Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/323830343a323236343a3a2f33322d313238203d3e20323634303936.roa
File:                     323830343a323236343a3a2f33322d313238203d3e20323634303936.roa (raw, json)
Hash identifier:          QHdj2bbxHTbNGMQtcFMnYxYv0Md3UtOs9u8dMm9DfQo=
Subject key identifier:   6E:10:A7:58:67:40:5E:37:99:20:21:5C:17:A0:6B:C1:27:A0:09:7B
Certificate issuer:       /CN=8CCEE1F2BC47B1726E5C5D6E50D90000702A9E76
Certificate serial:       600041881F87436EC91B1E6CE13923A44FFB22A3
Authority key identifier: 8C:CE:E1:F2:BC:47:B1:72:6E:5C:5D:6E:50:D9:00:00:70:2A:9E:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCEE1F2BC47B1726E5C5D6E50D90000702A9E76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/323830343a323236343a3a2f33322d313238203d3e20323634303936.roa
Signing time:             Fri 17 May 2024 14:10:37 +0000
ROA not before:           Fri 17 May 2024 14:05:37 +0000
ROA not after:            Fri 16 May 2025 14:10:37 +0000
asID:                     264096
IP address blocks:        2804:2264::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/8CCEE1F2BC47B1726E5C5D6E50D90000702A9E76.crl
                          rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/8CCEE1F2BC47B1726E5C5D6E50D90000702A9E76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCEE1F2BC47B1726E5C5D6E50D90000702A9E76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:00:41:88:1f:87:43:6e:c9:1b:1e:6c:e1:39:23:a4:4f:fb:22:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CCEE1F2BC47B1726E5C5D6E50D90000702A9E76
        Validity
            Not Before: May 17 14:05:37 2024 GMT
            Not After : May 16 14:10:37 2025 GMT
        Subject: CN=6E10A75867405E379920215C17A06BC127A0097B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d3:ed:b0:16:a1:2c:af:2f:00:47:4e:ef:3b:
                    06:ea:0d:01:5a:72:dd:b4:42:f5:75:2c:46:60:98:
                    12:74:1c:e3:57:9c:2b:da:1e:cb:c5:73:c3:1d:b4:
                    2a:60:d4:02:ac:02:1e:38:62:89:da:2d:c3:ef:03:
                    33:95:c4:39:58:e7:4a:15:d2:92:dd:b6:e3:9d:88:
                    a7:0c:d5:a5:45:4f:ab:77:9f:3a:6e:3d:d2:93:ca:
                    91:b7:83:f2:b2:a9:5c:12:fd:39:d9:d2:06:7d:aa:
                    05:39:3e:94:23:4d:ed:54:61:9b:68:0a:52:f4:b0:
                    81:6d:f1:51:e6:f7:39:a4:36:5d:f6:0e:08:d8:86:
                    e9:21:f6:f7:7c:b9:b2:07:8c:45:cd:17:64:ad:8c:
                    91:39:21:a7:ac:0f:4c:ab:b2:63:8b:81:3a:cf:e1:
                    ef:f5:1c:44:7b:7b:43:62:6e:80:a8:63:da:d6:40:
                    2d:42:f4:69:47:c9:01:f4:96:f2:13:fa:ab:c8:02:
                    35:24:47:a1:06:d6:cd:49:86:49:b1:fb:65:e4:3a:
                    11:14:35:62:ec:44:0f:08:ab:7f:79:73:98:c4:57:
                    e0:c8:45:ba:9a:fe:51:f8:d7:57:13:af:92:c7:4c:
                    c6:c7:80:2d:0f:92:7e:9e:7f:d8:51:16:7c:4b:2a:
                    fd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:10:A7:58:67:40:5E:37:99:20:21:5C:17:A0:6B:C1:27:A0:09:7B
            X509v3 Authority Key Identifier:
                keyid:8C:CE:E1:F2:BC:47:B1:72:6E:5C:5D:6E:50:D9:00:00:70:2A:9E:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/8CCEE1F2BC47B1726E5C5D6E50D90000702A9E76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCEE1F2BC47B1726E5C5D6E50D90000702A9E76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/323830343a323236343a3a2f33322d313238203d3e20323634303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2264::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:b2:46:0b:e8:0d:f1:54:1c:aa:45:89:92:7c:e2:20:0c:cf:
         50:ca:6b:68:5e:e2:a0:c8:03:5e:d2:40:4b:2c:f5:22:b4:4d:
         2c:d3:9f:82:1e:71:8e:50:ae:8d:86:e8:21:44:32:22:b1:b4:
         00:3f:88:74:cb:7d:7d:1c:ec:f9:9c:19:e5:e3:96:f0:54:dd:
         88:9a:13:cb:94:c7:2d:84:c8:24:f9:c7:e5:e0:87:5b:ea:a8:
         62:f1:ca:32:32:2d:39:7c:65:47:6a:a2:90:61:1b:cd:23:8b:
         b6:4b:33:85:86:e0:b3:58:48:67:56:e8:a9:b5:dd:bf:a0:19:
         a5:c8:9c:e5:ab:fe:ae:14:96:97:9c:2a:4e:e6:1b:c0:f3:88:
         e7:37:24:a9:46:b1:1d:98:ee:99:df:1f:3f:1a:df:48:2b:84:
         33:af:e9:a6:e0:bb:e6:bb:cd:26:5c:00:ed:46:c1:87:e2:85:
         9f:ea:f0:27:ca:4f:05:e7:4d:62:e8:06:7d:68:a5:a4:3e:55:
         2c:56:75:3f:44:22:11:30:49:35:7a:b8:ec:c8:9a:c2:99:4c:
         56:56:3d:0a:da:df:12:ac:67:49:e2:5a:22:1d:4f:e6:b6:85:
         27:8f:76:df:30:0d:75:99:2c:44:96:ad:8a:dd:bc:a5:6a:49:
         f8:87:94:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:49:45 2024 by rpki-client on console-fra.rpki-client.org