Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a323434303a3a2f34342d3434203d3e20323634353235.roa
File:                     323830343a323066633a323434303a3a2f34342d3434203d3e20323634353235.roa (raw, json)
Hash identifier:          7702P6llLz6ZBrB+33t/KDLe2pEHv6ChERv1QxlmjJ4=
Subject key identifier:   CC:3A:3B:A5:3F:B5:83:B2:36:89:E6:31:06:BB:1D:E5:FC:F9:81:53
Certificate issuer:       /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial:       123988C9525D81ED93C811371F359630D1B13672
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a323434303a3a2f34342d3434203d3e20323634353235.roa
Signing time:             Mon 19 Aug 2024 21:38:07 +0000
ROA not before:           Mon 19 Aug 2024 21:33:07 +0000
ROA not after:            Mon 18 Aug 2025 21:38:07 +0000
asID:                     264525
IP address blocks:        2804:20fc:2440::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:39:88:c9:52:5d:81:ed:93:c8:11:37:1f:35:96:30:d1:b1:36:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
        Validity
            Not Before: Aug 19 21:33:07 2024 GMT
            Not After : Aug 18 21:38:07 2025 GMT
        Subject: CN=CC3A3BA53FB583B23689E63106BB1DE5FCF98153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e9:2f:ce:d7:a3:ac:ba:e4:f3:9d:98:66:d4:
                    3d:04:76:33:51:2d:de:31:69:9c:21:2f:bf:97:8b:
                    dd:2a:ab:d8:fc:46:c7:80:bf:0a:1c:cc:ca:5a:8b:
                    1a:29:b7:83:1a:30:c2:37:b6:a5:d3:9c:c3:17:9b:
                    35:63:13:18:a1:65:86:36:e1:5d:a5:d8:84:b2:20:
                    4d:7b:b9:80:18:5e:d8:b9:c9:9f:b7:90:06:e5:ec:
                    ba:51:ce:77:fd:c9:45:f7:01:8b:e1:13:39:05:1e:
                    e8:d9:7d:18:21:ec:45:45:45:9f:0e:6c:4a:3d:03:
                    a0:8e:cf:3b:03:34:b5:04:57:08:59:31:57:e5:a3:
                    0c:61:0a:d6:41:af:6f:30:47:8b:4d:83:5a:d2:a5:
                    2a:c7:1f:0c:b7:13:54:1e:98:7f:ad:fe:15:7f:75:
                    37:7d:fd:f3:5c:45:9d:19:70:e8:ad:f8:6d:d1:5e:
                    12:ba:ab:e9:42:48:7e:1e:30:f1:33:a4:67:67:be:
                    a1:c6:d8:43:73:69:ac:0c:cb:25:64:a2:3e:34:37:
                    86:ee:9f:80:c3:19:0e:f7:f5:34:05:7f:b6:9a:31:
                    8e:a1:55:1a:47:21:bd:a4:fd:00:2f:ad:12:a5:d6:
                    ef:48:b7:92:e2:e6:ac:68:1c:b6:7e:7b:50:91:26:
                    1a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3A:3B:A5:3F:B5:83:B2:36:89:E6:31:06:BB:1D:E5:FC:F9:81:53
            X509v3 Authority Key Identifier:
                keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a323434303a3a2f34342d3434203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20fc:2440::/44

    Signature Algorithm: sha256WithRSAEncryption
         41:91:f0:29:dd:97:10:4c:db:d1:93:bf:9c:bc:47:fa:d8:9a:
         be:ef:c8:59:49:95:6a:c3:2a:96:a9:5a:ae:66:bd:9b:7a:11:
         ae:ea:da:50:54:79:fd:62:fa:95:ee:f6:5e:9b:98:f7:ab:4f:
         9c:e8:98:57:4e:c3:3e:2c:ae:21:19:30:1f:b7:ca:cc:20:e6:
         2a:81:d0:56:70:7c:17:fb:a5:15:f9:13:75:62:65:cb:a2:51:
         13:f1:12:69:a3:26:d1:7d:d7:98:03:1f:57:c7:8f:5c:75:06:
         bc:ae:6a:f1:e5:1a:e8:11:e2:82:aa:e9:4c:75:e1:5d:cf:69:
         c7:1a:fe:53:98:30:4a:06:5a:09:01:aa:81:fd:a8:31:52:22:
         d3:a4:4f:36:b7:7a:70:b3:b0:ea:6b:c6:a8:79:ee:b0:3b:4a:
         13:37:6e:54:b2:0b:b9:93:cf:c9:32:e2:85:80:1f:24:db:fc:
         be:f3:d6:d8:78:e4:75:07:f6:20:30:8b:50:86:25:da:8b:5b:
         a0:ef:aa:35:42:33:b4:bb:2b:f5:64:58:ad:1e:d6:0e:0c:44:
         2d:fb:bb:ba:88:5c:fa:bf:33:8c:5b:aa:d0:8d:44:6f:7c:2e:
         77:ec:cd:aa:0a:1b:3c:95:e3:b8:56:b1:b0:cf:8f:44:93:c7:
         e2:4b:04:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:02 2024 by rpki-client on console-fra.rpki-client.org