Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/323830343a346666343a3a2f33322d3334203d3e20323638333630.roa
File:                     323830343a346666343a3a2f33322d3334203d3e20323638333630.roa (raw, json)
Hash identifier:          tJ5PYHK8RamZW1g4KYUQ4+/gBPIjEo5ltYwMGy2gfkE=
Subject key identifier:   CA:5D:C3:13:FB:FF:9A:5B:86:DB:E2:25:8D:7C:B4:8C:4D:D2:6D:91
Certificate issuer:       /CN=2282EBAD824556FEB9D1B0FA380BC1AB9CED0627
Certificate serial:       268BB5CA5A77AA6ADEA7A07DC40AC652273C5690
Authority key identifier: 22:82:EB:AD:82:45:56:FE:B9:D1:B0:FA:38:0B:C1:AB:9C:ED:06:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/323830343a346666343a3a2f33322d3334203d3e20323638333630.roa
Signing time:             Wed 13 Nov 2024 13:28:51 +0000
ROA not before:           Wed 13 Nov 2024 13:23:51 +0000
ROA not after:            Wed 12 Nov 2025 13:28:51 +0000
asID:                     268360
IP address blocks:        2804:4ff4::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.crl
                          rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:8b:b5:ca:5a:77:aa:6a:de:a7:a0:7d:c4:0a:c6:52:27:3c:56:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2282EBAD824556FEB9D1B0FA380BC1AB9CED0627
        Validity
            Not Before: Nov 13 13:23:51 2024 GMT
            Not After : Nov 12 13:28:51 2025 GMT
        Subject: CN=CA5DC313FBFF9A5B86DBE2258D7CB48C4DD26D91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d1:92:67:58:73:10:dc:98:92:a1:d4:55:de:
                    7e:12:d1:58:5d:39:41:14:2c:fb:5d:1d:20:43:11:
                    cd:9f:8c:77:fa:7e:5d:24:62:31:92:93:12:8a:4c:
                    63:bf:ca:b4:18:c5:dd:28:b5:e9:93:0f:47:56:b4:
                    1d:e9:e7:a2:ad:5b:3c:8e:8b:34:c6:dc:70:43:9f:
                    bd:aa:14:f2:a2:17:dd:31:3f:d9:66:a8:83:1f:b1:
                    a7:0c:13:96:20:57:fd:e4:96:d8:a8:f7:a6:cc:46:
                    41:b8:e7:db:f7:7d:41:7f:1a:f5:2d:f2:64:c1:7f:
                    65:1f:fe:93:df:f9:f3:cc:79:37:5a:38:82:0e:30:
                    30:c2:70:cf:9a:e2:36:76:be:85:a9:e4:31:98:2c:
                    f3:79:04:fc:50:d7:19:75:c7:61:8f:08:49:0b:3a:
                    94:ea:14:09:b9:a5:1b:7b:2e:72:5c:d0:86:3b:6b:
                    49:91:84:4a:89:dd:1c:92:f0:c9:eb:da:a4:e8:52:
                    12:9c:36:77:5b:bc:f6:d3:65:c8:53:60:a2:6d:e0:
                    31:8b:a0:67:16:0a:54:a4:f9:0e:18:3e:84:4f:e5:
                    5a:8e:ec:02:8f:f3:77:2a:b0:f3:53:5e:07:7b:b8:
                    9e:d0:21:01:09:ff:d5:c5:ea:1b:2c:7d:c3:0a:c0:
                    07:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5D:C3:13:FB:FF:9A:5B:86:DB:E2:25:8D:7C:B4:8C:4D:D2:6D:91
            X509v3 Authority Key Identifier:
                keyid:22:82:EB:AD:82:45:56:FE:B9:D1:B0:FA:38:0B:C1:AB:9C:ED:06:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/323830343a346666343a3a2f33322d3334203d3e20323638333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ff4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:a8:24:d8:9c:40:4d:6c:92:37:c5:80:e8:ba:a0:1a:23:74:
         e7:f7:44:25:e4:e7:90:fd:b1:5e:a6:db:bd:0f:f2:0c:a9:ec:
         d4:ef:82:83:50:dd:df:4f:25:1d:5d:61:53:5e:60:22:a5:4a:
         af:6f:9c:37:94:a6:9c:02:15:f0:a5:22:1e:ef:14:31:13:4e:
         7c:e1:ea:7d:46:58:d3:d9:ad:be:6b:ae:b7:78:f7:3e:4b:cf:
         95:4b:b0:d2:de:78:57:6a:5f:65:72:d1:be:af:20:0b:ed:3c:
         87:2e:11:23:9f:af:a9:8b:7a:53:85:69:6d:ff:ff:e9:34:85:
         0d:fa:3f:ba:34:20:12:7c:68:97:64:64:db:7c:68:21:cd:79:
         77:3a:e4:d0:45:de:89:ff:25:30:b6:85:b5:9e:5c:62:57:02:
         9e:d6:ab:22:4b:76:36:07:ec:ee:36:c6:4b:fa:94:bf:7f:5d:
         e6:e5:74:af:6c:3a:d7:3b:c0:2a:8e:6a:e0:8e:27:b3:de:e3:
         12:2e:09:32:f7:8f:7e:4e:24:3c:01:c1:0c:a2:93:5c:ac:30:
         2b:8c:f4:5e:33:ce:0c:b2:64:25:5f:6c:7e:d2:aa:c3:9d:f7:
         a1:0b:af:ec:73:67:3b:18:2e:50:78:63:f4:d3:73:69:1b:57:
         ef:f7:0f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:13 2024 by rpki-client on console-ams.rpki-client.org