Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/323830343a6463303a3a2f33322d3438203d3e203238363130.roa
File:                     323830343a6463303a3a2f33322d3438203d3e203238363130.roa (raw, json)
Hash identifier:          iqBKFLs2miSCmTcR0D1ftTqtnPiPgpByjxAX0wqBDwg=
Subject key identifier:   A2:D5:3F:9F:EC:F6:FF:AA:4A:39:C8:3F:CB:22:8B:A7:3C:7E:5B:85
Certificate issuer:       /CN=11A2F7135D8EA026B9E72BE70E3EA679F14263F4
Certificate serial:       6626269C0E3BB7CBD9A82E373A585BD7A508E3C1
Authority key identifier: 11:A2:F7:13:5D:8E:A0:26:B9:E7:2B:E7:0E:3E:A6:79:F1:42:63:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/323830343a6463303a3a2f33322d3438203d3e203238363130.roa
Signing time:             Mon 23 Sep 2024 13:08:36 +0000
ROA not before:           Mon 23 Sep 2024 13:03:36 +0000
ROA not after:            Mon 22 Sep 2025 13:08:36 +0000
asID:                     28610
IP address blocks:        2804:dc0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.crl
                          rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 15:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:26:26:9c:0e:3b:b7:cb:d9:a8:2e:37:3a:58:5b:d7:a5:08:e3:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A2F7135D8EA026B9E72BE70E3EA679F14263F4
        Validity
            Not Before: Sep 23 13:03:36 2024 GMT
            Not After : Sep 22 13:08:36 2025 GMT
        Subject: CN=A2D53F9FECF6FFAA4A39C83FCB228BA73C7E5B85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4b:19:57:75:eb:76:51:31:d5:3c:7a:53:99:
                    56:2f:66:9e:de:d4:9e:22:56:d6:ed:b2:61:53:77:
                    45:f4:4e:fc:60:30:de:6a:9a:f4:56:41:cd:b6:90:
                    3c:da:a4:4b:ab:5a:f2:17:59:8e:6b:88:ba:63:5f:
                    44:72:e6:94:bb:de:08:51:e5:34:9c:44:81:80:f1:
                    64:c1:7d:3f:6d:cc:1a:d2:ee:44:ff:60:96:1a:0a:
                    b8:e6:17:87:70:dd:91:f0:2d:86:e3:93:97:21:58:
                    ca:ba:3c:8c:4c:c6:5a:fc:fa:4d:b7:b2:a8:f5:df:
                    36:17:8f:01:9f:63:53:33:00:64:b1:da:de:2f:28:
                    cd:52:5f:d8:d5:d3:4c:61:9d:8e:3d:73:69:a8:38:
                    9a:2f:dc:ba:19:ad:c4:26:c8:f5:0f:4e:ee:ab:00:
                    53:53:16:35:8b:c2:b2:06:ac:79:4c:62:85:da:bb:
                    d2:47:1c:a5:cc:f7:14:d9:57:43:52:00:84:52:24:
                    1e:3d:f3:f1:51:b1:1a:19:f2:80:b4:cc:4f:bb:a5:
                    86:9b:54:2e:fd:d9:a5:00:97:b2:08:0b:82:50:0c:
                    3e:52:1a:fd:2b:f1:56:6e:45:e5:f6:8a:18:3e:db:
                    f3:d7:e7:9b:08:58:40:c0:58:31:e7:f1:ba:b4:4e:
                    11:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D5:3F:9F:EC:F6:FF:AA:4A:39:C8:3F:CB:22:8B:A7:3C:7E:5B:85
            X509v3 Authority Key Identifier:
                keyid:11:A2:F7:13:5D:8E:A0:26:B9:E7:2B:E7:0E:3E:A6:79:F1:42:63:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/323830343a6463303a3a2f33322d3438203d3e203238363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:95:27:e9:2a:9d:22:e2:4d:02:2d:49:78:3a:44:86:43:ff:
         5c:dc:be:ba:58:7d:48:0d:14:a1:37:1b:ea:1e:8a:69:7a:a8:
         50:62:ed:7f:b3:62:3a:a5:17:40:86:fe:1b:d9:9f:10:87:11:
         9e:38:ab:2a:a0:cb:08:ae:ee:4d:bc:e0:74:10:36:c9:46:65:
         ad:43:7c:0e:47:fc:f7:89:52:d3:61:b1:ba:4d:24:cd:50:d9:
         77:a6:d1:ef:a1:cd:f8:69:5a:7d:db:8f:81:1f:ca:e3:c9:be:
         16:5c:df:36:db:79:51:49:26:a1:c2:95:25:58:04:33:b4:b2:
         33:90:78:37:28:7d:fc:e1:99:e4:ce:e5:ce:22:1d:67:46:ac:
         2a:e8:7e:92:97:39:61:25:82:61:67:c5:49:96:8a:7b:18:dc:
         10:56:90:e3:32:1e:f9:f0:cb:38:09:d9:d7:7b:6f:84:ec:af:
         66:94:c7:65:db:70:4b:cf:5b:34:c3:05:b8:68:0f:25:9c:71:
         c2:55:11:37:29:10:8c:20:b1:1b:76:77:56:d0:cc:27:20:d2:
         4b:65:fe:9f:d4:f8:a4:e0:6d:58:44:6b:53:b0:8a:81:d6:6c:
         db:27:5a:df:b0:51:f4:83:f5:13:4d:90:b1:74:0e:5e:4e:53:
         c9:15:c2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:48 2024 by rpki-client on console-ams.rpki-client.org