Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a333030303a3a2f33362d3336203d3e20323636353531.roa
File:                     323830343a336463303a333030303a3a2f33362d3336203d3e20323636353531.roa (raw, json)
Hash identifier:          A20VaXOnI4LjA3YD8wCB8nDXCvdmxLuvrtfIiUnpy6M=
Subject key identifier:   B5:A0:3A:09:82:C7:EB:42:6B:5B:EF:B0:CD:5B:D4:B5:3D:6F:5E:A0
Certificate issuer:       /CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
Certificate serial:       5519BEE154F0797F1D207BDC05938DDDDB1223A6
Authority key identifier: F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a333030303a3a2f33362d3336203d3e20323636353531.roa
Signing time:             Thu 15 Aug 2024 17:11:57 +0000
ROA not before:           Thu 15 Aug 2024 17:06:57 +0000
ROA not after:            Thu 14 Aug 2025 17:11:57 +0000
asID:                     266551
IP address blocks:        2804:3dc0:3000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl
                          rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:19:be:e1:54:f0:79:7f:1d:20:7b:dc:05:93:8d:dd:db:12:23:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
        Validity
            Not Before: Aug 15 17:06:57 2024 GMT
            Not After : Aug 14 17:11:57 2025 GMT
        Subject: CN=B5A03A0982C7EB426B5BEFB0CD5BD4B53D6F5EA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ea:8c:64:4e:f9:f4:bf:05:7a:6c:bc:74:a0:
                    0a:e5:80:b1:ed:78:70:6d:f3:3e:a3:ba:8f:89:3a:
                    5f:b5:3a:7c:6c:7f:33:b7:3e:75:33:5a:a9:36:09:
                    6e:87:3e:5b:88:fc:be:01:07:3b:04:fc:5a:84:bb:
                    6f:4e:82:67:be:9b:9c:38:47:75:23:7f:3b:e1:76:
                    b2:5c:46:3f:76:07:18:ee:b5:f6:d0:0d:bf:1a:6d:
                    72:ac:66:8f:2a:64:57:34:c6:a6:d5:39:a9:0f:13:
                    d8:70:2e:0e:a9:05:bb:85:16:44:41:6c:54:85:85:
                    94:a0:ef:bf:32:f4:d1:cb:87:6e:b4:a2:b9:f0:d6:
                    ca:01:75:39:2c:05:22:11:e9:9c:1b:25:b6:36:03:
                    ca:14:48:51:6f:3f:90:78:60:2c:69:09:7f:27:84:
                    df:cc:d8:29:24:da:11:82:46:50:7e:3e:16:8c:9c:
                    17:56:4e:e7:b4:a5:10:eb:5c:63:58:be:f7:44:89:
                    f4:d5:85:f9:3b:3f:db:49:84:32:2b:80:bd:7c:74:
                    05:f6:e5:e8:7a:f3:51:b8:14:6e:82:71:dd:01:4e:
                    ed:c8:37:69:99:e6:06:b3:1e:cd:02:0d:f8:bd:5f:
                    20:75:c9:05:64:fb:21:ad:26:ab:f6:ec:91:ff:f5:
                    69:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A0:3A:09:82:C7:EB:42:6B:5B:EF:B0:CD:5B:D4:B5:3D:6F:5E:A0
            X509v3 Authority Key Identifier:
                keyid:F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a333030303a3a2f33362d3336203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dc0:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1c:d6:4a:a0:28:74:e3:48:2e:57:aa:2c:70:3f:71:82:06:e6:
         11:02:52:86:94:4d:d9:08:83:1f:46:2c:d7:46:88:af:ef:f7:
         ce:77:92:88:88:2b:27:04:49:d4:9c:e5:23:eb:13:4b:db:c6:
         3c:cc:87:9b:d7:91:3f:08:18:65:ee:53:49:d3:4b:ce:01:12:
         cf:be:44:c1:5b:c4:1c:48:30:f0:68:e3:af:e6:5f:61:c3:a3:
         25:5c:5f:f6:45:31:3d:80:7a:9e:ed:23:1b:4d:da:13:04:e7:
         17:62:7e:0b:ad:0d:f2:2b:2f:68:21:8a:74:d5:fa:ea:00:a3:
         45:30:65:8b:92:ab:2c:98:26:dd:9c:a3:a5:86:35:61:6c:2f:
         1a:ba:ee:22:f0:b2:4e:ce:7d:67:1b:51:13:c7:44:d0:99:0c:
         be:f6:3a:b3:83:56:bc:f6:1c:04:2f:45:fd:ad:7d:a8:22:68:
         a6:4f:19:1c:c0:e6:85:78:b4:51:d6:96:02:97:31:11:4e:90:
         68:3c:32:d2:d6:a0:f6:51:b6:1a:b7:04:6f:15:09:ee:af:5f:
         b5:b6:ec:f8:8b:15:b9:7d:97:5d:68:f8:9a:fd:23:39:24:3a:
         4d:03:d6:a9:a2:8d:a3:77:e3:b1:d8:e9:37:f4:1f:f1:19:57:
         6f:4c:39:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:32 2024 by rpki-client on console-ams.rpki-client.org