Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/323830343a313763633a3a2f33322d313238203d3e20323633323532.roa
File:                     323830343a313763633a3a2f33322d313238203d3e20323633323532.roa (raw, json)
Hash identifier:          C2be0ekNfm7VFkN5Nn5vL0Od0IY4GnU1pDVILkKmKGA=
Subject key identifier:   4A:DF:1A:02:B7:4A:3D:99:52:3C:CA:34:72:42:85:2A:83:70:DD:D7
Certificate issuer:       /CN=0C688B1742C7B62FA4505F58367DC4F3A887407D
Certificate serial:       5AD7E5A0F0CE8398EAEFFF5EA1DED1EA6462EADB
Authority key identifier: 0C:68:8B:17:42:C7:B6:2F:A4:50:5F:58:36:7D:C4:F3:A8:87:40:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C688B1742C7B62FA4505F58367DC4F3A887407D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/323830343a313763633a3a2f33322d313238203d3e20323633323532.roa
Signing time:             Tue 05 Nov 2024 13:55:35 +0000
ROA not before:           Tue 05 Nov 2024 13:50:35 +0000
ROA not after:            Tue 04 Nov 2025 13:55:35 +0000
asID:                     263252
IP address blocks:        2804:17cc::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/0C688B1742C7B62FA4505F58367DC4F3A887407D.crl
                          rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/0C688B1742C7B62FA4505F58367DC4F3A887407D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C688B1742C7B62FA4505F58367DC4F3A887407D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 20:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d7:e5:a0:f0:ce:83:98:ea:ef:ff:5e:a1:de:d1:ea:64:62:ea:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C688B1742C7B62FA4505F58367DC4F3A887407D
        Validity
            Not Before: Nov  5 13:50:35 2024 GMT
            Not After : Nov  4 13:55:35 2025 GMT
        Subject: CN=4ADF1A02B74A3D99523CCA347242852A8370DDD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b7:fa:a1:18:82:f3:ac:93:3d:b1:da:24:e6:
                    8d:a8:f0:ed:79:1f:4f:9f:57:87:38:8d:6f:47:1c:
                    ed:f1:d3:74:68:15:46:30:68:de:5f:df:cf:44:4c:
                    be:43:e3:3f:eb:71:15:ec:b2:7a:87:93:bc:ee:cb:
                    e1:d4:96:fd:a2:2f:78:90:39:7e:05:81:30:96:d7:
                    14:1c:6a:7b:0d:0a:f5:a9:c2:4e:51:9e:46:74:25:
                    05:23:3d:cb:d8:66:73:64:ca:26:b1:b4:f8:59:75:
                    5c:ce:0a:51:3a:29:67:38:9d:54:f2:47:41:67:e6:
                    5f:85:b6:c5:33:ad:34:46:ee:54:d2:a0:3e:61:1e:
                    c6:c1:94:d3:97:0b:20:25:bd:80:1a:24:fb:96:67:
                    3e:cb:fc:dd:97:f7:e5:37:45:b0:7d:86:2f:6d:a5:
                    c8:41:54:dc:78:6b:f8:31:4d:c4:b7:60:70:33:9f:
                    f7:b6:c0:96:f1:88:01:54:97:a6:bb:f4:f2:06:a4:
                    6b:d3:77:0e:84:d2:09:6a:28:42:fd:ba:71:f5:aa:
                    76:68:e2:58:0a:65:08:6a:a2:71:5d:48:da:40:fe:
                    8c:47:2b:59:52:24:45:88:95:7b:da:2d:c2:59:fb:
                    ad:b0:db:7f:d2:c1:0a:2b:8a:0b:ac:5e:45:02:21:
                    fe:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DF:1A:02:B7:4A:3D:99:52:3C:CA:34:72:42:85:2A:83:70:DD:D7
            X509v3 Authority Key Identifier:
                keyid:0C:68:8B:17:42:C7:B6:2F:A4:50:5F:58:36:7D:C4:F3:A8:87:40:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/0C688B1742C7B62FA4505F58367DC4F3A887407D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C688B1742C7B62FA4505F58367DC4F3A887407D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/323830343a313763633a3a2f33322d313238203d3e20323633323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:8e:79:1b:56:7a:c7:97:67:cd:2c:50:75:fe:6b:34:9f:17:
         89:f3:b1:b5:d1:06:d5:55:44:95:70:76:a5:7b:75:0c:c1:8e:
         1e:b7:59:a1:1a:ee:ba:59:8a:e0:d2:4f:57:25:ef:92:e0:ea:
         7b:56:50:18:6c:27:28:ce:17:d7:04:32:7c:fe:82:15:3b:8b:
         d7:7a:06:18:c6:e4:78:83:73:73:95:df:78:e7:8f:96:a9:84:
         b5:b8:4d:98:98:af:ab:64:45:7c:7a:e5:2c:fc:61:7a:60:a1:
         5c:89:39:ac:fb:43:11:bc:6f:30:ad:75:84:b6:75:0d:eb:ed:
         56:7c:13:76:f2:9e:14:e5:e3:f9:f5:16:60:4c:1f:09:85:2a:
         e5:5b:cc:b5:0b:79:fa:f6:ba:10:78:0c:ea:38:65:cf:e6:bc:
         b4:19:95:0a:85:1b:8c:a7:43:e2:f2:db:19:23:91:89:4e:5e:
         b0:bc:a0:1e:fc:fb:14:1a:67:0e:e5:af:87:20:35:a9:69:a6:
         80:86:c2:85:4d:5d:5f:fd:0d:d5:0d:d2:4f:fa:4a:99:c7:d6:
         3d:ac:32:b4:d7:08:e2:b1:c6:31:b0:3e:10:28:a9:90:f8:7b:
         d1:2e:05:e4:04:b1:d8:fd:2b:bd:a5:60:72:2e:8b:d4:21:04:
         8b:fd:73:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:21 2024 by rpki-client on console-ams.rpki-client.org