Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/323830343a323661383a3a2f33322d3336203d3e20323633383437.roa
File:                     323830343a323661383a3a2f33322d3336203d3e20323633383437.roa (raw, json)
Hash identifier:          1MxJny3AEFF6EnjF5MA0bGJ2ksOQDdHQKIX6odlm5S4=
Subject key identifier:   C1:06:00:58:B2:3F:73:D9:DF:29:0C:22:9A:CA:63:06:FC:F2:79:76
Certificate issuer:       /CN=704458CDC57956D96E4187B18CAF8B9BC27FC4EF
Certificate serial:       42EF28117444B5DE24C2142806989C0B6A0FB368
Authority key identifier: 70:44:58:CD:C5:79:56:D9:6E:41:87:B1:8C:AF:8B:9B:C2:7F:C4:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/323830343a323661383a3a2f33322d3336203d3e20323633383437.roa
Signing time:             Tue 30 Apr 2024 19:43:44 +0000
ROA not before:           Tue 30 Apr 2024 19:38:44 +0000
ROA not after:            Tue 29 Apr 2025 19:43:44 +0000
asID:                     263847
IP address blocks:        2804:26a8::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.crl
                          rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ef:28:11:74:44:b5:de:24:c2:14:28:06:98:9c:0b:6a:0f:b3:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704458CDC57956D96E4187B18CAF8B9BC27FC4EF
        Validity
            Not Before: Apr 30 19:38:44 2024 GMT
            Not After : Apr 29 19:43:44 2025 GMT
        Subject: CN=C1060058B23F73D9DF290C229ACA6306FCF27976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:f0:d4:af:6e:e8:f6:74:55:de:d1:82:da:
                    bb:f4:09:23:4e:62:e1:71:8b:df:03:ed:b6:3d:e7:
                    fc:81:41:9a:b3:d6:03:8c:75:01:f0:b0:e1:6e:63:
                    fc:d9:dc:aa:42:9f:cb:39:e1:72:93:0c:ec:5b:e4:
                    83:8e:9a:14:76:62:05:70:04:2a:0a:d8:ec:95:5d:
                    b2:79:b0:b2:4d:23:05:8c:fe:1a:ae:df:d2:b8:4f:
                    42:52:96:14:de:fa:bf:5b:5e:99:86:2d:14:48:f1:
                    b8:ea:0e:37:96:7d:6d:0f:eb:20:f6:4b:e1:f3:03:
                    c8:69:01:ac:20:17:e2:ed:bd:48:78:37:e5:e8:6c:
                    90:b1:1f:b1:e7:5b:aa:a6:6e:34:97:98:48:73:07:
                    0a:60:aa:87:05:6c:4a:c8:5b:5c:dc:a1:99:97:c1:
                    51:48:8e:46:de:a2:af:1d:c0:2e:04:38:e3:65:9f:
                    1f:9e:ae:2c:be:29:a4:86:91:6d:b0:14:17:7a:f8:
                    4e:0c:13:7c:07:f7:af:5a:de:6a:60:c9:74:84:b6:
                    71:53:6f:9b:42:a7:54:c3:c4:30:f6:c5:c3:15:42:
                    fa:98:3e:30:4e:f8:6b:51:b3:f4:52:a8:4d:73:ef:
                    23:c2:81:7c:c0:0a:6f:b7:5f:db:44:31:40:cb:71:
                    84:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:06:00:58:B2:3F:73:D9:DF:29:0C:22:9A:CA:63:06:FC:F2:79:76
            X509v3 Authority Key Identifier:
                keyid:70:44:58:CD:C5:79:56:D9:6E:41:87:B1:8C:AF:8B:9B:C2:7F:C4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/323830343a323661383a3a2f33322d3336203d3e20323633383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:78:5e:ef:c8:f5:6b:08:83:63:04:ed:e6:7f:55:85:0c:68:
         90:e5:69:6c:36:f5:3b:e7:63:b0:0d:e8:05:a3:0f:42:74:17:
         7f:b3:6f:e4:b1:fa:49:56:75:8f:d9:f6:d4:9b:cc:94:47:5e:
         96:94:69:b6:a8:91:01:92:5b:0d:f0:a9:66:a0:52:cc:2c:e3:
         85:09:7d:bb:14:43:40:de:52:ae:2a:61:68:98:ee:2c:f3:54:
         f9:7b:1a:20:d3:d9:7f:86:5d:94:96:a7:49:c6:ef:81:e6:1d:
         ef:67:35:bb:3f:35:30:6a:1f:a9:30:15:cb:7c:a8:4b:43:2c:
         78:d9:fe:1d:7e:a3:4a:d8:83:92:41:98:b3:fe:53:d0:1c:d1:
         db:b4:eb:69:9d:0a:9c:de:88:44:e0:35:40:b7:9f:2d:b0:97:
         9f:02:38:1c:ac:0b:01:cb:52:db:3b:34:91:69:0b:bb:33:63:
         42:da:03:63:6c:f0:81:21:e5:11:3b:cf:a1:94:49:a3:2c:45:
         b0:2f:e1:6a:40:ff:f2:09:6c:39:b7:a9:b6:2d:66:e1:6f:59:
         6c:ff:fb:e3:db:0e:a6:54:f9:4a:53:16:a2:4f:32:32:14:a6:
         f6:39:5e:a1:a2:a7:7c:c1:55:50:41:d0:94:25:a2:35:2d:35:
         d5:a2:7e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:27 2024 by rpki-client on console-ams.rpki-client.org