Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/323830343a323839633a3a2f33322d3332203d3e20323633393730.roa
File:                     323830343a323839633a3a2f33322d3332203d3e20323633393730.roa (raw, json)
Hash identifier:          ybqYOXe3mHfas8Cw0HR3EJKO526GOcMXKYzh77Vj8Ag=
Subject key identifier:   2A:C8:9A:CA:4E:F6:86:73:48:04:77:0C:C6:D2:E3:EA:55:D7:10:C4
Certificate issuer:       /CN=C8EE7E51261DDF470914784EE70CEFF3B3BE71BE
Certificate serial:       07F16950BB5CD94286D017D7697643E8E29186E4
Authority key identifier: C8:EE:7E:51:26:1D:DF:47:09:14:78:4E:E7:0C:EF:F3:B3:BE:71:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/323830343a323839633a3a2f33322d3332203d3e20323633393730.roa
Signing time:             Thu 04 Apr 2024 12:04:44 +0000
ROA not before:           Thu 04 Apr 2024 11:59:44 +0000
ROA not after:            Thu 03 Apr 2025 12:04:44 +0000
asID:                     263970
IP address blocks:        2804:289c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.crl
                          rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f1:69:50:bb:5c:d9:42:86:d0:17:d7:69:76:43:e8:e2:91:86:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8EE7E51261DDF470914784EE70CEFF3B3BE71BE
        Validity
            Not Before: Apr  4 11:59:44 2024 GMT
            Not After : Apr  3 12:04:44 2025 GMT
        Subject: CN=2AC89ACA4EF686734804770CC6D2E3EA55D710C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c0:88:56:51:f4:56:34:c3:ef:da:a6:72:11:
                    d1:ff:f1:61:03:ae:d5:af:25:cf:4a:49:30:64:0e:
                    a2:76:28:b4:22:ed:63:57:3f:65:3c:1c:2d:5d:66:
                    d2:1f:83:94:51:21:d9:92:8e:84:15:70:6f:5f:90:
                    5a:fe:0a:d7:2d:5f:9d:59:a9:87:42:51:7f:27:b4:
                    31:e3:18:0f:dc:88:c4:14:18:e5:30:2b:f2:ef:0a:
                    5d:e0:ea:9e:96:0c:05:88:a6:64:5c:6f:86:be:2b:
                    b4:e8:d8:f2:d6:23:cd:35:ad:3a:cd:95:02:80:ba:
                    69:43:e3:2c:c7:d2:38:2a:03:76:a4:f9:22:a9:30:
                    19:00:ee:fe:88:37:9c:df:db:9c:93:b5:b7:0f:5a:
                    e2:f2:b2:27:4a:02:6f:93:5d:70:4e:ee:43:88:2f:
                    12:b9:41:25:3c:54:c2:92:19:9a:3f:d7:73:91:04:
                    8c:5b:ad:e1:7f:1c:4e:5d:0e:be:0b:c3:6a:28:52:
                    0f:d2:be:de:af:d5:81:5b:22:60:39:a8:91:60:02:
                    0c:01:ef:8f:41:f7:80:c9:ef:a2:52:c4:de:c2:27:
                    18:fe:82:66:96:be:46:83:58:7e:4e:96:f0:05:18:
                    4d:18:b5:b8:da:d6:46:ec:39:e3:f8:25:44:ed:4a:
                    d9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C8:9A:CA:4E:F6:86:73:48:04:77:0C:C6:D2:E3:EA:55:D7:10:C4
            X509v3 Authority Key Identifier:
                keyid:C8:EE:7E:51:26:1D:DF:47:09:14:78:4E:E7:0C:EF:F3:B3:BE:71:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/323830343a323839633a3a2f33322d3332203d3e20323633393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:289c::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:e4:0d:58:71:0a:e3:cf:6e:95:1a:d3:be:e3:7c:88:21:c9:
         b3:b1:9e:8c:11:5d:d3:4d:ca:a0:c8:2b:03:ac:60:90:98:b3:
         17:9c:7d:f0:4e:dc:31:3a:6d:b2:90:20:d9:7a:07:c2:b6:eb:
         40:07:08:84:5c:5f:f6:bc:f9:e9:29:96:80:82:a2:7d:e8:11:
         f8:ee:b9:9b:00:78:d5:c4:46:f2:07:37:62:12:6e:44:a7:13:
         63:ce:75:b1:36:b9:3c:b2:88:07:dd:78:8a:d9:12:5d:59:5c:
         5b:1c:bc:55:d2:26:23:02:83:17:90:d5:19:df:b9:7a:9e:83:
         53:01:84:34:85:e9:07:68:ec:ab:7a:12:31:6c:a7:d8:97:c3:
         54:c9:83:49:8a:6f:fb:07:f6:f1:50:de:27:f8:af:70:84:43:
         39:0d:93:37:c6:1a:b1:9f:71:d4:f0:16:cd:0b:04:55:05:e6:
         82:07:c9:a2:76:f4:04:85:80:68:97:ff:f2:09:2e:de:ed:16:
         ac:43:3f:b7:4c:b5:6d:b5:5b:86:92:9b:91:57:6b:23:e1:ce:
         18:26:66:8f:40:fb:d2:ce:b8:e5:0c:a8:4d:28:69:9a:ce:c0:
         c8:73:63:ce:cc:78:3d:eb:aa:46:72:46:bd:90:99:5b:55:a0:
         38:46:62:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:35 2024 by rpki-client on console-fra.rpki-client.org