Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a3a2f33322d3332203d3e20323638373236.roa
File:                     323830343a353963633a3a2f33322d3332203d3e20323638373236.roa (raw, json)
Hash identifier:          IlDTRsP/CUj0j9tOn1XgC/UH7eFFvr4UxCg4qGGMU7M=
Subject key identifier:   19:61:87:BB:42:55:50:B6:BE:7B:84:F1:16:0A:9F:0C:68:19:0C:F9
Certificate issuer:       /CN=35B50C0BFD35280E87CA5148761CD72862DBC7DF
Certificate serial:       5CE22033C34B53F8387D9E4CCDE59F1B10C548F7
Authority key identifier: 35:B5:0C:0B:FD:35:28:0E:87:CA:51:48:76:1C:D7:28:62:DB:C7:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B50C0BFD35280E87CA5148761CD72862DBC7DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a3a2f33322d3332203d3e20323638373236.roa
Signing time:             Thu 17 Oct 2024 21:12:19 +0000
ROA not before:           Thu 17 Oct 2024 21:07:19 +0000
ROA not after:            Thu 16 Oct 2025 21:12:19 +0000
asID:                     268726
IP address blocks:        2804:59cc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/35B50C0BFD35280E87CA5148761CD72862DBC7DF.crl
                          rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/35B50C0BFD35280E87CA5148761CD72862DBC7DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B50C0BFD35280E87CA5148761CD72862DBC7DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e2:20:33:c3:4b:53:f8:38:7d:9e:4c:cd:e5:9f:1b:10:c5:48:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35B50C0BFD35280E87CA5148761CD72862DBC7DF
        Validity
            Not Before: Oct 17 21:07:19 2024 GMT
            Not After : Oct 16 21:12:19 2025 GMT
        Subject: CN=196187BB425550B6BE7B84F1160A9F0C68190CF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9c:a4:de:83:50:b0:eb:d5:a1:54:5f:05:61:
                    52:64:10:db:7c:30:6e:9e:9d:30:bb:b7:89:db:b0:
                    85:ac:96:2f:a0:6e:20:eb:f8:3d:95:68:07:b7:11:
                    87:af:92:a9:de:36:1e:bf:75:47:f5:c9:d9:12:98:
                    bf:1a:15:69:84:5a:ea:c3:f1:67:25:f8:16:f7:29:
                    33:3e:38:bb:f0:9f:ec:cd:94:79:62:a6:93:41:76:
                    28:3b:f8:b5:29:f9:e1:82:e8:24:d5:80:9a:8e:28:
                    5b:da:2f:1c:c3:f4:97:d0:1e:70:3f:d4:a8:ab:5b:
                    3f:8b:e5:0d:6d:af:94:b0:45:a7:96:1b:40:e5:a5:
                    a3:fa:05:49:59:f4:40:b1:63:d1:b3:8f:71:30:ea:
                    0e:0d:99:c4:70:ec:35:25:01:90:a0:fc:b5:6a:98:
                    6a:63:29:54:fc:aa:d0:78:6f:0c:e4:ea:e4:f0:81:
                    76:4b:7e:ec:17:fd:8e:a4:2c:ff:2e:c6:e2:3f:80:
                    54:6a:b7:9d:b2:6e:91:c9:1b:82:4f:b8:3c:10:3f:
                    1a:69:2d:77:62:5b:c1:4c:c6:fa:07:23:1d:71:2f:
                    64:06:e5:11:96:41:1c:c2:23:8a:5f:46:41:5d:11:
                    6c:da:4a:81:11:18:2e:72:30:ff:6d:f0:35:2c:85:
                    15:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:61:87:BB:42:55:50:B6:BE:7B:84:F1:16:0A:9F:0C:68:19:0C:F9
            X509v3 Authority Key Identifier:
                keyid:35:B5:0C:0B:FD:35:28:0E:87:CA:51:48:76:1C:D7:28:62:DB:C7:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/35B50C0BFD35280E87CA5148761CD72862DBC7DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B50C0BFD35280E87CA5148761CD72862DBC7DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a3a2f33322d3332203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:bf:43:03:83:f9:9b:ff:63:fd:cc:18:0f:03:20:f4:d6:76:
         12:a0:ca:ea:12:41:ae:28:18:95:40:b2:92:31:f2:ca:0d:87:
         5e:2e:bc:7b:45:c0:10:fc:94:47:c8:7b:e9:25:7c:42:e2:f4:
         65:8c:5b:b4:0d:32:a8:ec:2e:dd:15:81:86:09:6a:44:32:49:
         1a:97:5d:ee:77:52:06:ed:0e:3b:43:49:71:81:e9:32:02:87:
         fd:df:6f:ff:2d:66:d1:58:39:0f:07:5d:ab:3b:ce:bc:7b:b2:
         34:0e:e4:fb:df:85:fc:c2:f6:b2:a1:21:3d:6c:32:fc:74:82:
         42:e8:b8:5b:03:af:e2:94:69:12:60:72:0e:8b:96:17:4d:c9:
         be:97:44:40:7a:76:34:b0:2c:b5:bf:81:66:fd:05:f6:14:3b:
         e3:17:40:f4:70:1e:92:00:49:21:34:7d:fa:2b:71:20:27:9d:
         f6:fc:01:e8:16:19:f5:9e:2b:29:bb:b0:83:ec:03:35:2e:4a:
         fc:aa:9b:7a:b2:92:c5:49:83:6e:27:5b:98:15:2c:fa:4f:f9:
         fe:6d:b5:0d:de:cc:9c:6b:cd:10:ca:85:0c:b4:27:3a:e5:84:
         61:bb:39:7a:29:fa:69:6e:95:5c:4c:2d:f2:c2:58:fe:79:b1:
         e4:a6:2c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:33 2024 by rpki-client on console-ams.rpki-client.org