Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a323438303a3a2f34342d3434203d3e20323634353235.roa
File:                     323830343a323066633a323438303a3a2f34342d3434203d3e20323634353235.roa (raw, json)
Hash identifier:          2jqFULki8skk/AfJdQIdT7se8x8yQ0OnhNMCHwSqMEM=
Subject key identifier:   7A:8E:FD:C1:9B:DB:A2:D4:35:AA:B0:7E:BB:F7:DF:97:25:E2:ED:88
Certificate issuer:       /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial:       04FC7B61097C55247EFF70EA56F87932CC0CB0E4
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a323438303a3a2f34342d3434203d3e20323634353235.roa
Signing time:             Thu 22 Aug 2024 19:36:00 +0000
ROA not before:           Thu 22 Aug 2024 19:31:00 +0000
ROA not after:            Thu 21 Aug 2025 19:36:00 +0000
asID:                     264525
IP address blocks:        2804:20fc:2480::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:fc:7b:61:09:7c:55:24:7e:ff:70:ea:56:f8:79:32:cc:0c:b0:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
        Validity
            Not Before: Aug 22 19:31:00 2024 GMT
            Not After : Aug 21 19:36:00 2025 GMT
        Subject: CN=7A8EFDC19BDBA2D435AAB07EBBF7DF9725E2ED88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:61:cd:a5:31:25:68:7d:72:5c:df:56:ba:63:
                    9d:68:78:e0:ac:b3:fd:7e:e5:7d:90:60:9b:19:67:
                    d2:37:5e:5d:b5:ab:f9:e8:ef:6a:cf:03:b2:4d:7b:
                    96:ad:ec:55:93:d2:fb:80:50:3e:e8:97:05:ce:e1:
                    15:9b:de:7b:ef:1a:74:aa:9f:09:c9:9d:0a:d1:25:
                    d6:11:cc:c8:e9:1a:e8:c8:28:37:14:86:c7:86:f3:
                    27:54:f1:2a:b3:40:69:31:9b:a7:1a:2b:2c:ce:70:
                    5e:27:b0:d3:e2:b2:40:82:25:c8:ff:ec:ae:68:ae:
                    80:4b:70:48:8c:0b:e3:6f:85:07:cb:37:ca:04:5a:
                    20:61:be:fd:6c:33:53:c3:a2:3c:16:64:09:c7:c5:
                    40:ea:82:29:e7:cd:5b:4d:66:b3:3a:db:17:04:10:
                    50:21:ed:a0:09:60:1b:a9:4a:a6:5c:c3:40:0c:0e:
                    74:83:85:76:37:04:bb:e8:0e:97:5b:cb:ae:5d:bc:
                    e7:c1:d2:af:8b:8c:92:58:fd:ea:1c:60:d2:78:62:
                    1c:5a:9e:46:b4:44:be:d2:62:16:bc:9f:c5:50:65:
                    f0:b8:4b:5b:b9:a2:b7:b9:69:66:ac:34:80:69:db:
                    ea:d0:e5:3f:18:62:7a:f8:44:d7:01:07:61:ae:06:
                    af:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8E:FD:C1:9B:DB:A2:D4:35:AA:B0:7E:BB:F7:DF:97:25:E2:ED:88
            X509v3 Authority Key Identifier:
                keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a323438303a3a2f34342d3434203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20fc:2480::/44

    Signature Algorithm: sha256WithRSAEncryption
         84:4b:f3:64:f7:6b:8a:74:ec:1d:fb:3a:b0:3a:a8:de:7d:e8:
         31:39:e8:42:a0:52:7a:b5:ab:05:73:5d:c0:58:3f:f8:a7:eb:
         4e:82:6a:f8:63:11:1c:ae:e6:82:84:a5:50:9d:25:4f:17:7d:
         b2:41:7e:71:92:c1:ea:72:cb:b4:67:3e:16:34:02:d9:db:21:
         92:cf:3c:da:1f:2a:2a:31:53:6d:0a:0a:ba:e7:5b:1e:c8:87:
         1c:6e:65:b7:cb:eb:04:eb:74:72:7e:70:17:d2:ad:73:c0:42:
         48:dd:4f:d5:64:0d:ec:96:85:f7:b6:62:8a:83:93:df:a0:19:
         2e:76:5e:95:18:29:5d:b8:09:b4:91:0b:92:33:5a:6c:6c:41:
         27:9b:c8:95:a0:59:80:39:b7:49:db:4d:95:59:cb:ea:c3:74:
         99:d0:aa:cd:70:8e:cc:88:b7:53:72:c5:e3:b0:9b:eb:ce:ff:
         5d:51:d7:0d:fb:4e:30:e4:0d:b1:93:33:15:1c:1e:cc:2b:2e:
         96:3c:13:ce:c9:f4:19:fb:60:71:af:b4:f9:c1:47:d3:31:85:
         66:35:a6:bb:1c:85:3e:02:f2:bb:67:e3:5b:0b:c8:13:79:e4:
         05:a3:74:c0:55:96:d0:d4:bc:64:41:b9:ae:38:8e:9b:07:31:
         67:56:0a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:28 2024 by rpki-client on console-ams.rpki-client.org