Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a323130303a3a2f34302d3430203d3e20323634353235.roa
File:                     323830343a323066633a323130303a3a2f34302d3430203d3e20323634353235.roa (raw, json)
Hash identifier:          U5HKcE3cx/JTqqzvmxfpejJoClYLAys+I//ZHiobf8E=
Subject key identifier:   EB:2F:05:6E:F2:D3:3E:31:E3:B5:7D:99:66:2A:09:35:91:E8:35:86
Certificate issuer:       /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial:       6D5F966496623077340C633CF8B970771122301E
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a323130303a3a2f34302d3430203d3e20323634353235.roa
Signing time:             Tue 30 Apr 2024 22:08:22 +0000
ROA not before:           Tue 30 Apr 2024 22:03:22 +0000
ROA not after:            Tue 29 Apr 2025 22:08:22 +0000
asID:                     264525
IP address blocks:        2804:20fc:2100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:5f:96:64:96:62:30:77:34:0c:63:3c:f8:b9:70:77:11:22:30:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
        Validity
            Not Before: Apr 30 22:03:22 2024 GMT
            Not After : Apr 29 22:08:22 2025 GMT
        Subject: CN=EB2F056EF2D33E31E3B57D99662A093591E83586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ea:9a:59:bd:98:00:8d:1b:fc:08:e5:31:fa:
                    79:6b:8f:0c:22:7a:b5:61:9f:79:61:0b:50:e0:0f:
                    f4:8b:97:98:90:7e:e5:b6:dd:19:29:f4:07:a8:be:
                    e1:63:b7:50:01:2e:0c:59:70:fb:07:13:fc:c4:5f:
                    f9:2f:72:e4:c9:78:e7:a8:3c:18:09:85:d8:bb:1c:
                    c0:75:d3:07:16:47:8c:b7:3a:be:bb:53:f5:ed:55:
                    64:5c:9b:6e:c4:8c:9a:5b:ac:b1:25:d2:58:b1:a3:
                    01:eb:8e:88:2f:27:7b:0d:2b:bd:8c:f9:08:9f:b7:
                    a9:67:57:f5:cc:51:ca:a9:19:28:0a:1a:72:5e:7d:
                    e4:fc:35:fa:da:48:04:d6:07:c4:90:62:d6:58:1f:
                    d9:33:74:0f:f3:5c:19:50:40:d2:14:1c:cc:63:7f:
                    f4:da:95:75:8b:52:6a:27:a6:1a:58:37:92:f5:02:
                    a1:e1:77:5b:5c:d1:66:ce:86:1c:60:b5:40:5e:95:
                    47:96:f9:f2:c9:99:71:ce:ac:47:6b:f0:77:52:ec:
                    df:70:e7:f4:58:19:5e:57:73:6b:0c:62:2b:e8:93:
                    49:84:e4:a7:fb:59:74:f9:79:e0:d6:31:ce:2f:b0:
                    cd:88:37:b7:51:3b:54:04:ac:cb:57:f2:6d:45:b4:
                    77:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2F:05:6E:F2:D3:3E:31:E3:B5:7D:99:66:2A:09:35:91:E8:35:86
            X509v3 Authority Key Identifier:
                keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a323130303a3a2f34302d3430203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20fc:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:c7:80:4a:12:a2:d6:38:44:41:1b:d8:48:c8:1e:3b:f7:63:
         3a:a8:a2:49:13:b1:da:8e:5b:26:04:77:97:08:f4:a8:16:c2:
         5d:86:4f:3a:d7:14:98:6f:8f:c9:5e:9f:0e:cb:24:9a:3f:53:
         de:23:ca:2f:13:6d:bd:44:83:b1:9f:8b:ba:e5:fc:81:cb:7d:
         93:0f:26:ef:a8:3d:c1:9f:37:19:aa:bb:df:ee:8a:78:79:6a:
         45:a8:e8:8c:0d:a5:14:6b:e8:ce:eb:49:21:cf:6d:ca:6e:ae:
         93:0c:07:19:90:17:cc:31:fd:7d:34:f2:6e:92:ba:c3:0e:7e:
         19:4e:eb:1a:21:59:8e:a3:f4:82:05:4e:19:f3:e6:8c:a5:be:
         6b:35:e0:47:f5:ab:fc:77:83:d7:6f:c3:e3:a3:fd:bb:37:35:
         ca:bb:b1:38:f4:8e:51:fc:52:67:a8:ad:de:fa:b4:ec:4b:46:
         0c:fb:4f:bf:7b:83:f8:47:26:bb:1b:02:2a:9d:44:9a:a7:5d:
         dd:20:2d:d2:3c:72:e5:b8:a4:02:e4:d3:3e:05:f2:74:70:4e:
         b5:75:07:0f:4f:c1:f3:a6:53:96:f6:b7:9b:df:5f:49:c2:60:
         62:08:57:29:9e:e8:f5:16:c9:21:6b:4e:da:42:95:0f:17:38:
         6b:9e:4c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:28 2024 by rpki-client on console-ams.rpki-client.org