Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a3a2f33322d313238203d3e20323633383535.roa
File:                     323830343a323663343a3a2f33322d313238203d3e20323633383535.roa (raw, json)
Hash identifier:          sSXLI9SWfM7x+DT0pWnAAN0dkXv7kr+smiB7bVyZYnQ=
Subject key identifier:   FD:9E:0B:4A:35:0D:EE:24:DE:92:6B:FB:3C:05:89:9B:E9:3B:1D:BB
Certificate issuer:       /CN=266550FEC392A6EB5D9C3D26459B6FB623894A0B
Certificate serial:       3DE2C9214F9CCAB43584D5494696DE6C055CAC68
Authority key identifier: 26:65:50:FE:C3:92:A6:EB:5D:9C:3D:26:45:9B:6F:B6:23:89:4A:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/266550FEC392A6EB5D9C3D26459B6FB623894A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a3a2f33322d313238203d3e20323633383535.roa
Signing time:             Sat 09 Nov 2024 17:13:38 +0000
ROA not before:           Sat 09 Nov 2024 17:08:38 +0000
ROA not after:            Sat 08 Nov 2025 17:13:38 +0000
asID:                     263855
IP address blocks:        2804:26c4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/266550FEC392A6EB5D9C3D26459B6FB623894A0B.crl
                          rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/266550FEC392A6EB5D9C3D26459B6FB623894A0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/266550FEC392A6EB5D9C3D26459B6FB623894A0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e2:c9:21:4f:9c:ca:b4:35:84:d5:49:46:96:de:6c:05:5c:ac:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266550FEC392A6EB5D9C3D26459B6FB623894A0B
        Validity
            Not Before: Nov  9 17:08:38 2024 GMT
            Not After : Nov  8 17:13:38 2025 GMT
        Subject: CN=FD9E0B4A350DEE24DE926BFB3C05899BE93B1DBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cc:86:66:d4:05:c8:6f:11:7a:cc:d1:67:d6:
                    c4:b7:32:cb:6a:81:78:7f:6e:2f:b5:bf:ff:89:e6:
                    4b:d3:66:a4:a8:fb:8a:82:17:f7:ad:02:9c:06:97:
                    15:04:6d:63:d9:d2:9f:b1:a8:a0:01:97:06:75:96:
                    02:26:cf:65:59:63:0c:23:12:b8:2a:be:8b:a9:bb:
                    79:8a:af:a1:7b:d9:ec:58:05:74:f3:34:04:bf:b0:
                    89:af:b7:8d:70:bc:24:52:9f:38:47:86:ad:05:dd:
                    01:dc:52:8d:c4:27:5b:89:e1:80:16:1e:ac:c3:f4:
                    d0:3a:a0:2c:d2:d6:e9:b5:90:cb:fc:73:10:d5:bc:
                    73:1e:21:37:1c:16:b1:17:8b:4d:ab:03:0f:c8:34:
                    3c:3d:88:c8:bf:b8:3c:ed:7b:38:47:e2:e1:a7:0f:
                    ba:bd:91:9f:79:7b:fe:e6:f0:7d:c9:b9:35:41:52:
                    e8:df:7f:c4:4a:af:c2:c2:32:64:df:0e:da:a1:9e:
                    ae:d1:20:bb:15:8c:54:81:47:1e:c7:39:d0:0c:7b:
                    72:88:1d:e8:be:6c:1a:de:1d:d7:ba:c4:b4:2c:3c:
                    c3:7f:30:ad:83:88:69:e8:d6:8a:cb:39:d0:55:60:
                    81:ba:48:96:a7:c1:3a:85:94:26:13:2e:9f:dc:3a:
                    a8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9E:0B:4A:35:0D:EE:24:DE:92:6B:FB:3C:05:89:9B:E9:3B:1D:BB
            X509v3 Authority Key Identifier:
                keyid:26:65:50:FE:C3:92:A6:EB:5D:9C:3D:26:45:9B:6F:B6:23:89:4A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/266550FEC392A6EB5D9C3D26459B6FB623894A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/266550FEC392A6EB5D9C3D26459B6FB623894A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a3a2f33322d313238203d3e20323633383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:b3:0c:25:ba:4a:c2:f8:6e:96:2a:a6:56:04:7e:e2:65:b2:
         a6:0f:05:b8:c9:39:b7:9b:39:9f:c7:6c:37:9f:bb:95:e1:8b:
         62:42:cf:2f:f8:28:41:f7:ca:60:18:6d:8b:68:c0:db:6c:b8:
         11:1f:12:d6:91:df:91:ec:96:08:7f:43:61:d9:33:d7:e2:2f:
         ed:b8:62:e1:17:4f:c2:60:c4:72:4e:fd:bf:d4:a4:25:a9:14:
         7e:46:5e:9b:03:52:c9:49:9d:b7:6a:fc:d6:51:b5:cb:e3:d3:
         be:77:3a:0b:47:87:51:6b:e0:7f:2d:69:ff:81:77:3f:e8:32:
         25:86:2a:5a:bc:8b:5f:be:d1:19:15:04:89:c8:87:9e:37:61:
         93:a1:a1:5a:cc:5e:49:85:5c:94:d1:43:fd:60:48:5e:0d:a9:
         e3:66:83:0a:83:e6:56:28:ae:95:a5:21:d2:70:4b:54:ae:11:
         8c:7d:5b:90:02:39:77:ec:f6:7f:02:d5:66:45:6d:36:eb:45:
         48:da:4b:75:e6:3a:cd:09:ae:75:f8:81:92:94:27:85:88:b3:
         07:7f:c8:a1:d2:e3:89:27:c7:c2:77:4b:f1:ef:8a:39:e6:67:
         7a:ea:9a:37:32:72:d6:77:64:cd:bd:71:64:c8:ca:a0:52:c9:
         08:84:73:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:12 2024 by rpki-client on console-ams.rpki-client.org