Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/1/323830343a3631303a3a2f33322d3438203d3e20323632353635.roa
File:                     323830343a3631303a3a2f33322d3438203d3e20323632353635.roa (raw, json)
Hash identifier:          ynamH8DdsZn3H0cuY6ROz00Nxvf3iZ24HUgGp72zwW4=
Subject key identifier:   C1:2E:A6:DB:47:15:95:A7:38:52:CF:3C:23:FB:CD:44:AA:AF:71:AA
Certificate issuer:       /CN=88E26E0285FA89F0727C6A0265CEE4C1D33E3B08
Certificate serial:       6981C22563B1F2C44B8763F17741FFE4747E0F2C
Authority key identifier: 88:E2:6E:02:85:FA:89:F0:72:7C:6A:02:65:CE:E4:C1:D3:3E:3B:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88E26E0285FA89F0727C6A0265CEE4C1D33E3B08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/1/323830343a3631303a3a2f33322d3438203d3e20323632353635.roa
Signing time:             Wed 03 Apr 2024 22:50:25 +0000
ROA not before:           Wed 03 Apr 2024 22:45:25 +0000
ROA not after:            Wed 02 Apr 2025 22:50:25 +0000
asID:                     262565
IP address blocks:        2804:610::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/1/88E26E0285FA89F0727C6A0265CEE4C1D33E3B08.crl
                          rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/1/88E26E0285FA89F0727C6A0265CEE4C1D33E3B08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88E26E0285FA89F0727C6A0265CEE4C1D33E3B08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:81:c2:25:63:b1:f2:c4:4b:87:63:f1:77:41:ff:e4:74:7e:0f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88E26E0285FA89F0727C6A0265CEE4C1D33E3B08
        Validity
            Not Before: Apr  3 22:45:25 2024 GMT
            Not After : Apr  2 22:50:25 2025 GMT
        Subject: CN=C12EA6DB471595A73852CF3C23FBCD44AAAF71AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:05:35:20:81:33:ea:b7:03:cb:cd:7b:51:2f:
                    fc:88:60:24:16:71:6c:41:a9:5f:99:68:3a:15:59:
                    50:75:bd:4c:a6:46:74:ba:1b:8b:d0:0d:ce:e3:62:
                    ac:2d:99:04:be:49:cf:52:d6:c1:8d:2c:ed:d9:d0:
                    1e:c0:0f:fb:8e:37:7a:00:89:be:a8:94:35:41:f5:
                    e3:08:8d:ce:8e:df:02:b7:7d:56:6d:cf:3a:94:7a:
                    94:01:3b:aa:0a:5c:18:65:34:2d:58:d8:4b:bd:e7:
                    30:49:1d:f2:4b:b1:25:0d:e9:6a:79:9b:4d:95:6f:
                    91:64:94:62:a0:f6:b6:e9:19:e5:a2:c6:b7:1e:09:
                    42:78:25:17:84:26:a9:3f:56:19:27:06:26:8a:83:
                    ea:ee:40:7a:0c:be:76:6d:be:9f:cb:1b:3f:ec:55:
                    83:64:08:70:23:3b:e0:46:a6:cf:bd:d7:f5:9d:93:
                    dc:d8:b9:3b:dc:9a:4b:49:6b:95:34:55:e0:30:7d:
                    cc:c6:e1:e3:56:f3:ed:2a:3f:68:a3:41:d9:62:5e:
                    4a:2c:26:81:1e:5f:d8:88:9a:1c:49:11:4b:d6:a6:
                    b1:fc:02:4b:be:6a:72:5a:89:25:62:79:f6:19:a8:
                    aa:93:d2:39:6d:1c:88:7c:bd:ac:97:00:d0:e1:39:
                    cd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2E:A6:DB:47:15:95:A7:38:52:CF:3C:23:FB:CD:44:AA:AF:71:AA
            X509v3 Authority Key Identifier:
                keyid:88:E2:6E:02:85:FA:89:F0:72:7C:6A:02:65:CE:E4:C1:D3:3E:3B:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/1/88E26E0285FA89F0727C6A0265CEE4C1D33E3B08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88E26E0285FA89F0727C6A0265CEE4C1D33E3B08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/1/323830343a3631303a3a2f33322d3438203d3e20323632353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:610::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:27:0e:56:ba:71:55:53:e8:3b:81:16:24:7b:54:e9:3f:be:
         fe:5d:00:70:0b:23:67:e9:42:cd:a1:0a:f3:d0:33:cf:a2:4e:
         60:14:40:a6:59:dc:02:94:b9:53:9b:05:db:78:64:34:b7:ae:
         44:a6:a2:40:cd:e0:84:d7:6f:64:b6:de:21:c2:00:ae:ed:00:
         7e:cc:59:43:a0:e0:1a:f8:60:50:e1:17:f2:2f:3d:53:3c:86:
         e0:92:1f:3e:6c:07:60:76:81:e6:8e:6e:6d:cb:8b:81:ad:f0:
         8a:30:27:7b:61:ff:34:d6:10:92:72:2d:3c:a4:48:f2:af:4c:
         0b:90:9b:a4:47:ee:72:57:df:a3:03:d6:08:04:63:9a:be:0f:
         40:87:93:ae:66:51:51:5f:44:a8:28:87:83:04:b5:bd:8b:83:
         1c:57:4c:d5:1e:34:e9:2a:57:ff:75:0c:70:0b:ec:b6:f8:8e:
         19:b8:5e:37:00:47:ee:f6:5c:45:78:39:9d:ea:4c:1b:83:c8:
         1f:5a:4d:4d:e4:a6:1c:3a:78:fb:26:f8:9b:cd:cd:db:8a:00:
         5b:a8:96:a3:3f:2a:1e:13:1e:a5:52:91:27:6e:83:00:13:e6:
         39:a9:62:78:04:48:0a:55:1d:06:7a:95:52:7e:c3:6d:01:69:
         48:e6:5a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:38 2024 by rpki-client on console-ams.rpki-client.org