Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3a2f34342d3434203d3e20323634353235.roa
File:                     323830343a323066633a3a2f34342d3434203d3e20323634353235.roa (raw, json)
Hash identifier:          2azTZSygxY0IdypOLbRwS4VF7pTryQASMwytE4yA49Y=
Subject key identifier:   71:E6:45:74:C5:CD:6C:84:A8:E6:DA:65:29:A1:81:06:26:EF:43:86
Certificate issuer:       /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial:       2F9B085200D995F318E286537F2818EC46639607
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3a2f34342d3434203d3e20323634353235.roa
Signing time:             Tue 30 Apr 2024 22:09:16 +0000
ROA not before:           Tue 30 Apr 2024 22:04:16 +0000
ROA not after:            Tue 29 Apr 2025 22:09:16 +0000
asID:                     264525
IP address blocks:        2804:20fc::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9b:08:52:00:d9:95:f3:18:e2:86:53:7f:28:18:ec:46:63:96:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
        Validity
            Not Before: Apr 30 22:04:16 2024 GMT
            Not After : Apr 29 22:09:16 2025 GMT
        Subject: CN=71E64574C5CD6C84A8E6DA6529A1810626EF4386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:6d:e3:7b:1e:fa:61:bc:93:04:bf:94:68:
                    1a:b7:1c:a4:95:aa:4d:58:f8:1b:0e:fd:f6:0e:24:
                    72:23:0c:34:99:9f:a0:96:cf:fc:f5:7c:7b:a1:cf:
                    00:0a:53:ed:51:f8:3a:e1:fd:f2:c3:71:3a:00:b8:
                    7e:7a:53:8e:02:7d:2a:41:ab:6a:dd:bf:58:f9:99:
                    6c:eb:2b:05:e1:b5:b4:2c:ba:1c:40:c9:6b:f3:92:
                    4e:c9:65:65:6b:07:2a:dc:23:f4:09:51:e0:f0:f3:
                    37:a7:4b:0e:38:5d:bd:72:12:4b:17:1e:20:32:53:
                    bf:1e:e4:5f:fc:41:c6:ae:ab:26:b3:51:f7:e9:b2:
                    14:09:3a:82:d6:f1:2c:64:f9:a2:04:e7:f5:04:26:
                    67:d3:30:80:ec:b4:a8:40:b8:ab:a8:f5:5b:1f:7b:
                    92:61:6c:bc:f0:d5:4a:6a:b2:19:21:43:a8:71:44:
                    13:57:e2:c8:44:8b:94:76:15:bf:79:b4:be:05:04:
                    a0:58:c2:58:b3:a1:43:01:2b:bb:45:ca:9c:95:b8:
                    2c:00:13:2c:a2:a6:b8:b2:27:01:8c:9b:d3:60:52:
                    c1:68:bf:2f:2d:2d:8c:5f:e8:c0:e0:ae:de:72:0c:
                    fd:05:91:b4:d2:35:fc:e8:05:54:be:e6:76:ea:df:
                    83:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E6:45:74:C5:CD:6C:84:A8:E6:DA:65:29:A1:81:06:26:EF:43:86
            X509v3 Authority Key Identifier:
                keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3a2f34342d3434203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20fc::/44

    Signature Algorithm: sha256WithRSAEncryption
         8b:90:95:94:84:d0:d5:59:ef:f3:d2:35:a1:c8:7e:f0:47:05:
         59:1b:71:38:87:65:71:46:17:74:9d:71:1d:e1:ae:e2:a8:9a:
         20:ec:13:ec:23:99:7e:65:e2:37:6f:fb:a4:79:39:1c:98:ec:
         4b:13:aa:3c:e9:4d:ed:e2:af:ba:70:3e:d2:63:db:d5:b5:e2:
         c6:34:94:8f:f0:44:bd:15:cd:a1:65:8d:79:1f:9b:c0:05:e7:
         e4:13:cf:28:54:56:73:8f:a2:9e:1b:6a:90:c2:df:4b:7c:4d:
         64:19:86:8a:5a:42:00:ae:5c:4a:31:70:36:47:92:bc:e7:c8:
         1a:13:a2:61:7e:6c:30:d4:e5:3b:0a:a4:59:56:9e:b7:e0:3e:
         7d:30:19:13:46:12:5e:45:44:af:ae:0e:9a:34:80:bb:04:bc:
         ad:6d:2d:14:8a:30:db:b1:fb:61:af:d7:a7:07:df:58:b2:24:
         2d:bb:63:9e:82:de:0b:ee:c1:29:2a:6b:4e:cd:fd:71:4a:fd:
         d2:f5:77:21:c5:d4:6c:93:fd:a4:6e:4c:fa:c1:38:71:44:b0:
         fb:38:ac:70:2b:73:db:23:b2:c0:f5:fa:68:e2:2d:0c:4a:3e:
         59:2f:9c:3a:ec:6e:2f:fa:7d:3c:df:b7:3e:20:f4:0d:c3:8d:
         19:c7:dc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:02 2024 by rpki-client on console-fra.rpki-client.org