Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/323830343a383530633a623030303a3a2f34302d3430203d3e20323732353534.roa
File:                     323830343a383530633a623030303a3a2f34302d3430203d3e20323732353534.roa (raw, json)
Hash identifier:          cTWDD1gU6pxlRYr1M2h4g99AKhDApEK0/Nc8dkxvwVc=
Subject key identifier:   F4:F6:2D:68:53:8F:D3:EE:4B:82:24:DE:22:29:DA:D0:EA:71:40:D8
Certificate issuer:       /CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
Certificate serial:       08DD76CA2C93959CA4F416A49684CB555E2393FE
Authority key identifier: 19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/323830343a383530633a623030303a3a2f34302d3430203d3e20323732353534.roa
Signing time:             Thu 24 Oct 2024 11:55:38 +0000
ROA not before:           Thu 24 Oct 2024 11:50:38 +0000
ROA not after:            Thu 23 Oct 2025 11:55:38 +0000
asID:                     272554
IP address blocks:        2804:850c:b000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl
                          rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:dd:76:ca:2c:93:95:9c:a4:f4:16:a4:96:84:cb:55:5e:23:93:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
        Validity
            Not Before: Oct 24 11:50:38 2024 GMT
            Not After : Oct 23 11:55:38 2025 GMT
        Subject: CN=F4F62D68538FD3EE4B8224DE2229DAD0EA7140D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ef:06:93:02:1d:db:2d:dc:5e:f4:7c:43:a9:
                    c8:76:a4:c5:30:a6:23:c1:db:04:a3:05:ac:c8:e9:
                    d1:c4:50:b4:01:3c:cb:39:37:20:6e:6a:74:9d:4d:
                    7c:3f:8e:f3:44:33:96:8e:8e:64:13:86:5f:1c:06:
                    07:8b:21:b6:3d:c1:2c:4a:21:56:2b:fc:5a:dd:cf:
                    18:e6:5c:37:4f:85:d3:01:a4:74:08:66:53:9c:7d:
                    28:47:15:38:ad:5e:0d:37:38:b8:c3:f8:d9:e1:fa:
                    1e:8b:df:25:48:58:b7:db:84:00:65:69:1c:ba:3c:
                    96:d8:01:f5:28:6a:b0:03:7c:ed:88:52:d9:1b:18:
                    af:73:bf:59:55:64:5b:54:fe:bc:3a:a2:43:33:1f:
                    d8:f5:79:b5:6f:62:c7:9f:e8:e6:b3:59:4b:34:18:
                    7e:e0:fa:91:4a:43:28:50:be:f8:a3:e6:4e:1d:4d:
                    d1:b5:a1:02:92:e1:3a:02:2d:22:2b:1f:a9:37:22:
                    97:bd:7d:44:6e:b3:fb:d0:f2:58:0e:66:0a:d2:38:
                    96:ed:64:65:5f:da:69:e3:d8:01:46:70:98:9c:0c:
                    40:34:5f:71:69:8b:06:85:96:b5:d0:ee:e0:a1:87:
                    74:fd:5e:47:a8:86:c0:5c:bf:9b:86:59:8f:2f:78:
                    42:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F6:2D:68:53:8F:D3:EE:4B:82:24:DE:22:29:DA:D0:EA:71:40:D8
            X509v3 Authority Key Identifier:
                keyid:19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/323830343a383530633a623030303a3a2f34302d3430203d3e20323732353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:850c:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1a:29:20:33:52:57:16:5f:a3:98:62:94:4e:04:5c:4b:bd:d6:
         3d:0c:20:a9:aa:ac:41:6d:8c:1d:c5:3b:69:5a:b8:2d:d1:89:
         a4:fd:17:92:d9:7a:3b:f3:31:05:e7:40:f4:23:20:13:f7:e3:
         b9:c6:65:b9:8a:bc:5e:59:f5:a6:a0:de:a9:42:30:9e:61:a0:
         6e:d2:6b:2e:9d:e3:ee:fd:23:17:94:4f:24:3d:eb:7b:ea:a0:
         08:a6:cc:c3:7e:17:61:71:96:34:13:1f:55:c0:53:e4:ac:cb:
         e0:c1:44:fa:83:49:da:36:4f:a3:6f:4e:96:69:13:f7:c9:9c:
         da:b0:61:db:e0:5c:41:1a:f7:f2:30:16:be:8c:92:f2:07:dc:
         5d:4a:d8:45:f0:a5:17:03:1a:40:af:8b:65:4f:b7:e6:0d:fb:
         96:13:a8:3c:44:c3:5c:18:f9:1e:f3:86:ea:5f:78:e7:1c:5a:
         55:ee:4c:7b:25:29:08:03:88:84:b6:d2:af:e2:d9:a4:9a:df:
         55:17:a2:17:94:6b:ab:30:39:b1:81:f1:cb:d4:89:51:13:b5:
         68:0d:95:20:a5:4e:13:7b:fb:2e:67:39:12:c3:f0:e7:ce:b2:
         8b:7e:1c:0b:69:27:29:bb:76:d5:3d:82:80:5c:99:71:9d:fc:
         e5:ff:79:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:31 2024 by rpki-client on console-ams.rpki-client.org