Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/323830343a333264633a3a2f3332203d3e20323632333232.roa
File:                     323830343a333264633a3a2f3332203d3e20323632333232.roa (raw, json)
Hash identifier:          WIWPAawchvHpEMVE7aHW/+uNkjuuomEAQ9XoKmAsILQ=
Subject key identifier:   26:E5:E2:C9:F0:71:03:85:D2:0D:38:12:F3:29:BF:4C:3F:C1:6E:3E
Certificate issuer:       /CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
Certificate serial:       4EB67942DFEC0823C0E9EB8C96E6A002A73B69F1
Authority key identifier: 2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/323830343a333264633a3a2f3332203d3e20323632333232.roa
Signing time:             Thu 04 Apr 2024 20:11:10 +0000
ROA not before:           Thu 04 Apr 2024 20:06:10 +0000
ROA not after:            Thu 03 Apr 2025 20:11:10 +0000
asID:                     262322
IP address blocks:        2804:32dc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl
                          rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b6:79:42:df:ec:08:23:c0:e9:eb:8c:96:e6:a0:02:a7:3b:69:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
        Validity
            Not Before: Apr  4 20:06:10 2024 GMT
            Not After : Apr  3 20:11:10 2025 GMT
        Subject: CN=26E5E2C9F0710385D20D3812F329BF4C3FC16E3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a4:62:f9:04:7e:be:6c:64:11:a5:67:a6:99:
                    e8:8b:d6:0a:bf:58:cf:a1:0c:ae:7e:b7:3e:8d:af:
                    77:e1:d3:c7:c4:2d:51:83:5e:f5:30:08:7f:e1:f7:
                    ea:d7:ad:0f:3e:8f:62:72:17:cc:27:33:28:d5:6a:
                    dd:38:e0:6e:09:9d:a0:c1:fc:15:b7:9b:d2:e4:82:
                    f3:c4:40:52:35:88:fb:90:a9:8c:19:c4:31:0d:75:
                    7b:6e:ba:19:d7:1f:42:6c:bf:3d:fb:fa:53:b8:e3:
                    f6:68:3b:8b:85:06:54:4b:f9:0c:2a:cd:7f:f1:b3:
                    a0:56:40:87:38:9d:cf:1b:86:ae:66:1d:4a:89:27:
                    17:8a:c3:5d:dd:14:6f:a8:4a:5e:4e:f9:90:f8:91:
                    71:08:d5:ee:4f:b9:33:23:90:33:06:28:79:38:d6:
                    7c:3c:a5:0c:cd:d8:96:ad:b4:2b:fd:a3:c5:27:38:
                    1a:02:d1:42:aa:7d:54:3c:e8:a7:4d:bd:59:9a:21:
                    64:2b:cc:e3:a5:88:41:a3:ce:49:ec:c3:39:14:ef:
                    5d:de:66:63:a2:e4:3a:2c:61:23:73:23:19:2e:2d:
                    4a:1f:ea:f1:07:2d:0f:3c:21:d9:92:9e:09:17:e0:
                    e6:32:18:5e:64:58:ca:66:0f:b1:17:e6:9c:d9:84:
                    d6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E5:E2:C9:F0:71:03:85:D2:0D:38:12:F3:29:BF:4C:3F:C1:6E:3E
            X509v3 Authority Key Identifier:
                keyid:2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/323830343a333264633a3a2f3332203d3e20323632333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:b0:2f:00:d6:13:a3:2c:13:59:9d:8f:64:b5:f1:9f:62:47:
         50:7a:3a:81:85:22:5d:41:02:2f:81:98:05:4a:29:4d:84:51:
         74:1f:7a:50:64:03:74:5f:04:d1:3f:dc:b5:8e:0e:f2:c1:4a:
         17:62:7e:96:c2:b1:d0:ae:92:db:28:63:5c:5d:8e:7a:93:1e:
         08:13:a1:0a:3f:2f:6e:d4:4a:26:39:65:d3:e3:fa:5b:ac:63:
         2f:6f:fc:3f:03:65:32:33:de:bb:8a:ee:bf:60:f5:29:f3:18:
         8c:61:2d:cd:44:bd:02:2d:ee:3b:9d:11:fa:ac:f9:e0:3f:e1:
         3b:4a:24:4e:e4:3a:30:ac:b4:6e:31:b9:3f:be:c2:f4:87:03:
         56:79:2c:ea:ff:c8:d9:92:a2:6d:22:b1:c5:72:da:a7:a9:12:
         e3:b2:48:94:f6:d2:09:c5:4f:ff:2c:c5:2d:ca:d0:b8:21:91:
         b3:81:65:19:82:e9:d8:d7:8c:57:44:7d:6f:a9:50:71:20:83:
         b3:10:ce:26:44:6e:da:ed:98:1e:d1:11:b8:a6:ba:f4:e7:a9:
         ce:38:c0:e9:ca:bc:20:00:65:4c:23:30:0d:19:56:63:ef:7c:
         e9:39:6e:34:26:21:55:ed:aa:db:88:dc:b4:54:c8:07:b1:07:
         7b:89:2f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:33 2024 by rpki-client on console-fra.rpki-client.org