Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a343030303a3a2f33342d3334203d3e20323731363236.roa
File:                     323830343a376537383a343030303a3a2f33342d3334203d3e20323731363236.roa (raw, json)
Hash identifier:          n+RJmpf7M4pseHB/yCDrMIBQ69v4xLuKuhm9m4kkB1k=
Subject key identifier:   CD:19:53:43:DB:43:26:5E:5B:41:2E:8D:BC:ED:3C:C4:BB:5B:55:27
Certificate issuer:       /CN=226524F55AA764292A51BB669FC2AD0B4C417266
Certificate serial:       2BEEAFB4D6583091E45117A93064E4D17FC8ACC0
Authority key identifier: 22:65:24:F5:5A:A7:64:29:2A:51:BB:66:9F:C2:AD:0B:4C:41:72:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226524F55AA764292A51BB669FC2AD0B4C417266.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a343030303a3a2f33342d3334203d3e20323731363236.roa
Signing time:             Fri 22 Nov 2024 18:21:20 +0000
ROA not before:           Fri 22 Nov 2024 18:16:20 +0000
ROA not after:            Fri 21 Nov 2025 18:21:20 +0000
asID:                     271626
IP address blocks:        2804:7e78:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/226524F55AA764292A51BB669FC2AD0B4C417266.crl
                          rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/226524F55AA764292A51BB669FC2AD0B4C417266.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226524F55AA764292A51BB669FC2AD0B4C417266.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ee:af:b4:d6:58:30:91:e4:51:17:a9:30:64:e4:d1:7f:c8:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226524F55AA764292A51BB669FC2AD0B4C417266
        Validity
            Not Before: Nov 22 18:16:20 2024 GMT
            Not After : Nov 21 18:21:20 2025 GMT
        Subject: CN=CD195343DB43265E5B412E8DBCED3CC4BB5B5527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f5:d5:a2:c3:4a:69:5f:eb:6e:90:83:0a:68:
                    55:1d:fd:08:02:a1:d4:a7:2d:d7:9a:7c:9a:00:5d:
                    2a:d9:34:81:de:fe:14:41:4f:90:93:e0:6b:0f:de:
                    7a:7b:8a:39:15:88:d5:c5:4b:4b:05:62:ce:5c:5d:
                    a8:0c:49:2b:31:88:e7:aa:33:75:d9:76:b0:48:06:
                    a0:bd:dc:09:b4:1c:7a:89:87:02:5e:18:47:11:39:
                    20:ab:cd:42:54:87:9c:b2:a5:df:96:37:02:86:6c:
                    46:84:24:48:e4:76:ab:d0:8e:6d:e7:fd:80:c0:98:
                    8f:3a:04:ef:6f:89:ed:7e:4f:59:f4:59:cf:41:3c:
                    39:66:f0:24:ff:33:8c:84:bf:30:ea:19:8e:37:39:
                    b0:d8:57:29:c7:04:7c:46:49:a6:1c:d3:2e:b6:1a:
                    3d:6a:4e:f1:ae:5a:55:c3:ed:14:68:ad:3c:ae:22:
                    e7:9f:ed:cf:a6:fb:9d:bc:40:87:57:eb:a9:7f:6f:
                    97:12:dd:14:7e:f7:dd:52:f0:a3:d7:26:23:4e:ea:
                    5f:3f:f0:1e:c8:66:d4:e8:05:c4:1b:52:65:06:e2:
                    e4:15:b1:af:46:dd:ff:42:88:f2:f7:a1:21:d6:e3:
                    09:e7:ef:cb:42:f5:d1:a6:cf:0c:f0:9c:70:ea:0e:
                    77:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:19:53:43:DB:43:26:5E:5B:41:2E:8D:BC:ED:3C:C4:BB:5B:55:27
            X509v3 Authority Key Identifier:
                keyid:22:65:24:F5:5A:A7:64:29:2A:51:BB:66:9F:C2:AD:0B:4C:41:72:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/226524F55AA764292A51BB669FC2AD0B4C417266.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226524F55AA764292A51BB669FC2AD0B4C417266.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a343030303a3a2f33342d3334203d3e20323731363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e78:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7c:0c:11:7e:f1:66:61:d9:59:cd:b3:8a:c4:cf:4e:37:8c:35:
         4f:df:e1:0d:0b:6d:bc:52:df:e9:f4:95:fc:9a:59:f2:2f:40:
         49:73:b4:24:3d:fe:20:e1:20:6b:2f:80:e9:d2:0c:ea:81:98:
         a1:bc:70:81:43:70:fd:a4:cb:dd:03:16:ae:ff:9f:d3:5e:4e:
         22:ae:2a:1b:10:7f:38:f9:05:c1:26:0a:e3:39:3d:72:e1:f6:
         db:13:aa:74:9c:94:49:90:47:b0:71:c8:f6:4a:43:65:36:1a:
         b4:1e:f9:13:16:21:f8:24:c5:dd:16:79:11:f8:e5:a7:3d:34:
         ce:b2:35:d1:40:86:c3:ad:a3:d0:7e:c5:6b:8e:ae:27:c9:90:
         f1:ac:08:0e:d0:84:2a:e8:f6:6a:d3:c5:c5:14:be:0d:d0:38:
         8c:5b:11:6e:db:85:3d:30:6b:e2:71:62:f1:04:e7:b0:a1:c7:
         91:18:31:21:26:92:a6:87:da:3c:76:2b:67:9a:1a:1d:a8:a1:
         14:b2:1c:dc:b5:7b:a1:70:0f:62:fa:bc:8b:96:93:9b:0d:1f:
         4b:fc:b6:37:e6:23:d7:60:60:45:a6:00:d5:25:be:60:02:39:
         58:9b:7b:c5:d7:05:7f:06:fa:f2:93:33:05:7b:13:8f:88:9e:
         b0:0f:54:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:15 2024 by rpki-client on console-fra.rpki-client.org