Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a32303a3a2f34342d3434203d3e20323634353235.roa
File:                     323830343a323066633a32303a3a2f34342d3434203d3e20323634353235.roa (raw, json)
Hash identifier:          vKcV2TpdCxozTpiXuMaYXaP1tYhPXzxQ1nD+2ovI/HY=
Subject key identifier:   19:76:6A:C8:9C:17:F8:99:8C:30:92:51:C1:BB:6D:F5:1F:6E:68:CC
Certificate issuer:       /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial:       1E790731B1DD9517FCF484D32C95851D33043DFD
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a32303a3a2f34342d3434203d3e20323634353235.roa
Signing time:             Tue 30 Apr 2024 22:09:37 +0000
ROA not before:           Tue 30 Apr 2024 22:04:37 +0000
ROA not after:            Tue 29 Apr 2025 22:09:37 +0000
asID:                     264525
IP address blocks:        2804:20fc:20::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:79:07:31:b1:dd:95:17:fc:f4:84:d3:2c:95:85:1d:33:04:3d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
        Validity
            Not Before: Apr 30 22:04:37 2024 GMT
            Not After : Apr 29 22:09:37 2025 GMT
        Subject: CN=19766AC89C17F8998C309251C1BB6DF51F6E68CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:26:ac:0d:7a:b8:d2:62:a6:9c:5c:52:16:e2:
                    9a:be:7a:d7:ee:9d:ac:a8:54:61:9e:d9:85:24:b2:
                    56:ef:7c:65:ef:75:b8:6f:8a:6d:ce:ea:c8:01:17:
                    a4:73:a6:8a:7b:46:da:ba:12:08:a8:80:04:c1:98:
                    c1:b5:ef:73:4a:75:80:85:df:b7:b7:af:25:76:ba:
                    b7:af:ce:2d:a3:da:5e:06:f7:51:92:77:cd:fa:59:
                    ea:96:d4:af:7c:e8:b4:0c:53:02:5a:f6:99:72:24:
                    02:67:90:07:69:82:11:f6:5a:45:56:f4:9d:17:cc:
                    5e:bf:23:1f:3f:cb:66:8a:82:32:d9:00:59:56:c4:
                    5c:51:23:96:14:a3:e0:7d:b9:d6:4a:07:3c:d6:35:
                    26:1f:47:56:bb:57:85:c1:9e:fa:b1:47:b1:38:60:
                    ce:5d:e8:b7:45:78:72:ad:47:5f:da:5b:4f:48:e4:
                    91:29:e8:7a:8e:d5:21:33:e2:77:1b:a4:61:d9:e1:
                    fc:8e:7f:b5:be:d8:a3:5b:32:ba:af:e7:d4:53:da:
                    5b:5e:c6:aa:de:8b:d1:d0:70:fc:cb:54:55:ad:50:
                    4d:34:bf:1d:63:94:87:d6:48:88:c8:f1:9a:77:ae:
                    63:c5:c3:82:71:49:56:9f:f6:67:48:65:7d:67:d9:
                    02:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:76:6A:C8:9C:17:F8:99:8C:30:92:51:C1:BB:6D:F5:1F:6E:68:CC
            X509v3 Authority Key Identifier:
                keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a32303a3a2f34342d3434203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20fc:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         aa:9c:bb:5d:dc:ca:0e:01:50:1c:6d:4b:74:a2:ae:0f:7b:68:
         ca:23:88:d2:cf:0f:1c:e7:d4:31:a2:04:09:02:d9:b0:e2:bf:
         35:69:1e:22:9f:0f:a3:c3:6c:c4:4a:29:01:01:8a:3a:1d:af:
         aa:d4:bd:46:35:ed:2f:27:e8:59:7f:18:9e:97:76:09:0b:7d:
         34:71:22:2a:78:7f:42:e2:65:f7:c9:90:c2:c2:04:f2:4f:a7:
         69:c1:1f:df:78:57:52:bc:5d:b0:b5:20:b6:92:36:b8:1a:1a:
         8d:17:df:16:7c:ea:ba:66:b7:d8:d4:a8:f1:4e:76:e9:48:17:
         58:e3:c4:d3:7c:42:0e:ad:d0:88:56:ae:0a:9f:3d:80:fb:2b:
         a1:fc:24:85:fa:7e:9b:e1:5d:a3:46:40:fd:c3:55:74:06:80:
         9a:0e:a9:52:e7:e5:ed:4f:a7:9d:1d:36:54:0d:94:4a:7a:10:
         16:7b:81:53:83:1f:d1:54:e7:ac:04:2e:d2:0c:59:74:8b:29:
         c5:85:4e:17:42:70:df:f6:ff:90:37:0a:69:0c:a3:3c:1e:ad:
         80:7e:fa:6c:b0:ae:46:9c:17:16:3c:f3:a6:f4:ea:4f:7c:c4:
         19:b0:4c:f2:a4:f5:1e:91:9b:ff:b8:3f:c1:16:ca:3b:0d:7c:
         6d:0e:78:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:02 2024 by rpki-client on console-fra.rpki-client.org