Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3630303a3a2f34302d3430203d3e20323634353235.roa
File:                     323830343a323066633a3630303a3a2f34302d3430203d3e20323634353235.roa (raw, json)
Hash identifier:          KUIoOdLyFAks0gKhTs6OYoBTuAVneKOUWMlaDZQPb84=
Subject key identifier:   4E:62:5C:3A:03:07:E4:30:C9:C8:69:0A:F7:E1:CB:55:C7:B8:EF:9E
Certificate issuer:       /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial:       4F1CE13A344FD2928299D12EAD6A338A1119B81E
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3630303a3a2f34302d3430203d3e20323634353235.roa
Signing time:             Tue 30 Apr 2024 22:06:00 +0000
ROA not before:           Tue 30 Apr 2024 22:01:00 +0000
ROA not after:            Tue 29 Apr 2025 22:06:00 +0000
asID:                     264525
IP address blocks:        2804:20fc:600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:1c:e1:3a:34:4f:d2:92:82:99:d1:2e:ad:6a:33:8a:11:19:b8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
        Validity
            Not Before: Apr 30 22:01:00 2024 GMT
            Not After : Apr 29 22:06:00 2025 GMT
        Subject: CN=4E625C3A0307E430C9C8690AF7E1CB55C7B8EF9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:5e:34:ba:52:89:a9:db:8f:2f:0f:77:c3:7a:
                    38:e4:42:4d:3c:7f:71:72:f2:f5:b8:c8:4c:6c:27:
                    ea:c9:4b:d7:56:1f:79:84:4e:df:18:60:44:df:df:
                    32:12:96:0f:0a:cd:26:39:44:87:bd:cf:58:64:8f:
                    7f:8f:6c:ca:e3:9b:04:00:06:42:93:a7:bb:87:da:
                    5f:0e:5e:db:46:01:c5:25:ff:24:72:1b:7e:0c:93:
                    3b:91:43:2e:62:31:44:3d:88:d6:b8:70:55:41:ba:
                    87:1d:b5:b8:59:da:8e:f0:7d:98:d6:9a:54:d1:75:
                    30:08:64:c3:61:e6:ff:0d:5b:cc:0a:d6:6b:ac:32:
                    d9:2f:d3:99:2c:69:1c:3d:f2:c7:9f:94:80:b2:b4:
                    b8:57:ec:9c:76:61:05:f7:0d:8c:b3:87:25:13:d0:
                    83:2a:c4:47:2a:ae:fc:30:01:c7:90:9b:88:55:98:
                    4e:14:24:df:a9:53:0a:d7:bf:7e:85:59:1b:f3:ff:
                    8d:0a:d2:9d:a2:49:2a:f6:ae:1c:5c:16:26:a0:02:
                    27:3d:c9:0e:d9:56:cc:61:66:53:a2:79:c5:81:00:
                    2f:a0:4d:aa:8c:f2:a4:ff:a2:d6:8a:49:b9:1c:27:
                    ee:c5:9c:6c:56:fb:31:7d:07:43:7a:16:84:fb:99:
                    e2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:62:5C:3A:03:07:E4:30:C9:C8:69:0A:F7:E1:CB:55:C7:B8:EF:9E
            X509v3 Authority Key Identifier:
                keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3630303a3a2f34302d3430203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20fc:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:35:94:82:fc:b2:2e:e1:86:d8:47:75:f2:49:03:93:ac:da:
         4c:a0:7f:e8:a4:c1:81:11:83:42:f1:db:b4:ec:c2:70:29:85:
         3b:5d:ef:be:4c:8c:79:13:10:3e:be:5b:31:bf:6d:44:c8:01:
         0b:ee:fb:70:8e:48:5d:1a:c2:ff:ba:24:52:97:86:bd:37:91:
         09:9f:8b:74:d4:01:ff:33:f9:cf:2f:58:0c:ac:b4:e9:4d:8e:
         80:5a:1f:09:ef:3f:97:d9:78:31:f5:e7:0b:b9:73:df:59:e0:
         34:92:f2:f8:37:00:69:82:85:66:71:ba:5e:e2:e5:47:a8:77:
         05:45:09:92:18:21:ef:98:40:9a:00:ed:4b:91:f7:38:38:53:
         80:2f:50:c1:cc:77:0a:89:23:90:44:19:f2:f1:28:f7:46:c5:
         41:4e:7c:42:16:c4:7a:af:00:c3:da:58:8d:17:e0:80:ad:90:
         aa:f4:53:ce:7f:2b:a2:2f:2b:af:2c:62:98:f0:8d:db:7c:57:
         bd:dd:43:17:89:f5:c7:51:0c:58:14:5c:c5:2d:9e:cd:7c:de:
         8d:15:c8:1b:cc:14:a3:81:ac:31:81:91:28:ae:bb:47:64:3d:
         eb:8f:fe:f0:8a:4c:e1:3d:12:ba:80:84:09:2b:a3:fb:de:1b:
         37:0f:59:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:02 2024 by rpki-client on console-fra.rpki-client.org