Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a343030303a3a2f33342d3334203d3e20323633383535.roa
File:                     323830343a323663343a343030303a3a2f33342d3334203d3e20323633383535.roa (raw, json)
Hash identifier:          /Mhtv7IC/atHDa0tO++IPF+E9ia6ATrt16LwFOZxO58=
Subject key identifier:   8F:DA:99:3D:DC:EC:E4:D0:4B:9C:F5:E8:5B:76:32:E6:28:C9:D6:17
Certificate issuer:       /CN=2AAAE9376A44E0C38B3B347DE65243184A2C2242
Certificate serial:       1CC9FEA0BBBA2A8C245FAFE8E21B864A6D29DEFF
Authority key identifier: 2A:AA:E9:37:6A:44:E0:C3:8B:3B:34:7D:E6:52:43:18:4A:2C:22:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAAE9376A44E0C38B3B347DE65243184A2C2242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a343030303a3a2f33342d3334203d3e20323633383535.roa
Signing time:             Tue 26 Nov 2024 18:54:16 +0000
ROA not before:           Tue 26 Nov 2024 18:49:16 +0000
ROA not after:            Tue 25 Nov 2025 18:54:16 +0000
asID:                     263855
IP address blocks:        2804:26c4:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/2AAAE9376A44E0C38B3B347DE65243184A2C2242.crl
                          rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/2AAAE9376A44E0C38B3B347DE65243184A2C2242.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAAE9376A44E0C38B3B347DE65243184A2C2242.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 20:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c9:fe:a0:bb:ba:2a:8c:24:5f:af:e8:e2:1b:86:4a:6d:29:de:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AAAE9376A44E0C38B3B347DE65243184A2C2242
        Validity
            Not Before: Nov 26 18:49:16 2024 GMT
            Not After : Nov 25 18:54:16 2025 GMT
        Subject: CN=8FDA993DDCECE4D04B9CF5E85B7632E628C9D617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3a:f7:4b:f8:85:54:5f:37:0f:e6:69:67:c3:
                    35:7a:fb:38:d5:9f:09:81:f2:d5:2e:0a:1f:82:14:
                    4b:4e:13:29:1e:f5:60:64:1b:ed:2e:fc:e2:6e:93:
                    11:a0:c1:39:ff:92:b0:ff:4d:2a:9f:44:65:0e:f9:
                    e1:df:2f:91:fd:de:47:9a:67:f1:c4:65:9d:09:42:
                    1e:09:f0:fa:4d:ad:ca:b9:0a:62:e2:8b:cb:73:62:
                    ee:34:59:34:c0:bf:45:95:f8:4a:73:b4:cb:4b:3b:
                    19:60:20:cc:c2:80:8a:5b:8b:d7:ae:4a:84:63:0e:
                    ac:f5:89:71:ed:de:b2:33:64:c5:d8:7e:1f:35:26:
                    2a:93:ce:6d:1d:56:4c:96:85:55:e7:61:a5:85:ec:
                    a4:e0:28:6b:b2:04:f4:b4:1a:98:b3:57:34:89:8b:
                    a5:93:c9:dc:69:3f:36:d9:6a:45:88:d7:e3:34:35:
                    e2:2b:e4:82:0a:7e:a6:b2:05:5e:f3:03:3c:6b:0a:
                    e8:af:74:c6:93:bf:a0:bd:7f:3e:bd:16:fb:1c:c8:
                    90:6d:3e:74:e1:ed:02:52:4d:90:57:e7:04:38:a1:
                    3b:fb:90:99:00:b6:91:1e:b3:5a:01:ff:dd:53:b3:
                    2e:a6:ab:8c:35:e7:e9:90:dc:cf:dd:65:05:04:c9:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DA:99:3D:DC:EC:E4:D0:4B:9C:F5:E8:5B:76:32:E6:28:C9:D6:17
            X509v3 Authority Key Identifier:
                keyid:2A:AA:E9:37:6A:44:E0:C3:8B:3B:34:7D:E6:52:43:18:4A:2C:22:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/2AAAE9376A44E0C38B3B347DE65243184A2C2242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAAE9376A44E0C38B3B347DE65243184A2C2242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a343030303a3a2f33342d3334203d3e20323633383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26c4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7e:98:3d:14:e3:12:6a:27:44:c7:66:6d:dd:2a:a6:bf:43:e7:
         43:5f:5c:c8:de:7c:ce:72:e4:c9:56:d4:34:c4:e6:a0:b3:db:
         06:d2:03:9b:ab:5e:02:12:c7:c8:3f:74:58:26:72:f0:e8:eb:
         7d:22:c5:67:95:97:15:53:85:49:0a:a1:d9:d2:e4:82:79:27:
         e9:b7:0f:e3:77:a9:0d:f3:0c:b0:19:7c:31:15:c0:0c:bf:5b:
         1a:1e:60:2a:ef:ac:ca:10:d8:82:a2:1d:55:67:d7:d7:ca:1a:
         1c:67:94:08:00:bd:34:b6:da:61:61:24:ff:9b:b4:81:27:70:
         26:ff:12:bf:7e:0b:0c:7b:fb:bd:fa:fd:13:b8:85:81:0f:34:
         6d:53:42:10:44:7e:f8:0c:99:20:c6:f5:2c:01:34:08:42:03:
         bd:24:86:af:83:8a:9e:25:96:65:48:bf:14:fd:b1:0a:eb:d9:
         5f:e8:f7:69:e2:7b:d2:b4:e8:7b:73:ee:0c:7e:70:33:ca:d1:
         79:2a:6a:ca:e2:62:19:5f:a2:aa:93:5e:a3:69:59:73:7a:ba:
         f7:c1:dd:5b:f6:04:ba:86:43:29:28:18:9c:a0:d3:b7:32:f2:
         2c:72:d2:4e:c5:cf:b0:b9:2a:7a:6b:3f:a3:f0:02:47:73:53:
         3b:72:0e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 20:51:27 2024 by rpki-client on console-fra.rpki-client.org