36:98:64:27:31:d2:a9:73:53:5e:5a:01:
                    fc:6d:fd:f7:74:f4:20:9f:1d:ba:e5:4b:4b:2a:f8:
                    92:54:f0:3f:d1:a8:75:b0:e4:85:05:5a:dc:da:73:
                    1b:97:70:14:d9:fb:69:31:17:88:38:43:cf:8a:c8:
                    b3:e1:66:87:05:4d:2d:82:52:79:5d:74:2c:8a:b8:
                    6c:0c:7a:7f:e9:79:01:d0:2d:25:bb:fe:bd:be:ce:
                    5c:ab:cf:ea:27:df:56:40:98:a2:b9:7c:1e:40:e5:
                    b3:13:7a:a1:d3:a9:f1:75:88:58:26:70:05:ae:f7:
                    fc:62:f1:e7:26:8e:8a:6f:00:25:98:6d:d7:a3:55:
                    ec:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AD:99:A0:6C:26:A5:55:E4:63:0F:FF:6D:B2:AC:66:56:88:7C:7C
            X509v3 Authority Key Identifier:
                keyid:40:1E:64:DC:45:91:B3:9E:EF:36:B1:70:0B:28:9C:70:55:83:F2:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/401E64DC4591B39EEF36B1700B289C705583F254.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/401E64DC4591B39EEF36B1700B289C705583F254.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a3330303a3a2f34302d3430203d3e20323638343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5104:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:19:d9:30:1e:98:5d:91:a7:03:56:4d:55:44:30:66:b8:69:
         b7:70:4f:91:ec:e6:4b:80:b6:5e:7e:e3:b6:91:43:51:b5:4c:
         50:af:11:a3:ad:ec:53:55:84:df:75:76:e4:6f:6c:33:6f:01:
         61:b0:15:c0:91:ff:95:55:45:e9:ba:c3:5e:e8:08:3a:dc:da:
         35:73:02:9c:ce:a8:86:44:06:a0:9a:e5:1b:87:b3:82:2d:eb:
         4a:72:ae:a0:87:8c:34:f4:78:33:3a:fc:05:88:2e:ff:3d:e2:
         e5:fa:87:6f:cd:18:c1:bb:8c:de:56:06:07:2b:94:bc:48:e9:
         fc:41:a8:60:f4:7c:3b:1f:06:ae:cb:e5:77:5f:13:ed:08:70:
         97:6f:c5:8a:e9:5b:4b:3e:31:4b:76:43:44:0e:5b:04:2a:e4:
         2b:4f:1d:4d:5b:13:b0:8f:20:c3:cc:6b:25:d5:43:74:cf:a4:
         3b:db:74:1e:c8:3d:76:2b:cc:38:1f:c2:5f:ba:0f:7f:36:e4:
         b7:48:97:0a:33:5f:ee:8b:68:cd:f2:05:72:be:eb:0b:65:f6:
         76:74:21:71:a0:7f:99:0a:f5:4a:87:0b:87:dc:b8:ed:e5:9c:
         17:a6:81:71:c4:55:1d:2e:ef:ad:68:65:25:cd:e2:8a:03:31:
         cd:a8:68:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:46 2024 by rpki-client on console-fra.rpki-client.org