Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3a2f34302d3430203d3e20323634353235.roa
File:                     323830343a323066633a3a2f34302d3430203d3e20323634353235.roa (raw, json)
Hash identifier:          IUDfCprl2IP9g+INfgXOrUTIKjzPb+P16rBpavBuVyI=
Subject key identifier:   C2:64:4A:67:8D:65:08:34:72:F7:E1:4E:6A:1D:89:A6:C6:62:45:CC
Certificate issuer:       /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial:       0777E9C7DE30B8CB56A7AABBFAC0124261A9C919
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3a2f34302d3430203d3e20323634353235.roa
Signing time:             Tue 30 Apr 2024 22:05:14 +0000
ROA not before:           Tue 30 Apr 2024 22:00:14 +0000
ROA not after:            Tue 29 Apr 2025 22:05:14 +0000
asID:                     264525
IP address blocks:        2804:20fc::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:77:e9:c7:de:30:b8:cb:56:a7:aa:bb:fa:c0:12:42:61:a9:c9:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
        Validity
            Not Before: Apr 30 22:00:14 2024 GMT
            Not After : Apr 29 22:05:14 2025 GMT
        Subject: CN=C2644A678D65083472F7E14E6A1D89A6C66245CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:5f:9d:cb:ce:72:6c:19:70:49:74:a2:2f:
                    76:36:86:a9:44:64:5d:91:ae:4c:b8:66:1c:9a:7d:
                    d6:df:74:8d:c0:9d:01:b5:e2:be:c9:6b:84:f7:1c:
                    8c:64:06:12:a9:fb:be:68:fd:7b:02:39:43:23:a8:
                    ac:d1:97:e4:eb:57:d0:4a:3a:f6:6c:4f:dc:1d:20:
                    51:4c:e6:f1:3c:ad:2b:8f:86:13:8a:c9:ff:19:1e:
                    da:16:11:f1:51:4b:e0:26:6b:00:b9:c6:79:87:24:
                    f7:2e:76:d6:35:b5:15:ef:18:a3:a8:86:65:c2:22:
                    2b:c1:74:da:7b:f6:10:32:31:c6:31:08:2c:f5:67:
                    b7:31:a1:5b:1f:f9:24:2d:ca:c6:6a:79:9c:bc:2e:
                    30:90:ad:bf:7e:c5:ef:8a:b6:87:e1:8a:4c:ef:89:
                    47:95:f9:19:a7:7c:33:93:3a:ce:65:13:9e:d1:e5:
                    11:e4:e2:88:df:78:d4:20:0c:30:82:cc:b3:54:75:
                    e2:4e:83:f9:69:cb:38:ca:b9:a2:28:e0:a7:f1:b6:
                    47:3b:6d:44:1b:95:1f:73:b3:54:df:60:40:b4:f4:
                    25:8b:f5:70:16:c3:ea:2f:37:f5:72:ea:7a:67:16:
                    6d:34:3c:b8:1e:a1:c2:96:83:4b:80:fd:07:db:76:
                    d1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:64:4A:67:8D:65:08:34:72:F7:E1:4E:6A:1D:89:A6:C6:62:45:CC
            X509v3 Authority Key Identifier:
                keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3a2f34302d3430203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20fc::/40

    Signature Algorithm: sha256WithRSAEncryption
         54:71:d3:7f:71:21:dc:5b:e0:62:99:fb:29:e4:94:71:f4:8f:
         ec:15:63:17:71:7b:07:5a:ef:21:76:35:40:ba:58:27:79:6c:
         51:b4:66:b9:f4:16:10:8d:03:4c:61:db:34:59:fd:ff:72:19:
         a1:19:b8:a4:cb:bf:72:d2:71:c1:fd:fa:7b:fe:4b:93:20:7c:
         14:07:6c:eb:e8:03:aa:ef:15:cc:40:b7:2b:21:0e:43:2f:5d:
         80:07:ac:d7:70:c9:f1:dd:79:e7:22:1c:13:20:cb:96:42:89:
         e2:66:be:d7:1d:44:40:8b:dc:97:43:98:91:f2:b4:d0:a3:4c:
         9b:8e:f2:b9:cc:7a:09:ca:1a:bd:fd:e5:4a:55:0a:45:2e:75:
         1c:8d:85:0e:1b:20:cd:d6:ca:e6:01:81:c9:61:f2:01:26:27:
         1a:51:ac:e7:e0:a6:44:f4:9d:07:41:b8:9f:49:32:96:f0:53:
         6c:06:eb:e6:f2:d9:6e:c8:33:ec:73:de:c4:4a:10:60:2e:b4:
         a3:dd:c9:9c:0f:6c:a0:06:be:5d:16:cd:7a:41:32:be:8d:e5:
         3e:39:67:6e:4d:ce:ef:38:0d:c3:f0:af:c9:86:32:6e:96:42:
         34:43:43:6f:0a:63:20:ff:44:c3:d1:a5:c4:6d:00:11:06:6d:
         a8:06:5c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:28 2024 by rpki-client on console-ams.rpki-client.org