Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/2/323830343a333836633a3a2f33322d3336203d3e20323636343736.roa
File:                     323830343a333836633a3a2f33322d3336203d3e20323636343736.roa (raw, json)
Hash identifier:          WpR15MbRN9BK4wKhxsSOut302BNd9ostsRVaBdTZjEA=
Subject key identifier:   EC:25:95:A4:CF:F0:26:0A:0A:BE:9B:F5:58:BB:90:DF:39:1B:7B:75
Certificate issuer:       /CN=F0F5635EEFE9AFD648D58E84BDF797AF5F910D74
Certificate serial:       48215F691CE1A82FEB01158B1BFDE9E04AF3B013
Authority key identifier: F0:F5:63:5E:EF:E9:AF:D6:48:D5:8E:84:BD:F7:97:AF:5F:91:0D:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F5635EEFE9AFD648D58E84BDF797AF5F910D74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/2/323830343a333836633a3a2f33322d3336203d3e20323636343736.roa
Signing time:             Thu 04 Apr 2024 09:28:28 +0000
ROA not before:           Thu 04 Apr 2024 09:23:28 +0000
ROA not after:            Thu 03 Apr 2025 09:28:28 +0000
asID:                     266476
IP address blocks:        2804:386c::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/2/F0F5635EEFE9AFD648D58E84BDF797AF5F910D74.crl
                          rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/2/F0F5635EEFE9AFD648D58E84BDF797AF5F910D74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F5635EEFE9AFD648D58E84BDF797AF5F910D74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:21:5f:69:1c:e1:a8:2f:eb:01:15:8b:1b:fd:e9:e0:4a:f3:b0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F5635EEFE9AFD648D58E84BDF797AF5F910D74
        Validity
            Not Before: Apr  4 09:23:28 2024 GMT
            Not After : Apr  3 09:28:28 2025 GMT
        Subject: CN=EC2595A4CFF0260A0ABE9BF558BB90DF391B7B75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:74:2e:fc:e4:23:e3:70:a0:ff:47:0c:1b:72:
                    85:c2:b3:ae:7d:58:6c:c9:43:e6:91:2d:4d:b8:2c:
                    dd:2d:e8:39:19:e0:66:ee:45:34:c7:e4:38:db:04:
                    ca:51:94:3e:6b:b4:ed:b1:46:fc:0d:e9:10:f9:0c:
                    23:00:c6:1e:ac:c6:51:01:9c:7c:22:ee:f3:4d:6e:
                    83:62:7a:35:ba:a9:00:7d:ca:a0:b4:4b:d5:01:b3:
                    0f:ac:dc:5f:26:00:9e:58:49:6b:bc:bf:39:e4:1e:
                    8b:0b:c0:dc:1c:5f:98:b7:19:a1:76:c5:00:10:f2:
                    2c:69:18:fe:83:38:52:14:3f:37:61:c4:70:36:1f:
                    5d:7a:26:14:33:7c:be:00:f7:71:d7:00:bf:2f:dd:
                    78:2d:d3:04:65:d5:de:49:70:c8:47:9d:bd:a0:78:
                    bb:8f:e5:3f:79:41:78:f2:4e:a1:d9:bd:c1:b6:eb:
                    f2:b5:83:48:d0:a0:23:9f:ab:9f:80:a0:60:aa:79:
                    f0:f8:4e:17:b5:bd:2d:a7:2a:8c:13:5a:61:29:40:
                    02:b2:88:05:6f:32:61:68:13:bd:fb:48:27:e3:22:
                    60:22:e5:a2:79:e4:d9:a2:be:29:35:3d:ee:9e:73:
                    11:91:0f:6d:b0:c3:07:74:3c:31:aa:34:8b:53:02:
                    52:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:25:95:A4:CF:F0:26:0A:0A:BE:9B:F5:58:BB:90:DF:39:1B:7B:75
            X509v3 Authority Key Identifier:
                keyid:F0:F5:63:5E:EF:E9:AF:D6:48:D5:8E:84:BD:F7:97:AF:5F:91:0D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/2/F0F5635EEFE9AFD648D58E84BDF797AF5F910D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F5635EEFE9AFD648D58E84BDF797AF5F910D74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/2/323830343a333836633a3a2f33322d3336203d3e20323636343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:386c::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:9a:37:98:de:f2:10:b9:25:84:71:e2:51:75:68:c5:af:fe:
         6b:fa:5d:90:c7:ea:73:87:2f:78:3e:15:dc:29:8a:bd:48:30:
         47:4b:7b:e8:ae:d6:dd:58:cf:00:74:c0:5d:64:26:71:11:b0:
         c7:f1:e1:c7:1d:00:66:ff:d8:d0:62:09:b2:c2:8f:55:1b:c3:
         1d:c3:20:0d:86:b7:12:20:cf:e2:a7:8e:d2:ad:b8:5d:e1:b6:
         b4:58:24:4c:49:76:57:3c:76:fe:f9:27:7f:33:3b:28:18:cd:
         db:8f:5b:0b:c2:a9:32:8d:cd:7d:21:dd:4c:10:3a:5e:5a:66:
         fd:41:34:d0:31:aa:19:91:8c:7d:30:fd:74:fc:76:05:9a:82:
         3e:31:15:a6:c4:e2:17:e3:ca:bc:52:b4:c0:ed:86:d6:2a:3f:
         c2:70:c1:73:c9:f1:86:2a:76:18:91:61:25:ce:8f:a8:5c:8c:
         b0:6b:0e:f7:48:82:29:ea:73:1e:b7:e8:46:e2:ea:fd:60:60:
         13:a6:97:e1:7e:9b:2e:57:ec:f5:3a:77:34:17:13:41:9c:f8:
         e2:18:7e:5b:da:f4:33:0a:2e:7f:27:9a:45:ab:5f:54:19:9d:
         06:02:97:ca:20:36:d2:9d:2b:8a:ba:e8:28:74:30:f4:0d:6a:
         9d:95:37:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:41 2024 by rpki-client on console-fra.rpki-client.org