Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a383030303a3a2f33332d3333203d3e20323638373236.roa
File:                     323830343a353963633a383030303a3a2f33332d3333203d3e20323638373236.roa (raw, json)
Hash identifier:          TiOyigPDHiMG1HItAEwsDRa34dOcqOAS1ZKhzm1Rs8k=
Subject key identifier:   41:13:3A:A9:87:AC:1C:7E:3E:3D:99:9C:34:C5:57:9C:C7:01:AB:B1
Certificate issuer:       /CN=35B50C0BFD35280E87CA5148761CD72862DBC7DF
Certificate serial:       72C3F826F811BE089082CEACE7CEC10BCBFB0974
Authority key identifier: 35:B5:0C:0B:FD:35:28:0E:87:CA:51:48:76:1C:D7:28:62:DB:C7:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B50C0BFD35280E87CA5148761CD72862DBC7DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a383030303a3a2f33332d3333203d3e20323638373236.roa
Signing time:             Thu 17 Oct 2024 21:12:18 +0000
ROA not before:           Thu 17 Oct 2024 21:07:18 +0000
ROA not after:            Thu 16 Oct 2025 21:12:18 +0000
asID:                     268726
IP address blocks:        2804:59cc:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/35B50C0BFD35280E87CA5148761CD72862DBC7DF.crl
                          rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/35B50C0BFD35280E87CA5148761CD72862DBC7DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B50C0BFD35280E87CA5148761CD72862DBC7DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 06:51:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c3:f8:26:f8:11:be:08:90:82:ce:ac:e7:ce:c1:0b:cb:fb:09:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35B50C0BFD35280E87CA5148761CD72862DBC7DF
        Validity
            Not Before: Oct 17 21:07:18 2024 GMT
            Not After : Oct 16 21:12:18 2025 GMT
        Subject: CN=41133AA987AC1C7E3E3D999C34C5579CC701ABB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:f8:85:e6:23:6b:4e:cd:33:34:b9:9a:a0:
                    43:da:b2:94:be:b9:13:7c:d3:19:ae:3c:b1:1b:6b:
                    21:63:f4:4e:1d:7a:ac:24:93:a6:a4:ce:5a:bc:88:
                    86:42:7b:bc:68:4b:7b:c1:52:1a:52:48:03:8a:05:
                    9e:51:74:85:8b:60:7f:61:e0:8e:b1:37:9e:f1:8c:
                    55:2c:ef:36:0b:f8:7e:5b:86:f7:ea:fa:b5:9a:7e:
                    8e:70:d3:36:db:e0:b5:47:ae:a5:cf:8a:10:7c:4a:
                    9f:1f:cf:62:2a:dd:23:00:ad:ee:f0:57:8c:69:04:
                    4c:f0:ab:bf:4d:5a:09:a4:34:c3:ef:15:4e:e4:d3:
                    11:6e:20:ae:dd:05:c6:8b:eb:e0:d4:0c:91:55:e2:
                    1c:76:80:8e:f7:3c:fd:6c:7f:28:32:bc:f4:6c:a7:
                    c7:55:ed:84:ba:ed:16:ec:ad:30:f6:ae:80:79:a5:
                    1a:24:79:1b:db:48:1e:b7:5e:bc:ee:5e:4f:16:1f:
                    ab:8e:88:15:10:42:fc:da:2e:46:60:53:53:b8:38:
                    37:ab:f7:36:ae:b5:b5:84:5e:c7:d9:4e:d5:1d:dc:
                    0b:e1:2b:50:2c:b5:da:11:d0:9f:23:bb:3d:58:73:
                    5d:8d:9d:0d:f3:24:23:4e:f3:e2:ee:b7:ed:3b:8a:
                    9f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:13:3A:A9:87:AC:1C:7E:3E:3D:99:9C:34:C5:57:9C:C7:01:AB:B1
            X509v3 Authority Key Identifier:
                keyid:35:B5:0C:0B:FD:35:28:0E:87:CA:51:48:76:1C:D7:28:62:DB:C7:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/35B50C0BFD35280E87CA5148761CD72862DBC7DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B50C0BFD35280E87CA5148761CD72862DBC7DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a383030303a3a2f33332d3333203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59cc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1b:42:dd:9c:1a:b4:df:85:43:39:fa:7a:3a:ef:32:60:cd:f6:
         7d:01:33:b5:e0:fc:16:48:cd:16:81:22:5e:e6:4d:86:c2:fc:
         0b:3b:20:c3:7f:4b:e0:dd:c1:e9:5f:aa:b0:1d:a4:df:46:fe:
         0b:29:32:38:a5:06:62:0e:82:93:8f:33:6b:e7:0f:47:c9:38:
         2d:10:e4:29:fa:2e:3d:9c:12:25:38:d4:5d:e0:cb:de:71:31:
         8c:43:0d:d1:29:26:9b:8c:3e:a3:e1:45:3a:43:88:57:f4:84:
         e7:2e:d5:3d:dd:1c:d8:89:09:d2:ee:3f:f6:85:8f:3d:a1:96:
         ec:54:45:86:f6:28:1c:35:cc:7a:f5:1d:14:ca:56:c1:e2:4b:
         33:b8:fc:2a:d2:09:fa:03:58:03:b9:53:48:43:25:1c:8f:80:
         d8:09:a3:f2:18:f6:d8:e0:21:f9:2d:a5:4d:d6:0e:4d:47:f1:
         78:98:2d:e0:ee:2d:6f:98:b2:30:3a:35:12:44:59:43:26:72:
         9a:f1:cf:3f:32:3e:8f:b9:56:08:42:d9:ed:b2:a4:f4:87:00:
         dd:a2:2d:fc:88:e6:e1:de:bf:96:cb:34:e6:3b:43:3b:bf:65:
         f7:93:73:0f:dd:2d:ae:ae:cd:5d:ba:da:14:04:60:2d:e1:25:
         a4:00:5c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:03:31 2024 by rpki-client on console-fra.rpki-client.org