Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/323830343a333665383a3a2f33322d313238203d3e203532393234.roa
File:                     323830343a333665383a3a2f33322d313238203d3e203532393234.roa (raw, json)
Hash identifier:          sA5gjL1c1K6kOh4AIhoDEP5hGYvi8RisrOq6fwrgnVc=
Subject key identifier:   29:3D:1B:34:E4:5A:3B:17:39:0A:A5:B4:4A:42:5C:AF:14:64:8B:8D
Certificate issuer:       /CN=88F45CA9F42577057740B3862841E292FEE58105
Certificate serial:       6BEBFC4D1C27637E12C81A4F4B3C3DC6C157F1E2
Authority key identifier: 88:F4:5C:A9:F4:25:77:05:77:40:B3:86:28:41:E2:92:FE:E5:81:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F45CA9F42577057740B3862841E292FEE58105.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/323830343a333665383a3a2f33322d313238203d3e203532393234.roa
Signing time:             Sat 09 Nov 2024 13:58:33 +0000
ROA not before:           Sat 09 Nov 2024 13:53:33 +0000
ROA not after:            Sat 08 Nov 2025 13:58:33 +0000
asID:                     52924
IP address blocks:        2804:36e8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.crl
                          rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F45CA9F42577057740B3862841E292FEE58105.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:eb:fc:4d:1c:27:63:7e:12:c8:1a:4f:4b:3c:3d:c6:c1:57:f1:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88F45CA9F42577057740B3862841E292FEE58105
        Validity
            Not Before: Nov  9 13:53:33 2024 GMT
            Not After : Nov  8 13:58:33 2025 GMT
        Subject: CN=293D1B34E45A3B17390AA5B44A425CAF14648B8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4c:d6:6d:85:bd:2a:05:11:06:92:c9:a3:80:
                    d6:be:c6:34:6d:96:71:f2:80:d0:cb:a3:18:fe:7f:
                    d9:a6:34:6b:b3:40:36:18:71:57:eb:8e:c6:7d:0b:
                    13:47:f0:be:2f:66:78:d4:e9:69:cc:ff:72:9d:52:
                    61:6c:6f:fc:96:93:41:13:df:c4:b9:f2:51:31:06:
                    83:7e:96:55:e2:19:e5:70:02:9b:18:1c:98:85:3f:
                    ea:15:c3:ae:d1:a3:a5:63:d5:94:09:90:68:b7:84:
                    32:23:63:bb:f2:64:0f:ba:5b:0e:18:53:32:f9:e3:
                    18:0d:54:93:4b:46:68:8f:95:66:cb:91:c3:1a:ec:
                    96:92:4d:70:cd:b3:c3:1c:e0:63:07:a4:3b:1b:3e:
                    41:4c:32:92:1c:a3:33:e6:98:a9:88:a7:2b:a4:e2:
                    11:ff:b5:96:3b:e2:e8:28:7c:71:bd:d8:4f:30:7b:
                    1b:7e:9b:35:13:ea:7e:b7:73:6a:11:b8:f2:05:53:
                    0b:63:70:f5:2b:d3:7a:c6:09:59:5b:31:91:fd:f3:
                    9f:ce:a3:b0:72:e9:01:d1:46:25:e5:82:af:cf:cd:
                    a3:06:0c:9a:fa:d9:fb:80:97:0d:bb:92:f0:58:f0:
                    55:2f:5c:81:27:79:b7:e7:34:f8:5a:4b:66:01:c0:
                    e4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3D:1B:34:E4:5A:3B:17:39:0A:A5:B4:4A:42:5C:AF:14:64:8B:8D
            X509v3 Authority Key Identifier:
                keyid:88:F4:5C:A9:F4:25:77:05:77:40:B3:86:28:41:E2:92:FE:E5:81:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F45CA9F42577057740B3862841E292FEE58105.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/323830343a333665383a3a2f33322d313238203d3e203532393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         ca:20:1a:85:a8:3b:a1:2a:e5:ca:41:94:a8:9a:8e:8d:92:34:
         22:aa:03:f1:a4:a1:c0:e1:1b:14:6e:ac:25:c2:fe:17:1b:70:
         c5:7c:f7:01:55:4d:e4:46:c8:ed:7c:71:df:23:42:9d:e6:1b:
         ab:e8:3b:4e:93:6a:38:fe:aa:b5:d1:bc:e7:4d:98:d6:aa:bc:
         76:59:11:85:ad:15:cb:7a:ed:54:a8:2d:84:00:fb:0c:e3:87:
         44:15:b3:5e:39:b2:28:2b:b9:79:e6:f0:53:ae:62:a4:a6:76:
         01:3e:0f:02:92:7a:7b:6d:05:13:83:03:c8:06:af:88:cc:35:
         0a:b5:50:ca:05:c5:be:2b:d3:d5:26:7e:07:e7:d4:81:8c:00:
         3e:81:f4:95:ed:db:f3:c9:76:8b:9e:67:69:da:7c:fe:b2:00:
         12:26:87:af:c2:50:6d:1f:67:ed:a5:9d:0f:bb:2f:80:c1:eb:
         1c:c8:66:ec:81:d9:5a:7c:9f:79:62:40:e7:7b:82:1a:5f:6a:
         d2:4f:20:9b:e1:26:af:dc:31:68:17:41:e7:5c:fc:16:1e:47:
         c5:cb:0b:21:93:4c:e8:81:e5:7d:d6:92:2a:1c:eb:2c:e2:d1:
         2c:71:ad:91:22:4c:d2:7c:58:dd:f2:6e:c4:fb:88:1b:8f:17:
         a8:28:c0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:38 2024 by rpki-client on console-ams.rpki-client.org