Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a3a2f33332d3333203d3e20323638373236.roa
File:                     323830343a353963633a3a2f33332d3333203d3e20323638373236.roa (raw, json)
Hash identifier:          F23yLiZJYqHA06ZWNaGTRqTo2KKCVXUwFrlHBoZbqjQ=
Subject key identifier:   2B:77:23:2C:40:EB:4C:44:82:A0:37:EF:67:75:41:8A:9E:C8:7B:BD
Certificate issuer:       /CN=35B50C0BFD35280E87CA5148761CD72862DBC7DF
Certificate serial:       3ECED835177C441C4C06FE7196B9E41DA7F95133
Authority key identifier: 35:B5:0C:0B:FD:35:28:0E:87:CA:51:48:76:1C:D7:28:62:DB:C7:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B50C0BFD35280E87CA5148761CD72862DBC7DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a3a2f33332d3333203d3e20323638373236.roa
Signing time:             Thu 17 Oct 2024 21:12:17 +0000
ROA not before:           Thu 17 Oct 2024 21:07:17 +0000
ROA not after:            Thu 16 Oct 2025 21:12:17 +0000
asID:                     268726
IP address blocks:        2804:59cc::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/35B50C0BFD35280E87CA5148761CD72862DBC7DF.crl
                          rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/35B50C0BFD35280E87CA5148761CD72862DBC7DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B50C0BFD35280E87CA5148761CD72862DBC7DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ce:d8:35:17:7c:44:1c:4c:06:fe:71:96:b9:e4:1d:a7:f9:51:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35B50C0BFD35280E87CA5148761CD72862DBC7DF
        Validity
            Not Before: Oct 17 21:07:17 2024 GMT
            Not After : Oct 16 21:12:17 2025 GMT
        Subject: CN=2B77232C40EB4C4482A037EF6775418A9EC87BBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:57:57:f7:ca:34:3c:00:c0:65:5f:52:9a:d7:
                    cf:ac:3f:d6:19:ed:1d:18:35:0d:fa:61:27:69:58:
                    ab:09:82:f9:9d:9b:b6:95:c6:5a:a4:e8:a5:bb:c3:
                    85:97:54:9b:3a:c9:79:74:7d:0f:5b:bc:85:39:55:
                    11:f0:22:b8:88:a5:92:34:af:6f:e9:ab:09:b2:5f:
                    c9:e7:29:40:ab:72:c5:78:a7:5b:be:7c:e8:70:3a:
                    c8:18:1c:23:65:76:d9:a5:06:ff:25:61:62:49:65:
                    69:c6:eb:db:69:2d:a3:a4:53:aa:55:4a:aa:50:11:
                    e2:04:7f:97:20:2b:ea:4e:45:71:fd:a3:f7:fc:29:
                    0e:cc:75:fe:05:8d:41:8b:a0:66:c8:24:96:10:07:
                    eb:dc:35:a7:f0:b4:96:48:66:21:b6:60:3a:73:c7:
                    f3:a2:5e:ae:be:05:58:ca:7e:06:05:91:6d:f5:84:
                    42:07:02:8a:d3:84:c7:40:54:f4:c6:5d:d0:76:0f:
                    b6:33:67:0d:cb:61:cd:81:2a:ea:3e:71:86:02:1b:
                    6b:46:30:fa:83:45:7c:7f:e5:ac:45:21:bb:d0:d8:
                    02:fa:75:d1:d3:dd:eb:ea:5f:99:e3:bd:66:5e:0b:
                    cd:08:13:a7:23:d7:4a:37:93:a6:69:b9:a9:96:2a:
                    f7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:77:23:2C:40:EB:4C:44:82:A0:37:EF:67:75:41:8A:9E:C8:7B:BD
            X509v3 Authority Key Identifier:
                keyid:35:B5:0C:0B:FD:35:28:0E:87:CA:51:48:76:1C:D7:28:62:DB:C7:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/35B50C0BFD35280E87CA5148761CD72862DBC7DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B50C0BFD35280E87CA5148761CD72862DBC7DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a3a2f33332d3333203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59cc::/33

    Signature Algorithm: sha256WithRSAEncryption
         cf:8c:71:57:c5:4b:fc:40:49:6a:8a:83:24:2e:38:fc:dd:43:
         d8:d3:ba:7e:f8:1e:e6:c6:db:fb:e1:21:24:2b:0f:85:d8:7c:
         7d:2c:cc:93:96:73:a9:14:f7:c3:28:6d:c9:59:1d:f2:9d:74:
         1b:3f:a2:aa:36:28:9f:98:25:e2:a9:c9:12:7e:86:48:f5:82:
         b0:17:30:89:07:f8:44:fd:7d:c5:f9:76:7d:c1:05:17:53:8d:
         81:45:bc:e3:50:9d:b2:0c:06:9a:98:86:da:02:26:df:a3:26:
         7d:11:4f:ae:f4:2c:1c:cf:25:46:7b:fa:a3:f0:0a:dc:25:78:
         7d:56:23:c8:f4:47:84:4b:fa:99:c3:17:8d:49:81:62:e4:35:
         36:4a:c3:df:35:09:ac:47:18:30:4a:a6:dc:c2:ea:07:f0:b7:
         81:7c:37:00:e5:0b:7a:5e:d6:37:fa:6d:77:1c:84:6d:5f:30:
         19:3d:7c:2a:8a:c0:a9:3a:4b:37:91:8b:7f:14:32:d2:f4:e0:
         31:18:fe:b4:ff:55:11:17:4e:2c:e5:96:f7:0d:1c:07:84:cf:
         e2:cc:5b:10:07:5d:67:90:39:99:d2:2c:39:7f:3d:bf:60:78:
         8a:d4:2b:f4:fb:f2:ef:41:65:21:ec:70:07:b7:dd:52:0b:e3:
         4a:3c:d9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:23 2024 by rpki-client on console-fra.rpki-client.org