Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a313630303a3a2f34302d3430203d3e20323634353235.roa
File:                     323830343a323066633a313630303a3a2f34302d3430203d3e20323634353235.roa (raw, json)
Hash identifier:          kkf1M+kfB6o6VIWIU84u4/vKPN/fkyfi+Z+8ZLDp1nY=
Subject key identifier:   92:17:B6:70:F4:81:C7:4F:C4:FE:E4:98:2A:27:53:37:66:FC:78:5A
Certificate issuer:       /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial:       2B78CFF3185F0041B0A96E737C7F324C311E59AA
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a313630303a3a2f34302d3430203d3e20323634353235.roa
Signing time:             Tue 30 Apr 2024 22:06:58 +0000
ROA not before:           Tue 30 Apr 2024 22:01:58 +0000
ROA not after:            Tue 29 Apr 2025 22:06:58 +0000
asID:                     264525
IP address blocks:        2804:20fc:1600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:78:cf:f3:18:5f:00:41:b0:a9:6e:73:7c:7f:32:4c:31:1e:59:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
        Validity
            Not Before: Apr 30 22:01:58 2024 GMT
            Not After : Apr 29 22:06:58 2025 GMT
        Subject: CN=9217B670F481C74FC4FEE4982A27533766FC785A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e3:33:75:7d:2d:d1:1f:06:38:ed:f2:11:3f:
                    60:34:4b:3d:a4:05:8d:a7:38:a3:db:c3:51:77:b8:
                    80:a2:0b:89:d7:b3:14:76:40:46:7f:21:2a:a7:09:
                    75:13:48:2e:33:81:02:7a:f4:66:e5:c1:72:1d:3c:
                    4f:1a:8b:ac:8c:d5:bd:3d:5a:eb:74:2f:c9:96:c9:
                    d8:7d:1d:84:73:4b:53:45:54:96:33:62:e9:2e:75:
                    fd:b1:b4:fb:e4:06:23:cc:44:a2:9d:c4:a1:81:c5:
                    80:35:1c:ba:23:42:99:ad:64:93:5a:12:c2:b7:15:
                    b0:9b:02:51:c9:24:86:91:39:34:f0:88:07:6d:ed:
                    40:3a:6f:66:4f:fe:f8:bc:c8:33:dc:a5:ee:05:50:
                    49:3d:b0:1e:33:2a:e0:b5:f3:44:e6:81:7b:40:bf:
                    16:0d:20:d7:1f:75:5a:ad:4b:fe:dc:63:d9:74:3b:
                    a6:72:80:b2:93:46:a4:f0:27:69:b3:7b:28:ee:f2:
                    16:07:22:a8:01:2d:c6:9b:37:4e:44:0c:5f:99:0a:
                    5e:df:3e:e3:a6:2e:c1:f0:e2:04:54:65:87:56:77:
                    67:af:eb:9a:c1:e4:c1:61:0a:b0:6b:e9:e1:b0:23:
                    09:5a:1f:d8:fd:9f:5e:37:65:0a:a7:d5:89:c8:0e:
                    98:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:17:B6:70:F4:81:C7:4F:C4:FE:E4:98:2A:27:53:37:66:FC:78:5A
            X509v3 Authority Key Identifier:
                keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a313630303a3a2f34302d3430203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20fc:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:bf:ba:80:24:a0:22:cc:5b:96:26:f8:47:2e:b8:8f:61:14:
         63:36:0b:6c:ee:62:0c:63:64:d3:e4:b9:f8:3a:90:80:f5:a7:
         41:72:f6:ed:94:0a:7c:80:0e:33:78:83:d3:21:c7:d4:ca:49:
         50:49:fa:77:28:ba:ba:32:48:78:43:f3:61:50:aa:6f:1a:df:
         16:e0:a8:38:b1:bb:88:6f:72:c6:78:ee:a3:68:fe:1d:ae:df:
         c3:a4:a1:b1:ec:69:02:65:f7:fc:f6:e3:d9:5c:01:34:b1:1b:
         d9:ff:f0:59:93:45:9b:bb:4d:2a:df:52:60:9a:68:b6:09:68:
         93:75:57:6d:57:94:22:71:83:15:4c:76:42:29:67:8f:96:f2:
         eb:84:ab:ba:03:4f:f2:14:e6:bb:fa:2f:1c:f8:df:e0:0a:66:
         b0:5d:d3:a8:00:59:d2:d0:1c:57:d1:42:c5:12:31:72:d3:98:
         b4:6d:e9:6d:f2:ba:31:fb:49:98:e7:07:60:11:30:88:d1:6f:
         73:71:1d:b4:bb:0d:c8:fa:57:6d:df:be:16:3e:8e:bc:a5:93:
         c3:eb:79:c6:f2:83:f4:4d:26:7b:91:6e:59:62:ec:e8:df:97:
         7b:1a:ff:7a:76:f2:cc:b1:6f:3c:9f:2e:5a:35:99:b5:5d:37:
         2a:71:8f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:28 2024 by rpki-client on console-ams.rpki-client.org