Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a3a2f33332d3333203d3e20323638343235.roa
File:                     323830343a353130343a3a2f33332d3333203d3e20323638343235.roa (raw, json)
Hash identifier:          uxDUEDTYXnAr+g/6W/Tncaci9t7Dcopc6UXfV1GorEE=
Subject key identifier:   90:42:79:96:A4:AF:C2:56:01:98:09:30:F2:43:45:BE:3A:2E:71:37
Certificate issuer:       /CN=401E64DC4591B39EEF36B1700B289C705583F254
Certificate serial:       62B5745C2E6E9060E5CF5CFEDF7981B98A014B62
Authority key identifier: 40:1E:64:DC:45:91:B3:9E:EF:36:B1:70:0B:28:9C:70:55:83:F2:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/401E64DC4591B39EEF36B1700B289C705583F254.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a3a2f33332d3333203d3e20323638343235.roa
Signing time:             Tue 19 Nov 2024 14:36:03 +0000
ROA not before:           Tue 19 Nov 2024 14:31:03 +0000
ROA not after:            Tue 18 Nov 2025 14:36:03 +0000
asID:                     268425
IP address blocks:        2804:5104::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/401E64DC4591B39EEF36B1700B289C705583F254.crl
                          rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/401E64DC4591B39EEF36B1700B289C705583F254.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/401E64DC4591B39EEF36B1700B289C705583F254.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b5:74:5c:2e:6e:90:60:e5:cf:5c:fe:df:79:81:b9:8a:01:4b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=401E64DC4591B39EEF36B1700B289C705583F254
        Validity
            Not Before: Nov 19 14:31:03 2024 GMT
            Not After : Nov 18 14:36:03 2025 GMT
        Subject: CN=90427996A4AFC25601980930F24345BE3A2E7137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:59:b9:ff:b7:9c:49:91:51:c1:d4:fd:b8:a9:
                    fc:35:41:4b:5e:70:c5:77:f6:ba:18:3b:5d:b8:75:
                    30:ea:bb:71:7d:b8:20:b4:52:a0:07:57:22:8f:4a:
                    f9:7d:29:e6:51:b6:92:63:66:9f:47:7c:37:ff:08:
                    a5:03:7d:d8:5d:0b:75:48:11:34:8d:78:30:3b:1f:
                    77:b4:e4:9f:b9:e9:9d:9a:4d:69:d0:50:66:7d:73:
                    17:bf:2a:4f:bf:f0:23:d1:99:36:18:2d:f6:bd:18:
                    dd:48:85:e9:27:8c:9d:35:63:07:d0:ea:fc:5e:cb:
                    70:b2:10:86:36:7d:18:62:b5:68:bf:da:0a:17:f4:
                    97:7b:fe:de:a7:9a:6c:98:bc:53:b6:e3:cd:83:77:
                    ea:83:cf:28:10:d4:9f:80:e3:11:18:85:28:2c:25:
                    76:f6:27:0e:5c:52:a9:bc:ad:47:dd:b9:57:80:56:
                    24:17:94:b0:f6:6d:c5:d8:5a:5e:5c:aa:15:87:55:
                    61:7d:1a:6e:ef:67:9a:2e:28:12:59:73:6d:9b:40:
                    5a:10:1a:09:95:80:53:0b:a8:5f:43:ce:cb:cf:08:
                    6b:44:2e:1a:f9:7b:4b:fa:64:67:d1:f3:ab:2e:fe:
                    b3:0b:c3:e8:2d:04:05:f7:20:7b:7e:e2:f7:94:b4:
                    9f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:42:79:96:A4:AF:C2:56:01:98:09:30:F2:43:45:BE:3A:2E:71:37
            X509v3 Authority Key Identifier:
                keyid:40:1E:64:DC:45:91:B3:9E:EF:36:B1:70:0B:28:9C:70:55:83:F2:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/401E64DC4591B39EEF36B1700B289C705583F254.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/401E64DC4591B39EEF36B1700B289C705583F254.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a3a2f33332d3333203d3e20323638343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5104::/33

    Signature Algorithm: sha256WithRSAEncryption
         36:01:c6:47:3e:e0:85:19:07:70:bb:11:27:ba:d2:8c:c4:6d:
         20:bb:11:4a:12:28:a9:c2:ac:3c:ab:6e:ac:d1:66:86:36:ad:
         55:10:14:0c:ba:87:ec:ab:a3:83:3f:d0:99:6e:5c:17:d6:8c:
         f7:bf:bc:b6:30:dc:1f:3e:80:ee:66:41:8c:ce:57:53:25:3d:
         60:0e:ff:1f:97:24:1e:cd:6c:52:2e:72:f0:ad:44:64:23:ef:
         36:a8:96:1f:66:ff:a8:38:46:34:23:9b:2b:ad:18:74:82:52:
         a5:09:19:75:a6:da:7b:f1:93:82:58:25:2c:72:e3:aa:be:6e:
         b6:1b:56:2f:b5:4d:f3:e6:f4:90:99:b6:19:3f:24:8d:73:49:
         49:78:fd:19:4c:2d:2f:f9:a3:8b:34:dd:a8:8e:fa:95:8b:a7:
         11:ce:14:92:aa:04:47:5d:95:2f:ea:f5:fe:a8:10:bf:d6:a9:
         37:62:4a:fc:f2:20:25:b3:39:b4:81:cf:47:0a:a4:43:24:e9:
         2e:97:c6:03:8f:c3:1e:bf:84:85:55:f0:72:85:5d:29:41:b5:
         18:46:aa:3f:b4:2c:0a:93:8d:2e:25:4a:e3:0a:89:9b:fb:49:
         bf:f5:ca:57:e9:47:9b:5d:e1:86:69:40:4f:20:80:8e:07:8d:
         e6:58:e1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:29 2024 by rpki-client on console-ams.rpki-client.org