Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/323830343a353264303a3a2f33322d3438203d3e20323638353433.roa
File:                     323830343a353264303a3a2f33322d3438203d3e20323638353433.roa (raw, json)
Hash identifier:          DF0fxzsvgMk8HM/bUDfJhx2+gZfAoVjbKiGitUg7OZo=
Subject key identifier:   38:F7:FB:D1:E8:81:75:F7:C6:42:CF:82:6B:9A:06:44:EC:CB:C0:FC
Certificate issuer:       /CN=C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88
Certificate serial:       66351DC2FEA1C4F2AF1917F8A311B665FFAEAEA6
Authority key identifier: C2:CB:7C:1A:52:E7:5C:0D:4B:39:4E:09:FC:63:EA:CF:FD:69:2D:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/323830343a353264303a3a2f33322d3438203d3e20323638353433.roa
Signing time:             Fri 07 Jun 2024 19:35:22 +0000
ROA not before:           Fri 07 Jun 2024 19:30:22 +0000
ROA not after:            Fri 06 Jun 2025 19:35:22 +0000
asID:                     268543
IP address blocks:        2804:52d0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl
                          rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:35:1d:c2:fe:a1:c4:f2:af:19:17:f8:a3:11:b6:65:ff:ae:ae:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88
        Validity
            Not Before: Jun  7 19:30:22 2024 GMT
            Not After : Jun  6 19:35:22 2025 GMT
        Subject: CN=38F7FBD1E88175F7C642CF826B9A0644ECCBC0FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:40:5b:bf:c0:47:e1:81:21:11:e7:2b:97:8e:
                    a7:10:5b:a6:3c:9f:e5:ba:18:c6:55:33:62:35:e1:
                    4d:95:04:93:a5:14:61:c9:b4:b0:e9:15:68:d0:8b:
                    3c:a7:61:cd:a5:f6:e1:9e:ff:13:04:44:39:1c:2f:
                    9d:bd:6d:64:d4:0e:6b:2a:b4:01:ff:d5:ca:bd:e6:
                    c3:cb:3c:04:64:1b:90:04:1a:9e:cf:38:8a:16:ab:
                    65:2a:50:16:96:d8:42:14:44:52:58:1f:18:06:5b:
                    d0:e9:95:a3:d1:cc:b7:8d:4d:2d:f5:50:cf:48:a0:
                    75:b6:86:27:0a:a6:42:db:4f:eb:38:de:09:08:91:
                    58:6c:ae:22:51:64:da:74:f7:91:5b:28:d1:64:1c:
                    ac:3c:a3:a8:62:35:60:b6:55:c1:52:25:d3:50:0d:
                    2a:2c:44:32:82:b8:88:18:0e:67:af:95:ba:2e:ad:
                    04:79:ee:d9:d3:d2:a2:33:47:4d:33:43:50:58:69:
                    07:f0:d8:18:e3:5a:4c:70:b4:e7:9d:5e:c0:61:55:
                    47:7f:5e:1b:97:b4:44:f5:90:89:1d:5a:2c:3d:1b:
                    61:70:0c:25:a9:d7:17:99:20:bc:b5:77:0a:ec:c5:
                    e5:de:92:f9:57:d3:1e:e7:c6:24:16:a0:77:a0:a4:
                    e5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F7:FB:D1:E8:81:75:F7:C6:42:CF:82:6B:9A:06:44:EC:CB:C0:FC
            X509v3 Authority Key Identifier:
                keyid:C2:CB:7C:1A:52:E7:5C:0D:4B:39:4E:09:FC:63:EA:CF:FD:69:2D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/323830343a353264303a3a2f33322d3438203d3e20323638353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:52d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:d1:8a:2a:43:df:57:fc:b9:20:3c:37:00:47:b2:2c:4c:57:
         5a:27:67:fa:7c:cd:a5:3e:f2:99:67:31:1e:5c:78:28:e2:fd:
         0e:cf:e3:4d:5a:70:61:d0:16:30:24:70:fe:5a:fb:87:74:23:
         38:23:1b:55:8b:95:04:a2:34:91:95:e8:40:2d:6f:55:71:7c:
         47:bb:b2:7e:d9:ca:a1:a3:d9:03:b2:a6:3a:b4:c8:7f:b4:56:
         24:b1:61:71:5d:de:2c:38:c7:65:c6:73:49:93:ca:c3:6c:b5:
         ce:e3:e6:8e:c1:aa:85:00:7a:89:cb:ad:cf:a6:54:e4:38:b2:
         20:c7:c1:8d:77:cb:12:92:16:b4:3d:d7:82:5c:2c:d4:c8:c5:
         84:f8:72:cd:6a:27:12:64:a0:b3:fc:40:62:a4:53:6a:14:5a:
         8b:36:b6:9b:d5:a4:45:10:3e:e7:aa:1b:0d:bb:54:58:b4:5f:
         c6:f5:c4:d1:e4:9a:9d:81:ab:ed:eb:2f:fa:7e:b8:e6:32:c1:
         58:76:e2:11:18:b6:44:4a:f8:6e:f1:e8:ca:af:c2:52:b2:9b:
         6e:75:3d:ca:90:97:8e:16:40:6c:bf:3c:c6:d6:76:5f:74:98:
         b6:63:f6:23:11:5a:b6:69:02:a0:4a:7a:ee:f9:a5:23:cf:b5:
         3e:43:7a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:36 2024 by rpki-client on console-fra.rpki-client.org