Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/323830343a326461383a3a2f33322d3336203d3e20323635323935.roa
File:                     323830343a326461383a3a2f33322d3336203d3e20323635323935.roa (raw, json)
Hash identifier:          RtHU8jJURvuNkOcisEMPo6bjcX3r4dZb0eo1T5Fuesk=
Subject key identifier:   70:2A:3B:12:79:CA:BA:E4:9C:3D:68:87:BE:D3:8B:4F:C6:09:C3:87
Certificate issuer:       /CN=F261A4A527B62FE3115DF7AF213290B9F54F37FF
Certificate serial:       2E7CBCB0A5C259381AB8DB7EC5D4145D7BE46131
Authority key identifier: F2:61:A4:A5:27:B6:2F:E3:11:5D:F7:AF:21:32:90:B9:F5:4F:37:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/323830343a326461383a3a2f33322d3336203d3e20323635323935.roa
Signing time:             Sat 11 May 2024 14:26:49 +0000
ROA not before:           Sat 11 May 2024 14:21:49 +0000
ROA not after:            Sat 10 May 2025 14:26:49 +0000
asID:                     265295
IP address blocks:        2804:2da8::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.crl
                          rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 03:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7c:bc:b0:a5:c2:59:38:1a:b8:db:7e:c5:d4:14:5d:7b:e4:61:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F261A4A527B62FE3115DF7AF213290B9F54F37FF
        Validity
            Not Before: May 11 14:21:49 2024 GMT
            Not After : May 10 14:26:49 2025 GMT
        Subject: CN=702A3B1279CABAE49C3D6887BED38B4FC609C387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:85:7d:de:78:1f:72:43:f6:01:ec:98:71:26:
                    99:f4:e2:1b:57:d8:55:7f:e3:8a:3e:fa:ff:d2:d8:
                    84:55:76:3d:93:1a:c0:09:a5:cd:74:ae:01:e5:7f:
                    37:a2:58:c7:44:d9:39:83:4a:cb:70:26:d6:28:48:
                    a1:e9:a2:a0:3b:c7:e9:f4:15:08:8b:f2:a8:1a:ee:
                    b9:15:82:9c:7b:73:7e:4d:76:db:d0:b4:ce:cb:b8:
                    c8:1c:3d:f8:32:d5:f6:bd:53:2b:59:64:9d:d9:2f:
                    a4:61:e7:29:55:12:4b:77:b6:49:80:c6:ca:be:7b:
                    5b:af:5d:c5:23:69:f6:13:6d:1a:eb:a4:28:36:4d:
                    46:c7:b8:f9:95:e1:a8:51:6b:2a:9f:dc:30:81:4c:
                    92:01:f6:52:6d:78:77:35:6a:70:3c:12:15:18:fd:
                    38:d9:83:c9:e6:50:51:6f:17:6a:ba:c3:af:81:9d:
                    31:c0:be:a5:b4:01:93:86:56:3e:e8:cd:1c:d9:46:
                    b0:28:dc:45:a2:f2:17:d8:a3:3c:28:50:9b:71:6f:
                    89:48:45:49:64:68:d3:94:b3:96:26:56:fa:42:4d:
                    3f:e2:41:33:3c:0b:8b:a0:f1:5a:44:a4:18:bc:25:
                    12:14:ae:02:b9:96:2c:f6:49:fe:75:fa:99:b6:e8:
                    4e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2A:3B:12:79:CA:BA:E4:9C:3D:68:87:BE:D3:8B:4F:C6:09:C3:87
            X509v3 Authority Key Identifier:
                keyid:F2:61:A4:A5:27:B6:2F:E3:11:5D:F7:AF:21:32:90:B9:F5:4F:37:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/323830343a326461383a3a2f33322d3336203d3e20323635323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2da8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:49:d0:c7:60:ec:3a:7e:67:f7:dd:a0:fc:60:1a:82:59:9e:
         3a:34:2e:8a:ec:67:32:91:59:50:70:ef:e0:b1:d8:14:9b:a8:
         96:08:d6:61:47:a3:e5:28:8f:9a:74:3b:a9:27:b8:6b:9f:18:
         20:00:82:82:42:d6:69:1e:48:b6:b8:c2:55:2f:e1:d4:ce:c2:
         9e:13:bc:7c:85:8c:1b:6c:32:11:f5:80:c1:ba:b9:2f:ef:4f:
         35:7e:bf:21:32:5e:c7:a9:0a:8d:00:c7:21:94:45:aa:cc:fe:
         ff:9f:8b:94:8b:e5:ce:d0:02:d0:5e:41:11:58:d1:33:b9:c4:
         02:e1:57:5d:0d:c3:c6:a5:c3:69:79:65:76:56:e5:e0:69:25:
         0a:78:d8:6a:21:31:d1:69:73:7e:d4:3e:94:97:d8:0e:e4:e7:
         82:10:e1:ce:2d:0a:39:c6:64:cd:6f:2e:09:28:1a:b6:a7:80:
         a2:57:db:c2:f6:2b:55:11:fb:83:59:71:c5:6c:d5:5a:df:81:
         98:73:81:6c:dc:ae:ee:0e:83:53:2e:88:dc:c8:48:fa:c7:ef:
         f1:e5:8e:a3:a3:41:3a:b8:6b:59:23:d8:60:63:ab:a6:5c:f2:
         63:f0:0e:c7:12:b0:35:c6:67:9d:c6:4b:93:f7:40:45:77:7b:
         33:08:5f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:01 2024 by rpki-client on console-fra.rpki-client.org