Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a3a2f33342d3334203d3e20323633383535.roa
File:                     323830343a323663343a3a2f33342d3334203d3e20323633383535.roa (raw, json)
Hash identifier:          yHqkT5IO+5NqBAjswe66gTb8nubs84LhvgSj4i5nNds=
Subject key identifier:   BF:9C:27:55:74:A2:7D:17:D3:FF:DC:52:9D:45:48:CE:AE:F6:70:F7
Certificate issuer:       /CN=2AAAE9376A44E0C38B3B347DE65243184A2C2242
Certificate serial:       55508D847DA2C3761D020D89B987B3F947099F1B
Authority key identifier: 2A:AA:E9:37:6A:44:E0:C3:8B:3B:34:7D:E6:52:43:18:4A:2C:22:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAAE9376A44E0C38B3B347DE65243184A2C2242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a3a2f33342d3334203d3e20323633383535.roa
Signing time:             Tue 26 Nov 2024 18:54:13 +0000
ROA not before:           Tue 26 Nov 2024 18:49:13 +0000
ROA not after:            Tue 25 Nov 2025 18:54:13 +0000
asID:                     263855
IP address blocks:        2804:26c4::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/2AAAE9376A44E0C38B3B347DE65243184A2C2242.crl
                          rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/2AAAE9376A44E0C38B3B347DE65243184A2C2242.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAAE9376A44E0C38B3B347DE65243184A2C2242.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 20:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:50:8d:84:7d:a2:c3:76:1d:02:0d:89:b9:87:b3:f9:47:09:9f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AAAE9376A44E0C38B3B347DE65243184A2C2242
        Validity
            Not Before: Nov 26 18:49:13 2024 GMT
            Not After : Nov 25 18:54:13 2025 GMT
        Subject: CN=BF9C275574A27D17D3FFDC529D4548CEAEF670F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3e:97:f0:fa:23:d3:ee:26:32:c7:8c:69:ee:
                    eb:b1:bd:28:f5:8c:14:90:09:0e:4e:fb:36:ee:09:
                    f2:2d:88:c5:93:17:50:55:0e:a8:6e:06:cf:59:c8:
                    07:53:13:39:07:c2:c8:64:d5:41:30:ca:97:4a:37:
                    dc:83:1a:7e:bf:ae:5c:94:a2:99:e4:83:9b:22:07:
                    4f:9b:5b:e0:f3:01:81:a5:64:93:d8:35:59:e0:fb:
                    04:b2:79:b9:32:78:34:4b:42:a0:6c:21:1b:c4:f0:
                    c0:e2:c9:19:5b:65:05:56:1f:ef:00:cd:fa:61:72:
                    72:0b:89:fd:ab:86:22:e8:a3:fd:54:95:21:4a:b0:
                    4a:bf:39:4e:d5:e8:0f:96:90:b8:f2:6d:52:58:91:
                    70:98:62:46:2f:19:86:e4:be:2e:d4:71:70:fb:68:
                    cb:9e:18:fc:f3:12:f8:85:99:2f:73:75:96:c1:20:
                    74:ad:c7:0c:83:67:68:c7:74:72:da:03:d7:31:d5:
                    af:36:5f:53:73:65:49:bd:86:14:46:dd:80:f3:8d:
                    7a:29:ca:d1:ab:14:92:2f:8d:b6:24:44:4b:ea:8e:
                    04:a0:48:61:4b:d4:22:14:23:03:41:75:46:ff:d0:
                    bc:ea:5c:51:1d:dd:0d:f1:f9:ba:f7:67:f6:70:86:
                    37:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9C:27:55:74:A2:7D:17:D3:FF:DC:52:9D:45:48:CE:AE:F6:70:F7
            X509v3 Authority Key Identifier:
                keyid:2A:AA:E9:37:6A:44:E0:C3:8B:3B:34:7D:E6:52:43:18:4A:2C:22:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/2AAAE9376A44E0C38B3B347DE65243184A2C2242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAAE9376A44E0C38B3B347DE65243184A2C2242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a3a2f33342d3334203d3e20323633383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26c4::/34

    Signature Algorithm: sha256WithRSAEncryption
         47:03:22:e2:26:16:c7:bf:d2:18:34:6c:20:f3:50:57:ac:76:
         3e:10:12:9f:74:54:b2:55:c9:fb:b3:bc:f5:64:c4:b2:c9:d7:
         1c:88:4d:0e:8e:e1:d0:b7:94:c6:1d:8b:0b:84:9b:8f:9f:98:
         52:e5:93:bf:39:fb:b6:ef:3e:e1:2c:68:87:83:68:08:24:7a:
         30:d0:c9:59:bf:7f:45:0a:2e:09:1f:6f:47:a4:1f:86:c7:45:
         eb:7a:79:17:59:50:cc:78:c2:66:b5:fa:f4:52:0f:82:b6:66:
         4e:a0:3b:36:54:34:eb:df:5e:16:03:9c:50:af:1f:ec:0e:ed:
         06:7b:a5:c2:47:e9:8b:29:64:b2:5d:77:f2:2d:3b:15:c7:4b:
         bf:87:44:00:e1:b2:93:40:6b:7e:64:a8:f3:f8:75:b7:06:8a:
         1a:e1:28:b9:36:8d:49:46:6b:44:67:ab:ff:8b:cb:42:51:61:
         7a:d2:69:00:9f:fb:ce:67:bf:48:0a:00:26:58:57:ff:ce:f5:
         92:f7:d4:d2:73:97:46:ae:76:a2:39:42:f8:db:99:15:d1:83:
         b7:28:65:97:e6:4e:6a:67:53:1c:ea:ca:b0:c7:55:45:ed:dd:
         b4:9d:b5:2f:db:40:11:c3:a9:e0:2d:fb:7f:f3:f0:cd:b1:f7:
         28:4b:15:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:50:50 2024 by rpki-client on console-ams.rpki-client.org