Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/323830343a356338383a3a2f33322d3332203d3e20323638393134.roa
File:                     323830343a356338383a3a2f33322d3332203d3e20323638393134.roa (raw, json)
Hash identifier:          rKipbml6aG/hqThYGDQ/ehTMovkYdG1KY2IF+LL4Ik4=
Subject key identifier:   26:21:7D:EC:1F:90:5B:9E:57:B8:F7:BA:5C:2F:4B:78:D1:C9:97:88
Certificate issuer:       /CN=659E92F5914C997CC52D83DD0F162368DAC18EA2
Certificate serial:       78F079BD78ABEC3A61516A3691B67DD4FA39DFB7
Authority key identifier: 65:9E:92:F5:91:4C:99:7C:C5:2D:83:DD:0F:16:23:68:DA:C1:8E:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/323830343a356338383a3a2f33322d3332203d3e20323638393134.roa
Signing time:             Mon 18 Nov 2024 17:13:28 +0000
ROA not before:           Mon 18 Nov 2024 17:08:28 +0000
ROA not after:            Mon 17 Nov 2025 17:13:28 +0000
asID:                     268914
IP address blocks:        2804:5c88::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.crl
                          rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f0:79:bd:78:ab:ec:3a:61:51:6a:36:91:b6:7d:d4:fa:39:df:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659E92F5914C997CC52D83DD0F162368DAC18EA2
        Validity
            Not Before: Nov 18 17:08:28 2024 GMT
            Not After : Nov 17 17:13:28 2025 GMT
        Subject: CN=26217DEC1F905B9E57B8F7BA5C2F4B78D1C99788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:95:9e:87:8d:fa:cf:d6:9a:c5:ca:06:3b:76:
                    62:a3:44:d5:bd:d8:52:e7:6f:2f:5d:6a:b2:43:ad:
                    69:ca:0d:d5:fe:a7:7b:36:62:71:86:6a:c2:a5:27:
                    f4:0d:43:06:38:7f:40:3e:43:8f:0b:65:f2:cb:64:
                    f3:06:a6:9f:52:b5:82:c7:c6:b8:d8:36:37:26:12:
                    bd:26:d7:50:8e:8d:04:41:f8:e8:e3:d9:50:fa:1e:
                    fd:9c:87:47:04:51:36:65:45:36:b2:26:b2:7d:10:
                    02:3b:85:5a:43:ef:76:15:85:af:18:7b:c7:49:ac:
                    61:31:45:bd:d1:5f:48:94:59:e0:e6:ed:e8:f2:b0:
                    f9:e5:5e:6b:d0:e0:9b:bb:4e:81:e4:69:42:ed:85:
                    dc:7d:5f:ad:91:f7:77:79:0f:cd:df:5f:89:e4:ac:
                    aa:c9:da:ff:11:d4:a5:48:17:70:54:51:24:a5:db:
                    22:a4:49:cd:56:fe:c2:dd:f5:5c:fb:19:1f:e9:31:
                    eb:e7:0f:c7:4b:19:b2:3c:63:7f:3c:19:e2:26:75:
                    3b:64:8c:1b:39:a5:8a:9b:96:31:a2:4d:d7:7f:3e:
                    59:4c:5f:38:12:a1:36:f0:8a:86:b6:e8:69:fa:9d:
                    44:0d:94:ef:4d:83:c0:86:f5:c0:f4:64:e6:27:3f:
                    a9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:21:7D:EC:1F:90:5B:9E:57:B8:F7:BA:5C:2F:4B:78:D1:C9:97:88
            X509v3 Authority Key Identifier:
                keyid:65:9E:92:F5:91:4C:99:7C:C5:2D:83:DD:0F:16:23:68:DA:C1:8E:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/323830343a356338383a3a2f33322d3332203d3e20323638393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c88::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:2a:64:3a:57:63:1a:68:bc:87:01:58:1c:13:78:f9:a7:41:
         65:2b:0c:74:11:b8:ec:49:cb:d6:de:ef:82:f7:c3:b2:47:84:
         44:4d:41:c6:f1:68:db:d6:92:f9:c5:33:64:42:31:b8:6d:0e:
         df:3b:9a:cf:19:5d:97:d0:c8:98:17:47:e6:62:11:a8:6d:33:
         f4:2b:64:a9:dd:01:4f:71:71:48:20:51:ec:01:5a:a5:ef:89:
         e1:9a:8a:2c:23:46:cb:0a:23:8d:ed:6d:76:95:58:df:76:d4:
         b9:0d:29:a2:1c:ce:f1:11:cc:2b:b1:3a:35:13:8b:57:37:d5:
         f7:b4:d4:b6:c6:29:b8:01:70:a2:0c:f7:d1:ba:3e:27:07:7c:
         bb:50:97:f0:2d:29:b2:78:8e:95:01:6a:cc:fa:59:aa:2a:a6:
         6d:2a:d7:09:d2:e1:76:1f:2b:26:e3:45:f3:85:ea:61:66:8e:
         cf:29:f1:53:96:3c:cb:43:d8:0f:1f:af:46:b2:ae:96:92:30:
         12:e1:ee:a9:db:6c:0f:2f:08:a5:46:6e:af:cc:d7:a7:24:64:
         64:6e:96:fa:75:7b:0a:5e:6a:ab:90:32:88:b5:5a:bc:f2:9e:
         c7:9c:bc:0b:45:10:32:7c:2a:c8:83:2b:8d:7e:84:76:5e:56:
         ff:2a:14:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:10 2024 by rpki-client on console-ams.rpki-client.org