Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a383030303a3a2f33342d3334203d3e20323638373236.roa
File:                     323830343a353963633a383030303a3a2f33342d3334203d3e20323638373236.roa (raw, json)
Hash identifier:          eCOy0iu3Upn1CQVYqH6Ue4+8mZvhgU9p59zVc7dngQI=
Subject key identifier:   39:29:B7:76:EE:56:99:F9:77:A5:6D:DA:B4:85:B2:2A:E3:6E:94:A9
Certificate issuer:       /CN=35B50C0BFD35280E87CA5148761CD72862DBC7DF
Certificate serial:       2279CCA0C2415F6EBB6D1A4AEDA9DDCB7FEF8955
Authority key identifier: 35:B5:0C:0B:FD:35:28:0E:87:CA:51:48:76:1C:D7:28:62:DB:C7:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B50C0BFD35280E87CA5148761CD72862DBC7DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a383030303a3a2f33342d3334203d3e20323638373236.roa
Signing time:             Thu 17 Oct 2024 21:12:17 +0000
ROA not before:           Thu 17 Oct 2024 21:07:17 +0000
ROA not after:            Thu 16 Oct 2025 21:12:17 +0000
asID:                     268726
IP address blocks:        2804:59cc:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/35B50C0BFD35280E87CA5148761CD72862DBC7DF.crl
                          rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/35B50C0BFD35280E87CA5148761CD72862DBC7DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B50C0BFD35280E87CA5148761CD72862DBC7DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:79:cc:a0:c2:41:5f:6e:bb:6d:1a:4a:ed:a9:dd:cb:7f:ef:89:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35B50C0BFD35280E87CA5148761CD72862DBC7DF
        Validity
            Not Before: Oct 17 21:07:17 2024 GMT
            Not After : Oct 16 21:12:17 2025 GMT
        Subject: CN=3929B776EE5699F977A56DDAB485B22AE36E94A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ef:45:13:63:d3:c0:07:8f:de:96:ae:25:a4:
                    69:87:89:0f:a0:3c:a4:90:e0:64:58:76:85:59:08:
                    e7:fd:9b:7c:28:fc:75:50:3d:03:36:20:ee:76:4d:
                    cb:fb:ba:17:90:b6:56:67:62:55:72:e7:6a:36:f6:
                    21:53:12:d9:45:d7:6d:8e:36:82:dd:38:70:fd:17:
                    6e:45:0c:e1:1d:d6:5e:ea:42:f1:bc:b0:e2:02:6c:
                    e6:fa:20:1f:0b:0a:e3:4a:79:41:16:f8:f2:b4:bd:
                    5f:f2:fb:57:09:07:13:4c:60:51:76:c4:b7:8d:18:
                    a5:6c:1b:72:d8:f8:0c:7a:ef:96:ba:c7:77:8c:83:
                    80:53:de:03:74:63:c1:69:84:ff:85:6c:16:5a:04:
                    a4:74:3d:a4:b4:25:1b:c5:e7:48:26:4e:f4:1d:97:
                    55:14:eb:e9:e2:87:80:40:01:00:9d:3a:ad:39:16:
                    3b:bf:6c:b7:69:54:6f:26:a1:fa:41:85:59:40:d8:
                    38:bc:46:b7:1a:3a:57:39:e7:de:d0:ae:82:d7:a3:
                    90:50:6b:a2:b0:11:a3:b7:25:ff:8d:2b:e3:22:67:
                    dd:aa:4d:3b:d3:bb:06:e8:09:ae:88:9f:8c:9d:66:
                    22:35:61:9b:09:6c:5f:a0:5e:ba:a7:e8:de:47:5d:
                    80:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:29:B7:76:EE:56:99:F9:77:A5:6D:DA:B4:85:B2:2A:E3:6E:94:A9
            X509v3 Authority Key Identifier:
                keyid:35:B5:0C:0B:FD:35:28:0E:87:CA:51:48:76:1C:D7:28:62:DB:C7:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/35B50C0BFD35280E87CA5148761CD72862DBC7DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B50C0BFD35280E87CA5148761CD72862DBC7DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a383030303a3a2f33342d3334203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59cc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b2:10:6c:7d:fd:28:4e:b0:26:f1:e2:40:6b:20:5c:59:10:18:
         c2:0a:db:e1:4e:0f:71:78:a5:81:79:e3:8f:01:44:98:c5:7e:
         ff:31:fe:bf:07:2a:1a:20:26:fb:e4:07:ec:d2:9c:7e:d9:9b:
         c4:e5:a3:3d:60:4a:29:54:25:5d:c6:c7:54:b2:4a:2d:cd:9c:
         d7:42:ec:50:1c:b5:cc:bd:54:bf:82:c0:67:c8:b9:8a:3b:19:
         b7:ff:6b:fa:11:a8:fe:a1:90:bb:e5:d3:7a:04:21:b9:ee:c8:
         b8:c4:44:18:f4:ca:1a:43:37:68:9b:34:91:af:6a:b2:65:b9:
         97:92:46:78:bb:63:61:12:bc:74:cf:d1:1c:be:36:a9:6f:91:
         bd:66:d0:d4:be:45:fe:5d:1b:25:fd:2d:7f:74:db:6d:1c:a2:
         40:be:c3:c7:73:b8:c2:fd:31:68:b8:1a:eb:02:28:9b:a0:92:
         aa:1c:a9:0e:bf:7c:96:31:88:62:e7:c6:fd:61:09:9d:9d:20:
         ed:bc:2e:94:8b:91:40:9a:31:6b:1f:32:27:d2:3f:cd:a7:81:
         16:82:bb:de:00:4d:97:2e:3b:a6:d0:77:82:e3:04:36:50:14:
         1e:11:88:65:fe:5a:5a:a2:95:2a:dc:18:57:5a:b7:fb:fd:63:
         f8:b8:1b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:33 2024 by rpki-client on console-ams.rpki-client.org