Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a633030303a3a2f33342d3334203d3e20323638373236.roa
File:                     323830343a353963633a633030303a3a2f33342d3334203d3e20323638373236.roa (raw, json)
Hash identifier:          JrLGlxQJoNcCLgLZ0sbz+6mMMIo9CwHoT7t4w9zp3W4=
Subject key identifier:   02:15:E7:F9:4A:D7:5C:45:35:BD:A7:57:81:B6:3A:12:D9:BD:1D:AC
Certificate issuer:       /CN=35B50C0BFD35280E87CA5148761CD72862DBC7DF
Certificate serial:       53D199954EDEC38E6B1072FCC77F0920DD182ACF
Authority key identifier: 35:B5:0C:0B:FD:35:28:0E:87:CA:51:48:76:1C:D7:28:62:DB:C7:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B50C0BFD35280E87CA5148761CD72862DBC7DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a633030303a3a2f33342d3334203d3e20323638373236.roa
Signing time:             Thu 17 Oct 2024 21:12:22 +0000
ROA not before:           Thu 17 Oct 2024 21:07:22 +0000
ROA not after:            Thu 16 Oct 2025 21:12:22 +0000
asID:                     268726
IP address blocks:        2804:59cc:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/35B50C0BFD35280E87CA5148761CD72862DBC7DF.crl
                          rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/35B50C0BFD35280E87CA5148761CD72862DBC7DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B50C0BFD35280E87CA5148761CD72862DBC7DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 06:51:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d1:99:95:4e:de:c3:8e:6b:10:72:fc:c7:7f:09:20:dd:18:2a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35B50C0BFD35280E87CA5148761CD72862DBC7DF
        Validity
            Not Before: Oct 17 21:07:22 2024 GMT
            Not After : Oct 16 21:12:22 2025 GMT
        Subject: CN=0215E7F94AD75C4535BDA75781B63A12D9BD1DAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e0:9b:74:4d:c5:89:f2:5b:66:a2:58:70:b3:
                    2d:f1:84:69:25:dc:40:a0:02:35:50:83:07:dc:89:
                    30:70:d0:44:48:6f:56:f1:4e:59:76:f2:4c:22:43:
                    fb:bb:7a:e0:06:60:e8:32:99:6b:e1:84:20:ac:e2:
                    79:9d:6d:fe:3e:50:40:6b:00:ea:8e:36:47:30:1d:
                    72:62:37:9f:cf:42:c1:e8:66:10:40:94:f8:f3:d1:
                    b9:56:1d:e8:92:62:9c:d6:83:a5:63:b9:6b:65:55:
                    0a:4f:49:44:c3:f8:fe:62:4a:5f:64:ca:21:c0:5e:
                    e8:02:e8:ec:77:3b:b4:a5:91:f6:57:f2:42:fc:93:
                    82:e8:71:ac:0d:23:b4:3f:52:69:ea:8b:fb:60:40:
                    73:04:c5:30:45:20:89:30:89:d8:b3:b4:47:7a:dc:
                    77:b1:31:82:7f:38:9c:cd:e1:df:83:81:4b:93:54:
                    ba:63:90:51:c1:01:68:db:44:79:9f:47:ae:87:99:
                    57:88:da:4c:ea:ea:38:0f:3c:d7:5e:76:10:99:dc:
                    2e:8f:d9:9c:41:81:54:c4:3d:93:ed:6f:12:73:91:
                    36:18:a6:15:6d:99:b1:ab:5a:bd:25:6f:8d:fe:95:
                    0a:dc:05:aa:14:b1:c8:91:69:b5:d7:c7:ab:0c:39:
                    e7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:15:E7:F9:4A:D7:5C:45:35:BD:A7:57:81:B6:3A:12:D9:BD:1D:AC
            X509v3 Authority Key Identifier:
                keyid:35:B5:0C:0B:FD:35:28:0E:87:CA:51:48:76:1C:D7:28:62:DB:C7:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/35B50C0BFD35280E87CA5148761CD72862DBC7DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B50C0BFD35280E87CA5148761CD72862DBC7DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a633030303a3a2f33342d3334203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59cc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         86:50:bd:ea:e1:5b:ea:2c:45:b5:28:52:61:e8:af:95:b6:45:
         13:c6:b3:d2:29:3b:12:e6:7e:03:28:fd:e1:5c:b2:97:1e:a2:
         f6:a6:04:d8:ee:54:22:ed:e0:fd:dc:ce:d1:9b:90:86:13:ef:
         7d:ae:c6:85:f8:11:98:1e:d1:08:9b:ca:ce:5a:ff:0c:d9:c7:
         56:9c:f8:32:20:be:a5:41:fd:74:74:13:4f:7e:e0:95:e7:c2:
         3f:68:ba:e0:96:95:80:e6:f8:52:80:7d:72:f8:41:3b:a1:76:
         fe:5f:ca:a4:13:29:ae:1d:5c:da:65:93:20:7e:ab:5c:4c:61:
         00:86:b5:36:00:ed:a9:c6:89:a7:d2:d5:f4:af:58:80:95:f4:
         e4:37:01:ad:69:3f:d3:d8:c5:fb:7a:29:aa:04:4b:42:03:f4:
         eb:15:98:e4:86:4a:df:89:05:88:ca:74:25:35:33:49:18:e1:
         f9:d1:a9:8c:24:48:cf:35:a0:28:13:c7:bd:83:40:c3:21:c7:
         b2:e1:0e:94:3d:21:1e:26:3b:c3:f9:d7:93:08:77:15:ee:ba:
         ec:18:30:45:c9:38:a2:5a:90:c1:40:49:c1:b4:88:e0:7d:a0:
         f6:17:bc:d7:f9:fc:5e:49:04:f9:43:02:8c:cd:7a:a3:c3:da:
         c0:54:8a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:02:47 2024 by rpki-client on console-ams.rpki-client.org