Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/323830343a343536383a3a2f33332d3333203d3e20323636393234.roa
File:                     323830343a343536383a3a2f33332d3333203d3e20323636393234.roa (raw, json)
Hash identifier:          esOZViXJXDXjYYyWd6AYh4lEltjm3gR+ZnHfetuFDAY=
Subject key identifier:   E8:51:B0:5B:4A:39:9D:FD:CC:D3:C7:68:FE:12:8B:4D:C6:4B:FE:A1
Certificate issuer:       /CN=8BF88EB3E49ED40C345CAC644339163A4BD26FEE
Certificate serial:       1D13D3E676C047E6005C6370FFA2AC7CA8296574
Authority key identifier: 8B:F8:8E:B3:E4:9E:D4:0C:34:5C:AC:64:43:39:16:3A:4B:D2:6F:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BF88EB3E49ED40C345CAC644339163A4BD26FEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/323830343a343536383a3a2f33332d3333203d3e20323636393234.roa
Signing time:             Sat 23 Nov 2024 03:33:16 +0000
ROA not before:           Sat 23 Nov 2024 03:28:16 +0000
ROA not after:            Sat 22 Nov 2025 03:33:16 +0000
asID:                     266924
IP address blocks:        2804:4568::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8BF88EB3E49ED40C345CAC644339163A4BD26FEE.crl
                          rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8BF88EB3E49ED40C345CAC644339163A4BD26FEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BF88EB3E49ED40C345CAC644339163A4BD26FEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:13:d3:e6:76:c0:47:e6:00:5c:63:70:ff:a2:ac:7c:a8:29:65:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BF88EB3E49ED40C345CAC644339163A4BD26FEE
        Validity
            Not Before: Nov 23 03:28:16 2024 GMT
            Not After : Nov 22 03:33:16 2025 GMT
        Subject: CN=E851B05B4A399DFDCCD3C768FE128B4DC64BFEA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:98:7d:a7:d8:12:13:b5:63:d1:e4:d3:3f:38:
                    cc:7f:6d:9a:0f:af:fb:1f:95:19:4a:42:0b:d2:b4:
                    20:53:d8:34:52:74:d3:e2:fa:8b:3e:9e:fd:94:da:
                    3b:cb:f5:cf:49:15:57:13:9f:73:4c:d1:bc:7e:45:
                    e1:b8:98:95:ae:12:3a:55:2c:4e:01:e7:db:c7:67:
                    3e:96:30:34:4e:76:f4:9e:e8:ec:70:fd:9f:ef:f1:
                    a8:58:77:8e:f8:46:61:ec:e2:4f:84:9a:36:5d:b4:
                    48:de:49:06:c9:5d:cf:41:6c:ed:60:15:25:91:a9:
                    e9:57:41:e1:e5:52:34:3d:05:e9:22:33:aa:e1:dd:
                    79:ec:61:09:f0:34:45:5e:27:a6:d3:0f:be:21:6f:
                    17:70:e1:16:63:ab:b2:f4:16:64:09:d8:8e:89:8a:
                    e2:dd:09:1f:f7:15:1b:df:b2:ca:18:b3:7f:3d:fb:
                    e0:23:76:1d:fb:8d:cb:ff:9e:09:21:2e:f1:4b:76:
                    7d:4d:81:73:5b:bd:c0:57:25:f1:36:44:fe:be:00:
                    98:73:ab:4b:45:b3:d5:ef:c2:f0:7a:57:97:dc:c4:
                    4e:1b:df:d2:4c:4c:b7:0f:13:3a:c7:cc:61:e2:38:
                    49:04:67:f4:14:f3:55:9f:39:5d:36:ea:bd:fe:47:
                    48:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:51:B0:5B:4A:39:9D:FD:CC:D3:C7:68:FE:12:8B:4D:C6:4B:FE:A1
            X509v3 Authority Key Identifier:
                keyid:8B:F8:8E:B3:E4:9E:D4:0C:34:5C:AC:64:43:39:16:3A:4B:D2:6F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8BF88EB3E49ED40C345CAC644339163A4BD26FEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BF88EB3E49ED40C345CAC644339163A4BD26FEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/323830343a343536383a3a2f33332d3333203d3e20323636393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4568::/33

    Signature Algorithm: sha256WithRSAEncryption
         bc:22:0f:1d:a9:08:d2:79:ac:f2:b2:77:89:37:b3:31:5d:57:
         31:cb:21:44:d2:6b:a8:f5:e8:32:56:ee:1a:93:eb:bd:30:18:
         4b:7b:d7:a3:3a:97:90:c1:8a:26:fe:4f:b6:01:9a:b7:76:99:
         9f:3b:0c:87:14:03:52:7f:31:a9:f1:1d:82:a0:1e:62:80:b8:
         1d:17:30:70:0e:5d:fb:a2:5b:1c:c6:35:4b:40:a0:22:b0:cb:
         94:a3:cc:d2:4c:54:5d:20:01:3c:5a:93:2a:bc:63:11:04:5c:
         3c:8b:f7:ed:5a:1e:30:29:a6:7c:b2:a4:74:aa:2c:ee:96:15:
         30:0d:08:3a:72:a3:c0:e8:26:70:68:fa:f7:d5:7d:46:ce:4d:
         c9:ca:69:aa:8a:1a:a8:79:8d:7d:a2:4b:aa:95:c4:07:3e:1a:
         7d:92:dc:18:49:24:1d:20:ac:94:71:56:82:76:7e:ff:f1:ef:
         79:c2:ab:ed:d9:e2:2e:36:c9:04:a5:69:33:2c:eb:fa:bc:93:
         6f:b4:19:30:4e:63:16:07:e1:69:30:83:43:71:13:97:db:af:
         46:44:63:d2:05:2a:ee:c6:3b:43:c4:0a:4f:c1:c2:7f:4f:89:
         12:42:ff:45:81:1b:68:30:94:90:94:01:eb:04:d3:69:5c:c1:
         9d:bb:c3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:51 2024 by rpki-client on console-fra.rpki-client.org