Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a343030303a3a2f33342d3334203d3e20323638373236.roa
File:                     323830343a353963633a343030303a3a2f33342d3334203d3e20323638373236.roa (raw, json)
Hash identifier:          zhFSjD60SQY8BkrP7cypjOPUzu5Rx1B7XhNi3mShGFg=
Subject key identifier:   B0:A4:83:DF:70:D2:E9:2E:CF:70:D0:90:92:0D:77:8A:80:87:BB:9F
Certificate issuer:       /CN=35B50C0BFD35280E87CA5148761CD72862DBC7DF
Certificate serial:       40D7A2482AD77126295A11C35C2BFCC9E5952D79
Authority key identifier: 35:B5:0C:0B:FD:35:28:0E:87:CA:51:48:76:1C:D7:28:62:DB:C7:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B50C0BFD35280E87CA5148761CD72862DBC7DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a343030303a3a2f33342d3334203d3e20323638373236.roa
Signing time:             Thu 17 Oct 2024 21:12:22 +0000
ROA not before:           Thu 17 Oct 2024 21:07:22 +0000
ROA not after:            Thu 16 Oct 2025 21:12:22 +0000
asID:                     268726
IP address blocks:        2804:59cc:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/35B50C0BFD35280E87CA5148761CD72862DBC7DF.crl
                          rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/35B50C0BFD35280E87CA5148761CD72862DBC7DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B50C0BFD35280E87CA5148761CD72862DBC7DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:d7:a2:48:2a:d7:71:26:29:5a:11:c3:5c:2b:fc:c9:e5:95:2d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35B50C0BFD35280E87CA5148761CD72862DBC7DF
        Validity
            Not Before: Oct 17 21:07:22 2024 GMT
            Not After : Oct 16 21:12:22 2025 GMT
        Subject: CN=B0A483DF70D2E92ECF70D090920D778A8087BB9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9b:8f:c1:a8:e2:71:dd:65:0d:c0:36:13:db:
                    b5:c0:b8:9f:ec:d0:99:65:89:bf:6e:d2:a0:12:a6:
                    2c:2c:53:cf:01:6e:bb:44:2f:e4:f6:d2:13:9f:61:
                    a4:b1:da:b4:58:38:17:97:9e:ae:92:f4:77:27:8c:
                    fa:25:04:d2:cf:e2:da:e5:e0:10:8a:87:e5:98:cd:
                    a5:58:1b:09:75:85:ad:f8:86:e9:f4:b4:95:c2:7c:
                    57:c7:e3:80:df:a6:b7:af:f0:dc:b5:e5:66:c1:8d:
                    34:99:70:f3:4a:ef:c2:f3:1d:a7:a8:6c:50:8c:30:
                    77:58:a4:5b:d2:6e:8d:1b:77:e5:e9:e8:43:03:23:
                    c4:c5:18:2a:ee:a2:aa:de:29:83:dd:e9:9d:91:5c:
                    2a:74:c3:ef:77:35:5b:3b:bf:67:f1:0e:44:fd:6e:
                    29:36:b1:56:94:1a:ce:c0:34:b8:7d:9e:35:4a:21:
                    3c:d7:1a:57:a6:f8:15:af:39:e6:48:fa:26:9b:aa:
                    4c:07:fa:5b:24:1f:54:cf:47:33:14:7c:ed:c0:e6:
                    3d:8e:10:64:6a:04:5e:e3:8f:70:01:fc:18:1b:65:
                    31:e9:a2:a8:bd:1a:77:8f:78:3d:b9:c8:4c:28:f8:
                    c0:ba:d8:ff:f8:63:4a:c2:94:b5:ce:36:bb:e3:57:
                    02:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A4:83:DF:70:D2:E9:2E:CF:70:D0:90:92:0D:77:8A:80:87:BB:9F
            X509v3 Authority Key Identifier:
                keyid:35:B5:0C:0B:FD:35:28:0E:87:CA:51:48:76:1C:D7:28:62:DB:C7:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/35B50C0BFD35280E87CA5148761CD72862DBC7DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B50C0BFD35280E87CA5148761CD72862DBC7DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a343030303a3a2f33342d3334203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59cc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         cf:6f:ce:3a:64:63:d4:08:d9:1f:88:02:12:03:21:18:8e:75:
         28:92:ee:e7:8d:21:54:86:98:cc:6e:91:25:82:ba:8f:b3:c2:
         98:9b:1e:c4:15:88:ae:8a:89:5c:0e:e1:59:55:96:c8:73:f9:
         88:6f:f0:5d:ce:6b:8d:b8:0e:18:d8:31:bb:fe:91:96:ca:41:
         07:f9:da:ba:7c:98:04:5f:fe:ca:12:d4:6c:f2:af:d5:34:7e:
         c3:41:52:c3:a1:d6:eb:0b:16:d7:7c:a2:4e:15:dd:6d:60:2c:
         79:6a:c5:ad:8f:92:8f:72:95:20:04:ec:05:7e:e5:cb:4a:84:
         67:be:22:91:1e:e9:27:3a:bd:76:9a:5e:99:f3:a3:16:10:5d:
         22:0b:81:1d:cf:02:87:c3:b4:c1:70:19:4f:81:a3:5d:56:a0:
         b2:d0:58:34:4e:a5:42:78:7b:2b:98:57:3a:09:b3:3e:c0:78:
         dc:92:21:7e:00:10:fd:37:12:87:fa:6b:fd:37:1b:8e:d2:61:
         df:33:5a:a0:ef:7f:e4:c3:d0:7d:29:07:07:a1:c6:4c:d4:a9:
         17:b9:93:00:01:41:c3:3e:d1:23:68:47:e8:a8:84:81:98:35:
         97:fb:68:25:62:8c:0a:95:d3:20:30:43:95:3d:4d:33:fc:87:
         11:0b:52:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:13 2024 by rpki-client on console-ams.rpki-client.org