Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/323830343a313763383a3a2f33322d3335203d3e20323633323531.roa
File:                     323830343a313763383a3a2f33322d3335203d3e20323633323531.roa (raw, json)
Hash identifier:          Kw3zL7kFe2HSKxW1x6J09JX5It+CjYt1W0o/yMFadMM=
Subject key identifier:   9F:06:58:A4:1B:57:31:60:9E:F8:A4:72:6E:50:42:02:60:9B:08:8C
Certificate issuer:       /CN=099DF7CCFC5474CEBED5335C709CBFAE484FBA37
Certificate serial:       7029C6F91FDDE88705B56A1EEE28CED5B5A46C68
Authority key identifier: 09:9D:F7:CC:FC:54:74:CE:BE:D5:33:5C:70:9C:BF:AE:48:4F:BA:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/323830343a313763383a3a2f33322d3335203d3e20323633323531.roa
Signing time:             Wed 03 Apr 2024 18:32:10 +0000
ROA not before:           Wed 03 Apr 2024 18:27:10 +0000
ROA not after:            Wed 02 Apr 2025 18:32:10 +0000
asID:                     263251
IP address blocks:        2804:17c8::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.crl
                          rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:29:c6:f9:1f:dd:e8:87:05:b5:6a:1e:ee:28:ce:d5:b5:a4:6c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=099DF7CCFC5474CEBED5335C709CBFAE484FBA37
        Validity
            Not Before: Apr  3 18:27:10 2024 GMT
            Not After : Apr  2 18:32:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8e:3b:b0:55:a4:a8:ee:f6:28:fb:37:4e:de:
                    5e:8c:10:54:a1:1a:d0:af:3e:bb:be:db:bd:f9:a6:
                    47:78:a0:bc:de:da:b2:85:7c:27:88:18:2c:c2:8f:
                    f2:92:9d:62:3c:3b:68:3d:7d:8b:e9:50:b0:67:d2:
                    6e:f3:d0:c7:80:3d:68:bb:91:70:fa:99:35:94:db:
                    85:5b:cd:b9:03:9a:c3:d5:47:34:66:8b:a4:87:cd:
                    38:5e:11:32:a1:2b:bf:bf:2b:fb:7d:51:a8:60:b5:
                    7b:45:4b:de:3f:42:77:d2:96:5d:83:e8:ab:9a:79:
                    2b:95:ce:13:cb:48:43:36:4f:75:32:45:0a:f2:85:
                    ac:f6:15:7e:b0:70:dd:77:a7:e9:b2:23:2d:1d:23:
                    aa:75:ee:7b:90:02:2c:5e:f2:30:e5:13:a2:11:c9:
                    57:8d:bb:ce:df:3f:14:a3:78:cc:ba:3d:bb:65:cc:
                    9f:4f:4f:81:bc:b1:fa:0a:05:5b:23:aa:ed:cf:79:
                    59:40:8e:66:e4:e5:24:07:be:d6:52:d4:36:b5:73:
                    cf:92:f6:5e:3e:5b:e5:17:43:56:72:4b:5a:65:e5:
                    3a:00:d9:13:97:36:50:67:19:63:36:f2:80:aa:51:
                    15:cf:6b:7c:d8:bb:c6:ef:dd:a0:df:68:10:26:14:
                    3d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:06:58:A4:1B:57:31:60:9E:F8:A4:72:6E:50:42:02:60:9B:08:8C
            X509v3 Authority Key Identifier:
                keyid:09:9D:F7:CC:FC:54:74:CE:BE:D5:33:5C:70:9C:BF:AE:48:4F:BA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/323830343a313763383a3a2f33322d3335203d3e20323633323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:2e:52:a4:71:08:a1:bc:49:22:2f:65:ae:c8:54:70:3a:81:
         73:e6:fa:37:5f:34:e4:2e:b5:d7:d1:ab:7e:5a:4d:57:b1:9f:
         3f:41:fd:22:b5:d1:51:44:d8:5b:22:6d:d5:82:57:0c:36:c7:
         be:ac:af:94:a3:a2:a3:6e:2c:58:81:cf:5e:3c:63:bd:fb:a8:
         32:6c:38:e8:9a:ac:e2:09:e5:3d:c6:33:64:56:b6:59:05:55:
         ff:24:a0:65:65:0c:db:e7:a9:1e:42:ac:2c:ae:a0:a4:69:7f:
         ed:dc:e1:fd:a2:18:0f:61:08:77:b8:50:dc:15:81:35:18:f1:
         6f:67:03:3b:c8:ae:92:58:41:48:a3:6a:b9:15:77:39:f8:79:
         0d:4d:d0:d4:2b:8b:d7:20:50:5f:0b:d8:5e:e7:2a:ea:e3:73:
         d3:ef:e7:5e:08:a8:b4:d0:74:55:90:a6:16:15:c2:70:26:db:
         31:3f:15:8e:5a:66:1c:58:8f:a9:5c:88:49:81:9d:5c:c8:f9:
         7b:77:7f:9d:d5:d2:9b:7b:c4:10:b4:47:9d:ae:32:0c:6e:2e:
         cc:95:77:de:83:cc:ed:40:19:10:50:dc:79:35:60:cf:7d:0a:
         a2:9f:22:91:5f:2f:e7:49:66:e5:c9:3b:cd:88:5a:e8:87:43:
         61:72:9f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:13 2024 by rpki-client on console-ams.rpki-client.org