Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/323830343a313631303a3a2f33322d3332203d3e20323633323635.roa
File:                     323830343a313631303a3a2f33322d3332203d3e20323633323635.roa (raw, json)
Hash identifier:          k/J6tQPF/CXjiGH8+gY8m4h/OH5XvwFsWCKQELdqmUA=
Subject key identifier:   56:A9:E1:1D:A5:80:1A:CE:05:EA:3B:CD:51:AC:E5:68:DC:44:B6:7B
Certificate issuer:       /CN=CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E
Certificate serial:       3D06751A35B1050ABD8E6B9042B21815B486A4A0
Authority key identifier: CB:59:E2:41:FF:AA:C5:9F:A0:BA:1D:08:D9:8F:B8:1A:87:C5:D1:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/323830343a313631303a3a2f33322d3332203d3e20323633323635.roa
Signing time:             Mon 10 Jun 2024 14:03:30 +0000
ROA not before:           Mon 10 Jun 2024 13:58:30 +0000
ROA not after:            Mon 09 Jun 2025 14:03:30 +0000
asID:                     263265
IP address blocks:        2804:1610::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.crl
                          rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 02:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:06:75:1a:35:b1:05:0a:bd:8e:6b:90:42:b2:18:15:b4:86:a4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E
        Validity
            Not Before: Jun 10 13:58:30 2024 GMT
            Not After : Jun  9 14:03:30 2025 GMT
        Subject: CN=56A9E11DA5801ACE05EA3BCD51ACE568DC44B67B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fd:97:ec:9d:93:b4:d7:60:3d:61:af:2b:1f:
                    13:77:26:ab:c2:3a:0f:53:30:e2:f6:3c:de:8a:bf:
                    f1:02:45:93:42:85:3a:01:aa:da:e9:55:b3:9d:1c:
                    a5:6f:89:9b:e5:3d:51:b8:23:27:c5:aa:02:f0:b6:
                    f5:ee:97:80:6e:4b:e2:be:d7:a3:a0:43:28:30:fd:
                    51:1a:6e:77:30:72:7e:7a:ce:a9:61:bb:c4:f3:8c:
                    fc:ea:7f:5b:45:70:50:bd:c4:50:ac:49:19:90:e2:
                    c0:20:0b:58:c8:ba:2f:f0:73:67:cf:b1:bb:f2:02:
                    ec:93:cc:59:74:0f:52:35:db:9b:65:03:52:55:33:
                    2f:33:99:f2:21:2e:86:2d:cf:54:cc:9f:6a:72:be:
                    ff:41:d4:a1:33:2a:11:4e:c0:5e:41:7c:09:79:23:
                    ef:65:bb:35:7f:7d:b6:d5:92:64:17:b9:b2:ba:e7:
                    33:42:90:8d:f4:55:73:f7:6b:c5:ac:94:88:c8:b2:
                    66:a7:07:b2:ea:0f:aa:9a:9a:10:0b:9d:9b:29:6a:
                    cb:d1:ec:23:61:3b:05:92:86:ec:f4:e0:38:6d:33:
                    31:6e:87:f7:dd:4f:db:6a:6a:23:de:7e:f4:c8:cf:
                    ce:63:ef:67:bc:f0:68:36:bb:31:dc:4b:24:56:69:
                    e6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A9:E1:1D:A5:80:1A:CE:05:EA:3B:CD:51:AC:E5:68:DC:44:B6:7B
            X509v3 Authority Key Identifier:
                keyid:CB:59:E2:41:FF:AA:C5:9F:A0:BA:1D:08:D9:8F:B8:1A:87:C5:D1:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/323830343a313631303a3a2f33322d3332203d3e20323633323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1610::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:25:47:e7:d7:5b:78:db:a1:1e:31:36:2c:44:03:ff:80:07:
         23:9c:c5:8f:d6:ad:b0:d6:19:e7:6a:81:b4:5c:e0:81:e7:6c:
         2a:2e:a9:42:24:52:36:3b:33:11:da:fb:4e:92:c3:44:d9:6e:
         4d:bb:ef:1d:ae:ff:f2:25:11:8e:3a:8d:a8:d4:15:c2:34:0c:
         5b:bd:b5:fe:e0:21:34:ea:04:16:ea:55:f2:63:db:e5:c7:13:
         2b:7a:d6:f3:72:23:6c:53:bd:ea:95:47:36:58:5d:2a:d0:3c:
         43:14:12:3b:77:4b:c2:93:97:3d:eb:6d:42:57:9e:0b:a0:23:
         bb:11:a8:48:3c:a3:cc:56:d3:e4:c6:5f:13:ac:03:a6:48:6e:
         18:2d:43:81:a7:a9:38:7c:19:1c:3c:66:e5:0f:2d:92:b1:05:
         6f:6e:80:ca:7a:ae:f2:6a:e0:a0:5f:78:c5:2f:7d:95:89:1d:
         3d:a7:ec:91:d3:ce:71:d9:8e:22:7a:84:26:be:da:42:8d:87:
         48:48:5c:4f:a1:32:5f:da:35:8f:1f:3f:e2:2f:5b:3c:3a:e5:
         af:b7:0d:65:31:9c:95:38:fb:db:e5:c6:b6:ee:2f:17:55:d2:
         d8:1c:88:a4:81:3b:61:04:bb:23:b2:2e:9b:67:5d:ed:2e:6d:
         9e:7c:3a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:58 2024 by rpki-client on console-fra.rpki-client.org