Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a316230303a3a2f34302d3430203d3e20323634353235.roa
File:                     323830343a323066633a316230303a3a2f34302d3430203d3e20323634353235.roa (raw, json)
Hash identifier:          TvUT8sz7X+3JZiXxRvfJ4wpoCawns5mMSftEOukHMsc=
Subject key identifier:   77:FB:5A:59:1D:F3:36:30:7A:06:26:99:72:F6:20:DF:07:B3:6A:1C
Certificate issuer:       /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial:       6C4FF9FFE42B9A0B0D73D8CF1C91AFCC31184B06
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a316230303a3a2f34302d3430203d3e20323634353235.roa
Signing time:             Tue 30 Apr 2024 22:07:50 +0000
ROA not before:           Tue 30 Apr 2024 22:02:50 +0000
ROA not after:            Tue 29 Apr 2025 22:07:50 +0000
asID:                     264525
IP address blocks:        2804:20fc:1b00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4f:f9:ff:e4:2b:9a:0b:0d:73:d8:cf:1c:91:af:cc:31:18:4b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
        Validity
            Not Before: Apr 30 22:02:50 2024 GMT
            Not After : Apr 29 22:07:50 2025 GMT
        Subject: CN=77FB5A591DF336307A06269972F620DF07B36A1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1a:f9:14:ed:fa:77:1f:a5:2a:29:41:4a:e9:
                    b2:6d:dd:31:c4:79:21:45:03:5d:ed:7d:37:d2:5a:
                    67:ee:e3:d6:5d:e2:e4:fc:cb:e1:ce:73:df:a2:94:
                    05:2a:bb:a4:00:15:94:d2:b1:5b:d9:85:cc:8f:c6:
                    00:51:4c:50:90:b7:12:a8:a9:15:e8:12:2e:6c:fc:
                    c1:b2:7c:52:c0:2d:6a:c7:ef:44:7d:55:b7:a7:d1:
                    c0:50:0e:04:4b:f6:86:bc:c8:76:23:7b:bc:eb:9e:
                    e9:de:89:46:2c:d8:47:12:f4:bc:16:38:00:a9:c4:
                    87:6a:95:f7:71:06:c0:0d:7c:67:1e:df:b7:7f:56:
                    20:ce:b1:a6:6c:4b:b9:4d:25:ba:44:c6:7e:4d:fd:
                    96:73:cb:db:b4:3f:39:d3:6d:3c:01:d7:3d:2b:2f:
                    46:64:d1:00:63:b2:e3:d4:63:15:23:e5:70:7a:8f:
                    d0:66:c0:61:5a:31:ae:59:a5:1d:b9:ab:2c:1b:6f:
                    a0:5a:93:49:c3:5b:fe:b9:bc:83:86:73:ec:28:df:
                    31:c0:a2:f6:fb:09:83:5a:86:53:cb:c5:d3:86:78:
                    6d:8e:3f:e8:12:67:67:c8:83:a7:3a:80:5c:18:e7:
                    b5:b7:61:4c:ab:fd:8a:4a:6d:94:35:c0:ed:7b:9d:
                    79:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FB:5A:59:1D:F3:36:30:7A:06:26:99:72:F6:20:DF:07:B3:6A:1C
            X509v3 Authority Key Identifier:
                keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a316230303a3a2f34302d3430203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20fc:1b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:e5:0a:b5:73:51:00:6b:60:14:0a:68:8f:60:ff:3a:a9:8f:
         ed:6d:53:85:08:63:d6:de:4b:e8:64:2b:00:b0:d0:d1:56:6d:
         99:05:99:7e:62:c7:f4:78:06:23:85:c3:5b:35:66:c4:70:61:
         0b:60:e7:2b:ce:45:57:d3:25:59:c9:ef:aa:16:07:e3:c3:4d:
         0b:2a:f5:ec:33:27:a0:3e:d8:d4:a1:06:fc:4f:0f:d4:8d:6c:
         1f:58:5c:69:26:ef:23:72:3f:9c:9b:ff:4f:f7:2d:95:0f:8c:
         72:35:7a:96:f3:d3:a8:c0:99:d9:19:52:92:8f:49:45:95:e0:
         60:29:36:30:bd:ee:1b:15:47:88:1e:3f:e9:52:61:2d:6c:fd:
         61:6b:7c:3a:d3:e7:3c:3f:8d:0c:d8:0c:4e:77:92:e6:0b:3f:
         b3:6f:25:82:ea:53:11:46:a1:bf:9d:67:e0:67:b3:b3:b2:e8:
         51:38:45:a1:4f:4e:0d:a1:5f:71:4f:06:7f:b2:3d:31:6d:75:
         b4:38:0d:6a:34:ef:62:b3:a9:89:d2:33:16:0b:8a:f0:92:5b:
         92:43:7d:91:1f:e2:ba:30:bc:0a:0f:61:fc:8d:d5:1a:50:2e:
         2f:da:68:a0:0e:f1:24:e9:42:f5:eb:8b:c1:eb:5e:33:45:91:
         8d:2d:69:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:28 2024 by rpki-client on console-ams.rpki-client.org