Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a3a2f33342d3334203d3e20323731363236.roa
File:                     323830343a376537383a3a2f33342d3334203d3e20323731363236.roa (raw, json)
Hash identifier:          b/7Q1B3cdmYwn7TzS9MrFoJ93EDRv2usW+KEJqkwk7s=
Subject key identifier:   E8:24:66:D6:2A:4A:7D:BC:DA:8A:39:05:68:FA:C3:93:1B:89:8B:1D
Certificate issuer:       /CN=226524F55AA764292A51BB669FC2AD0B4C417266
Certificate serial:       01259F7CF2E15C242D3AD00D1A5E6F6E2E8FE203
Authority key identifier: 22:65:24:F5:5A:A7:64:29:2A:51:BB:66:9F:C2:AD:0B:4C:41:72:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226524F55AA764292A51BB669FC2AD0B4C417266.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a3a2f33342d3334203d3e20323731363236.roa
Signing time:             Fri 22 Nov 2024 18:21:18 +0000
ROA not before:           Fri 22 Nov 2024 18:16:18 +0000
ROA not after:            Fri 21 Nov 2025 18:21:18 +0000
asID:                     271626
IP address blocks:        2804:7e78::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/226524F55AA764292A51BB669FC2AD0B4C417266.crl
                          rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/226524F55AA764292A51BB669FC2AD0B4C417266.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226524F55AA764292A51BB669FC2AD0B4C417266.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:25:9f:7c:f2:e1:5c:24:2d:3a:d0:0d:1a:5e:6f:6e:2e:8f:e2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226524F55AA764292A51BB669FC2AD0B4C417266
        Validity
            Not Before: Nov 22 18:16:18 2024 GMT
            Not After : Nov 21 18:21:18 2025 GMT
        Subject: CN=E82466D62A4A7DBCDA8A390568FAC3931B898B1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c2:24:6f:d6:75:d4:b1:60:6c:e5:a7:9a:a8:
                    23:cc:26:3d:d1:99:f1:d8:5d:df:88:47:8b:03:c8:
                    de:be:2e:e5:fc:7a:f6:3f:23:e9:c1:83:eb:c4:7d:
                    5b:d6:44:fe:86:04:84:f1:1c:1d:b6:df:8a:cd:8f:
                    08:4e:77:f9:7d:43:c8:48:5b:dd:57:3b:b7:82:ca:
                    c7:1d:fa:48:18:c9:81:00:ad:69:11:89:79:9f:03:
                    27:04:4e:5c:a2:93:9a:c9:be:6a:c7:b2:ae:f2:66:
                    3e:79:5d:cd:70:05:1c:bd:42:1a:92:48:fc:0a:b8:
                    9d:d6:db:9a:ad:89:ea:d1:04:64:5d:cc:2a:b7:c1:
                    21:8c:09:64:c4:9b:a7:10:fd:24:d2:5f:e0:82:dd:
                    c7:19:81:15:2e:28:bf:36:d7:06:47:bc:68:f5:b6:
                    54:a1:d7:44:3b:cc:f6:f8:fd:3b:a6:fa:cf:83:81:
                    1a:78:9e:ee:54:7d:27:d8:12:be:32:94:51:9c:a4:
                    68:98:37:d5:e1:1f:08:6b:bf:de:88:6f:21:ba:aa:
                    75:4f:3b:5b:8f:03:04:fb:0b:d0:f7:79:cd:a6:f1:
                    ca:ef:78:a1:06:84:80:19:ea:83:19:23:bf:99:79:
                    c5:e3:64:18:4c:6e:ad:31:8e:b0:0e:13:a0:42:17:
                    f1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:24:66:D6:2A:4A:7D:BC:DA:8A:39:05:68:FA:C3:93:1B:89:8B:1D
            X509v3 Authority Key Identifier:
                keyid:22:65:24:F5:5A:A7:64:29:2A:51:BB:66:9F:C2:AD:0B:4C:41:72:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/226524F55AA764292A51BB669FC2AD0B4C417266.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226524F55AA764292A51BB669FC2AD0B4C417266.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a3a2f33342d3334203d3e20323731363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e78::/34

    Signature Algorithm: sha256WithRSAEncryption
         3b:53:5c:8b:90:75:e1:3d:4b:07:c5:e9:57:bf:73:3a:c1:f0:
         bd:be:20:d9:57:e8:2f:1b:05:63:ef:4e:96:be:7f:f7:32:23:
         eb:f7:0a:1b:9d:c9:5e:ae:74:4d:75:99:20:66:9c:31:0d:cb:
         4e:db:83:5a:18:40:78:c7:11:1a:83:b0:f0:47:85:fa:3f:f5:
         4d:27:02:84:78:54:1c:25:f1:7b:b5:70:f7:c6:d1:1a:96:9c:
         a9:aa:34:f3:b5:b2:f8:cf:89:69:55:cd:c6:41:66:3c:5f:db:
         6e:d4:10:a7:91:70:a9:f7:e7:55:e0:c9:a5:f1:ad:f9:5e:64:
         d8:6a:79:c1:bc:59:46:cc:e8:df:51:72:f6:69:9d:61:02:69:
         33:c3:6f:e8:ee:bd:1b:fe:2e:45:9a:b8:47:9e:e7:56:5e:c3:
         29:0c:33:72:fc:f4:19:24:68:47:23:9f:38:fe:d4:8f:b2:46:
         c7:bb:84:0c:4e:85:6a:02:a3:0d:cb:d7:af:0e:69:44:47:d7:
         a2:ca:65:0a:bf:91:c2:5b:f0:1d:21:e1:f2:a5:f3:cc:f7:03:
         6c:ca:9e:4d:db:ff:b4:1d:1e:28:26:83:29:28:a1:8d:48:75:
         ec:02:06:96:98:4e:0f:81:0e:59:f0:49:c8:9a:86:d4:44:e3:
         62:08:2d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:16 2024 by rpki-client on console-ams.rpki-client.org