Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/323830343a6363633a3a2f33322d3332203d3e20323632383237.roa
File:                     323830343a6363633a3a2f33322d3332203d3e20323632383237.roa (raw, json)
Hash identifier:          5pYdEsCSW1whHMwh+Ww4QnkOx7d5tOzaYctEJjBmDy8=
Subject key identifier:   51:FC:51:CE:A4:44:9F:01:96:80:8C:5C:C8:A7:54:FB:95:A2:2D:88
Certificate issuer:       /CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
Certificate serial:       3B1BED8E4243C4D952EA6B4C932E8F74C83EFAB2
Authority key identifier: 2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/323830343a6363633a3a2f33322d3332203d3e20323632383237.roa
Signing time:             Fri 23 Aug 2024 20:01:49 +0000
ROA not before:           Fri 23 Aug 2024 19:56:49 +0000
ROA not after:            Fri 22 Aug 2025 20:01:49 +0000
asID:                     262827
IP address blocks:        2804:ccc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl
                          rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:1b:ed:8e:42:43:c4:d9:52:ea:6b:4c:93:2e:8f:74:c8:3e:fa:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
        Validity
            Not Before: Aug 23 19:56:49 2024 GMT
            Not After : Aug 22 20:01:49 2025 GMT
        Subject: CN=51FC51CEA4449F0196808C5CC8A754FB95A22D88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:db:90:23:74:56:ba:14:13:35:d6:c4:9b:a8:
                    95:a2:62:c6:3f:e2:f0:89:4f:d3:72:36:bb:2c:20:
                    ef:ef:fa:bb:cf:44:9a:e7:dd:4a:7c:19:63:15:a5:
                    c3:bc:56:41:ec:dc:cd:ac:4e:8b:33:89:b4:b2:b6:
                    d8:e8:1c:61:44:c1:90:38:b8:58:83:05:ec:08:35:
                    50:9e:bc:11:8d:9e:90:fb:50:52:2d:dc:64:94:29:
                    4e:95:21:d8:5f:1c:7a:7d:97:f9:32:83:48:a1:b5:
                    09:6a:1e:c1:a1:3f:db:70:cf:fa:1d:45:00:42:c7:
                    3f:bc:7a:12:e3:09:20:3a:35:71:8e:9b:99:ea:34:
                    de:20:8e:88:c8:10:21:fc:f9:8f:9f:ca:69:59:c3:
                    ef:e9:4e:3c:12:52:1b:69:07:1b:9c:c5:5b:29:0b:
                    6b:91:33:ec:a2:27:af:ec:50:2c:f3:84:07:b1:fe:
                    77:c4:d7:10:44:2b:18:86:3f:47:fa:3c:85:48:b8:
                    34:29:f2:06:f6:53:75:a5:a2:ed:a3:e7:a8:47:49:
                    7b:4b:77:af:07:fe:35:64:45:8e:a0:be:1d:5c:8f:
                    85:08:09:18:f5:b0:e0:e0:fb:7d:f7:40:c4:2c:9b:
                    e8:a4:9b:6a:2f:ab:94:a0:94:a8:a2:19:50:1e:89:
                    a5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FC:51:CE:A4:44:9F:01:96:80:8C:5C:C8:A7:54:FB:95:A2:2D:88
            X509v3 Authority Key Identifier:
                keyid:2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/323830343a6363633a3a2f33322d3332203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ccc::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:59:0a:dc:e9:12:30:2b:fa:8d:66:a4:ea:cf:02:6e:5d:eb:
         b7:f0:ff:02:24:99:72:c6:51:dc:f6:9d:6a:5e:65:de:43:ff:
         ba:3c:72:05:ee:c5:23:64:38:9c:2a:c1:2f:ab:d4:23:44:0b:
         69:c8:2a:00:f3:6a:8a:87:2b:be:f3:ab:c8:97:75:18:75:4f:
         47:c0:11:5c:bf:b0:17:0a:f3:a7:30:3e:81:1d:c7:03:59:86:
         82:de:8c:e9:eb:39:ab:23:5d:77:60:7a:c4:7d:ab:d8:6b:86:
         4e:e1:a9:58:81:04:77:e9:96:ec:ad:80:c1:6d:a3:c9:11:21:
         62:96:50:69:8d:42:07:f2:d3:1e:8b:6f:d5:83:50:f9:42:74:
         82:da:c1:aa:89:13:14:3f:50:b6:23:3a:33:50:6f:49:aa:0e:
         a2:2c:89:8f:73:8e:8e:d9:ee:d2:35:4e:60:45:fc:34:fc:21:
         0c:93:11:bc:3d:0a:eb:95:75:41:5a:8d:88:b6:8d:98:f5:f7:
         bc:55:74:aa:b9:72:5d:bc:61:1b:67:44:33:a5:58:48:00:1f:
         e9:1c:2e:2c:11:c2:9b:40:03:bd:c2:17:b1:65:03:2a:4d:7f:
         12:b2:12:c5:65:38:ec:1a:ab:83:f4:4b:bb:42:6c:2d:56:fb:
         63:be:55:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:50 2024 by rpki-client on console-fra.rpki-client.org