Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/323830343a386135303a3a2f33322d3333203d3e20323733363631.roa
File:                     323830343a386135303a3a2f33322d3333203d3e20323733363631.roa (raw, json)
Hash identifier:          0WDyhBOph1DxiRLGRyRgd63tQdAlCC15T6TkdcYvTOQ=
Subject key identifier:   8F:AF:92:EC:6B:98:DB:9F:E1:A2:7A:2C:4A:E5:9C:97:24:3C:12:8D
Certificate issuer:       /CN=26792F1362DED6EFA867836B5CFDA1B01F5205A2
Certificate serial:       735949F54DFD1846A7BBE75596024B4ADA75997F
Authority key identifier: 26:79:2F:13:62:DE:D6:EF:A8:67:83:6B:5C:FD:A1:B0:1F:52:05:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26792F1362DED6EFA867836B5CFDA1B01F5205A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/323830343a386135303a3a2f33322d3333203d3e20323733363631.roa
Signing time:             Fri 05 Jul 2024 16:59:23 +0000
ROA not before:           Fri 05 Jul 2024 16:54:23 +0000
ROA not after:            Fri 04 Jul 2025 16:59:23 +0000
asID:                     273661
IP address blocks:        2804:8a50::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/26792F1362DED6EFA867836B5CFDA1B01F5205A2.crl
                          rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/26792F1362DED6EFA867836B5CFDA1B01F5205A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26792F1362DED6EFA867836B5CFDA1B01F5205A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:59:49:f5:4d:fd:18:46:a7:bb:e7:55:96:02:4b:4a:da:75:99:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26792F1362DED6EFA867836B5CFDA1B01F5205A2
        Validity
            Not Before: Jul  5 16:54:23 2024 GMT
            Not After : Jul  4 16:59:23 2025 GMT
        Subject: CN=8FAF92EC6B98DB9FE1A27A2C4AE59C97243C128D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0c:1d:ab:bc:a9:63:b7:c8:a2:76:03:53:88:
                    e1:bf:9c:fd:86:a2:80:93:1f:d6:5c:d3:30:c6:66:
                    4b:98:ea:e0:f5:b9:99:e9:ef:d1:09:b4:f3:46:e4:
                    92:46:ff:1d:41:f5:be:e5:74:cb:83:dc:38:37:98:
                    10:ec:bb:c4:77:70:4e:a7:7f:f4:72:82:9f:05:be:
                    6f:38:83:e6:86:9d:47:fd:bf:25:9f:9e:7e:b8:53:
                    52:33:ef:92:77:42:e0:7e:ae:0f:64:07:71:0f:63:
                    17:29:02:05:53:9b:f2:7d:69:f2:f0:81:c4:d5:fc:
                    0b:7b:60:a4:62:b9:ce:3a:69:08:0c:6a:ab:16:59:
                    1d:68:66:7f:78:05:a9:d2:fd:13:f6:f4:84:af:61:
                    36:7c:09:1b:c4:cf:59:b6:86:8b:a2:ed:e3:4c:d5:
                    01:50:06:ea:a6:a1:d1:17:34:9a:4e:2f:90:f5:11:
                    81:13:56:1a:86:22:7b:47:65:79:6e:6b:03:3d:f1:
                    77:23:31:34:ce:36:b9:be:41:21:18:4d:4b:5e:4e:
                    01:08:25:44:b0:56:20:c4:7c:2b:ad:1e:92:4c:85:
                    a2:3a:0f:93:db:4b:d9:11:34:9c:44:61:6a:03:f8:
                    31:2a:66:c1:be:ba:8b:15:1c:84:62:ff:8c:b4:f8:
                    f6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AF:92:EC:6B:98:DB:9F:E1:A2:7A:2C:4A:E5:9C:97:24:3C:12:8D
            X509v3 Authority Key Identifier:
                keyid:26:79:2F:13:62:DE:D6:EF:A8:67:83:6B:5C:FD:A1:B0:1F:52:05:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/26792F1362DED6EFA867836B5CFDA1B01F5205A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26792F1362DED6EFA867836B5CFDA1B01F5205A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/323830343a386135303a3a2f33322d3333203d3e20323733363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a50::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:4e:d1:a1:bb:97:0f:8d:86:79:f5:80:97:ae:b9:88:73:dc:
         a3:a5:e5:fa:f8:76:0c:28:9c:aa:c0:4c:4b:eb:24:59:67:55:
         a5:8b:78:79:8a:99:3f:6e:b8:79:6a:e8:7c:96:42:eb:89:2c:
         19:ae:8a:7b:4d:81:9f:91:fa:df:32:25:53:83:e4:cb:aa:74:
         a2:20:59:3e:85:38:ce:56:27:86:8e:a9:f2:fc:b5:f1:b0:4d:
         ad:cb:aa:35:d3:d5:7e:9c:72:04:e6:fc:e4:2f:b9:92:7d:ed:
         37:76:61:09:57:a5:cc:d4:5f:aa:62:9a:04:87:c6:3b:72:ab:
         0a:64:dd:9b:b4:da:37:f7:0d:a7:6a:32:aa:f9:f6:ac:96:16:
         9a:61:2b:a8:bb:1e:ea:55:f8:43:b6:aa:fa:c8:8f:d3:f4:0e:
         13:14:08:cb:17:48:d3:fd:90:39:25:1d:d3:bc:c0:ec:a1:c4:
         8a:17:b1:b4:c4:90:0d:a3:aa:18:8e:26:c2:4d:40:59:95:6e:
         51:fe:08:9d:26:ff:dd:2f:18:23:59:97:31:b7:27:4e:8d:1e:
         16:8e:42:1e:b2:67:83:b3:70:49:ce:6d:5f:9c:dc:49:a3:67:
         2e:b9:6f:47:b8:1f:9c:3b:38:c0:ef:53:c6:12:f7:1c:e8:63:
         2b:d1:15:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:36 2024 by rpki-client on console-ams.rpki-client.org