Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3630323a3a2f34382d3438203d3e20323634353235.roa
File:                     323830343a323066633a3630323a3a2f34382d3438203d3e20323634353235.roa (raw, json)
Hash identifier:          9NIBnslulT06TQwAzwRlDGhyta9TvOq0bVe6NliFanA=
Subject key identifier:   5E:FD:9C:E1:05:8A:BA:57:B4:00:9B:8F:62:81:B8:C2:5F:CE:37:82
Certificate issuer:       /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial:       0ECC7D3170B09600E977C286413B6BB8EDB0D8EA
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3630323a3a2f34382d3438203d3e20323634353235.roa
Signing time:             Tue 30 Apr 2024 22:11:07 +0000
ROA not before:           Tue 30 Apr 2024 22:06:07 +0000
ROA not after:            Tue 29 Apr 2025 22:11:07 +0000
asID:                     264525
IP address blocks:        2804:20fc:602::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cc:7d:31:70:b0:96:00:e9:77:c2:86:41:3b:6b:b8:ed:b0:d8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
        Validity
            Not Before: Apr 30 22:06:07 2024 GMT
            Not After : Apr 29 22:11:07 2025 GMT
        Subject: CN=5EFD9CE1058ABA57B4009B8F6281B8C25FCE3782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:95:bc:b5:54:d7:bc:fd:8b:d2:c2:57:5b:55:
                    90:77:8c:b7:3f:d8:9e:cf:17:19:c9:8c:62:32:c9:
                    cb:5c:04:bc:0a:c3:a9:da:d8:dd:d5:92:d1:54:a1:
                    1c:9a:39:0c:c8:0e:48:19:ea:5a:8a:a9:61:48:c9:
                    c1:43:69:d7:37:7d:3b:fe:40:cd:b2:3e:11:bc:94:
                    27:e4:2a:63:3f:5c:ff:99:3d:7c:7b:38:c1:42:8c:
                    09:86:62:fa:b2:f6:b9:d8:87:12:53:aa:f8:fd:b7:
                    eb:f9:0c:4f:d0:9f:e5:72:d9:3b:69:16:e1:2a:67:
                    7d:54:ec:aa:b0:09:28:fa:3d:90:44:a0:b4:68:5e:
                    dd:67:b2:75:c2:49:00:3c:91:f2:01:7b:c7:f1:69:
                    64:7c:d3:94:cd:76:76:35:ec:50:4a:29:ec:aa:29:
                    cd:57:40:cf:9f:1d:ca:33:77:b0:9b:d2:aa:90:4b:
                    78:f9:76:f0:4a:25:bb:9c:a7:d6:87:0e:c1:d6:0c:
                    aa:cb:43:f3:80:2a:2b:f0:85:1e:78:6f:27:36:32:
                    78:63:a6:11:ad:d4:05:7a:e3:0e:50:9e:31:f4:f2:
                    1a:c4:58:9e:b4:47:ef:8b:ac:d8:6e:e8:ac:84:54:
                    2d:e5:30:4a:ba:71:42:3f:7b:68:e2:5f:a7:a3:04:
                    38:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FD:9C:E1:05:8A:BA:57:B4:00:9B:8F:62:81:B8:C2:5F:CE:37:82
            X509v3 Authority Key Identifier:
                keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3630323a3a2f34382d3438203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20fc:602::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:c9:d9:84:e7:83:d6:b8:19:3b:7a:2e:07:31:6b:f7:85:c5:
         c0:a7:79:d6:cf:ff:db:42:d5:48:9e:c0:54:c7:f1:35:55:a2:
         b3:1d:d7:b4:e7:5c:2c:ca:6a:90:3c:6b:cd:37:25:cc:d3:9d:
         fb:af:b8:99:5f:07:97:7b:20:57:08:e1:76:e8:d8:97:2a:c5:
         9c:db:02:5d:14:b3:16:e2:08:46:04:6a:56:54:43:23:b6:0d:
         dc:ad:b3:7c:59:b1:42:aa:33:3e:56:3e:f9:ff:cc:f0:3a:56:
         89:97:c6:b7:c6:44:d0:0d:d8:10:5e:b8:fa:ed:09:22:2d:b6:
         14:9a:09:3f:98:92:6b:1b:a6:0c:96:98:48:87:aa:98:9a:8f:
         e7:c3:11:a9:a0:8d:2b:19:30:92:c2:c0:8d:4d:27:11:69:8c:
         71:cd:fd:9a:14:74:50:ae:d9:a0:01:97:b4:6d:e0:7f:85:24:
         9c:98:9e:24:70:1b:83:45:41:7f:11:5f:75:7a:e0:59:49:7f:
         c2:e6:89:97:4e:73:3f:6b:48:8a:07:96:a1:e7:5a:e2:63:b9:
         c6:ef:e5:04:69:5c:d2:07:16:c7:f0:22:4d:98:53:48:cf:de:
         73:53:e3:c2:8b:bf:1f:b0:f1:5e:fc:5b:11:f7:b7:da:b8:f0:
         75:1e:ac:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:28 2024 by rpki-client on console-ams.rpki-client.org