Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a643030303a3a2f33372d3337203d3e20323636353531.roa
File:                     323830343a336463303a643030303a3a2f33372d3337203d3e20323636353531.roa (raw, json)
Hash identifier:          sgfIFXIEeIUUtUp003QU9ZI5FGmq6l4wD/AERUbvxxY=
Subject key identifier:   1B:0E:2A:09:88:63:33:F0:99:FA:F6:E7:FC:B8:33:89:01:E6:2A:7F
Certificate issuer:       /CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
Certificate serial:       7BE3A7552A4F67F3534CDF10D9148076A0AFAD5D
Authority key identifier: F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a643030303a3a2f33372d3337203d3e20323636353531.roa
Signing time:             Thu 15 Aug 2024 17:11:58 +0000
ROA not before:           Thu 15 Aug 2024 17:06:58 +0000
ROA not after:            Thu 14 Aug 2025 17:11:58 +0000
asID:                     266551
IP address blocks:        2804:3dc0:d000::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl
                          rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e3:a7:55:2a:4f:67:f3:53:4c:df:10:d9:14:80:76:a0:af:ad:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
        Validity
            Not Before: Aug 15 17:06:58 2024 GMT
            Not After : Aug 14 17:11:58 2025 GMT
        Subject: CN=1B0E2A09886333F099FAF6E7FCB8338901E62A7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:42:da:8d:a6:c2:ac:4a:aa:42:af:33:18:
                    43:18:30:9b:f6:46:dd:93:0f:a4:c6:7d:16:59:86:
                    a2:b9:71:5f:8f:c6:7f:7a:ab:80:5f:2d:2f:25:69:
                    57:96:90:3b:0c:0d:f3:43:53:8e:f7:ef:e4:dc:00:
                    84:e0:ca:75:07:e0:e5:0a:0c:0b:c7:bd:8e:5b:cd:
                    3e:cb:1e:e5:02:6d:e9:93:8c:ad:76:11:b9:a2:a8:
                    4d:4c:10:2f:d3:e1:d0:7e:81:1d:1f:2b:f7:83:00:
                    bf:b8:c4:bb:bd:a6:84:68:9a:d4:a3:84:a5:e3:40:
                    14:7a:81:79:78:ad:4f:a2:8d:b5:fa:c8:e1:a3:3b:
                    db:a3:40:f5:cb:9d:35:1e:b7:b2:28:7b:b0:63:1b:
                    aa:02:cd:5a:5e:6b:9b:0e:81:8d:55:23:02:18:2b:
                    fe:ac:23:23:2f:44:1b:76:c2:b9:9b:f0:19:32:f0:
                    f3:c4:36:6c:6a:cc:ea:7d:41:51:16:d0:67:82:ef:
                    1c:cd:33:0c:9b:82:88:7a:8e:f8:61:fd:89:c3:d2:
                    51:c7:8f:38:79:54:10:c9:c6:11:83:25:7c:94:c4:
                    5a:9f:0f:3c:3a:de:57:ea:65:e5:29:bc:2d:08:e5:
                    8c:36:e5:ad:71:04:94:ba:31:aa:6c:a2:50:16:dc:
                    fb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0E:2A:09:88:63:33:F0:99:FA:F6:E7:FC:B8:33:89:01:E6:2A:7F
            X509v3 Authority Key Identifier:
                keyid:F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a643030303a3a2f33372d3337203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dc0:d000::/37

    Signature Algorithm: sha256WithRSAEncryption
         1d:29:c5:ce:d4:86:91:df:e1:78:d8:98:34:ef:99:d5:67:f5:
         7b:f8:e1:cb:5e:93:2d:7e:05:70:c4:e1:cd:05:3d:40:86:23:
         6d:bd:3f:33:ad:dc:d1:c2:da:b5:d0:a1:52:01:3b:ba:3c:a7:
         03:67:34:e9:ce:cc:9b:4f:9a:31:19:5a:ce:31:e5:12:e5:a5:
         39:5b:85:0e:9e:ba:5e:b8:0b:96:e1:4a:a6:fd:33:99:48:b1:
         ef:25:7f:d4:03:11:33:06:cf:ff:8d:aa:ad:ad:1f:d6:53:9e:
         64:92:ce:6a:97:86:7d:c5:27:fd:c0:df:b6:64:51:7f:aa:cd:
         c4:ee:8e:db:c2:12:51:8d:0c:ea:9f:90:3b:ad:67:f7:d6:c5:
         5a:65:38:58:82:d0:7e:91:e5:97:d8:e9:b1:53:60:e3:cd:cd:
         a2:45:d9:59:cb:2d:e7:9f:b9:5b:0f:45:4a:c8:51:55:80:04:
         73:69:75:ea:93:fa:7d:3d:83:43:79:41:13:08:e1:64:9e:4d:
         94:0b:9a:de:31:c3:05:44:dd:73:38:00:bc:60:13:28:76:78:
         58:a3:35:2e:b8:4a:52:1e:0f:78:a1:40:6c:e8:cb:80:9e:25:
         c4:19:a1:c8:4b:84:6c:fe:5a:88:94:f0:eb:07:18:32:63:06:
         1e:9a:47:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:49 2024 by rpki-client on console-fra.rpki-client.org