Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a343030303a3a2f33362d3336203d3e20323636353531.roa
File:                     323830343a336463303a343030303a3a2f33362d3336203d3e20323636353531.roa (raw, json)
Hash identifier:          VG3GmYzGkI5jt9v/MsJyHGrfE6zll2qtCwRkYstGuYI=
Subject key identifier:   BF:97:24:77:18:E5:EA:6F:3C:27:A1:5E:D5:DE:C7:D7:92:7C:12:2C
Certificate issuer:       /CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
Certificate serial:       4ADE4F44A2B45BABBA5A352EF7A86831981D099E
Authority key identifier: F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a343030303a3a2f33362d3336203d3e20323636353531.roa
Signing time:             Thu 15 Aug 2024 17:11:58 +0000
ROA not before:           Thu 15 Aug 2024 17:06:58 +0000
ROA not after:            Thu 14 Aug 2025 17:11:58 +0000
asID:                     266551
IP address blocks:        2804:3dc0:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl
                          rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:de:4f:44:a2:b4:5b:ab:ba:5a:35:2e:f7:a8:68:31:98:1d:09:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
        Validity
            Not Before: Aug 15 17:06:58 2024 GMT
            Not After : Aug 14 17:11:58 2025 GMT
        Subject: CN=BF97247718E5EA6F3C27A15ED5DEC7D7927C122C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:21:5f:b1:7c:75:18:cc:69:36:32:72:92:4f:
                    4b:e9:be:d7:45:92:01:63:17:c6:f7:57:93:7c:08:
                    e1:b5:06:e5:24:2a:3b:a5:12:a7:a0:07:56:84:b2:
                    1c:ca:45:33:a4:11:cf:a5:04:de:fd:6f:a3:3c:49:
                    b1:3e:54:ea:70:86:4b:b8:df:c0:79:6c:89:98:89:
                    ff:ef:ab:0f:19:76:34:6e:f9:da:a4:a7:21:82:46:
                    bc:b0:3a:27:ae:9b:8b:0a:f2:f2:a0:1c:b5:23:4b:
                    df:e1:ea:fb:ec:e2:10:c9:7a:8c:48:b9:25:ef:29:
                    07:4f:49:6f:93:d0:8f:f9:88:c8:fe:90:cc:e0:6e:
                    82:24:16:31:bd:0d:cc:de:f3:09:d0:86:ce:ed:de:
                    08:29:9e:3e:f0:aa:40:37:ae:ca:af:07:c7:13:7d:
                    e8:fe:b0:24:a2:ae:91:49:8a:ef:6a:b4:a6:26:f2:
                    66:d7:6f:a2:51:b2:2b:8b:d5:aa:1b:18:36:74:4a:
                    ce:be:14:4c:8d:37:f6:c5:1f:d9:cd:76:ea:eb:84:
                    b2:25:f9:7c:07:31:34:43:ba:6b:e5:71:9a:b4:5d:
                    62:9e:23:01:84:82:23:31:cf:b9:85:f2:f5:3f:63:
                    06:ca:47:8a:d1:68:6e:d5:6e:c5:ae:e6:c9:99:55:
                    5e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:97:24:77:18:E5:EA:6F:3C:27:A1:5E:D5:DE:C7:D7:92:7C:12:2C
            X509v3 Authority Key Identifier:
                keyid:F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a343030303a3a2f33362d3336203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dc0:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         79:00:13:8e:8b:be:b8:1f:80:c0:ab:6a:70:92:39:96:47:8b:
         82:9e:9c:87:c9:75:51:42:3c:ed:fe:c7:0e:3d:fd:7a:0d:87:
         11:1b:a3:0c:82:9a:70:dc:5a:04:5b:90:76:31:0e:aa:81:a3:
         36:de:10:41:b2:89:78:15:b9:6a:09:e5:f0:56:ed:dd:f2:b8:
         be:5d:bf:f2:31:2c:ed:96:dc:37:06:dc:c2:a7:28:f2:96:fc:
         ac:f7:ed:c5:cf:4e:7d:37:6a:8d:f4:ca:7c:3c:25:ce:20:3a:
         bd:d9:68:a2:ee:15:f4:a1:2d:17:d3:96:78:d0:f0:09:43:25:
         6b:87:a2:99:d8:1d:d4:90:e1:e9:57:a8:0d:78:63:c1:2a:ec:
         06:65:1d:4f:e0:43:d5:94:5a:eb:00:89:65:4f:71:b1:61:36:
         81:0b:da:ec:81:01:5a:09:73:bc:32:3c:91:2f:de:21:7d:4c:
         95:56:a7:cc:de:cb:7f:06:c7:52:ab:87:9a:88:36:9a:7d:8c:
         15:9f:48:07:d7:93:c7:de:9d:e7:c8:6e:60:16:30:01:aa:80:
         04:37:26:43:1d:0e:00:38:40:a6:be:8a:ec:29:6a:11:0a:9f:
         34:55:5e:1a:33:dd:23:0b:d6:4b:13:e9:d1:ea:aa:a7:a6:f9:
         d1:16:2e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:32 2024 by rpki-client on console-ams.rpki-client.org