Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/2/323830343a323463633a3a2f33322d313238203d3e20323634323432.roa
File:                     323830343a323463633a3a2f33322d313238203d3e20323634323432.roa (raw, json)
Hash identifier:          juCtpsM2g8IhEBNsWIBZsVERgFv8GZ9tn5LkNsWVK8k=
Subject key identifier:   E2:07:FA:60:3A:73:5D:A5:33:05:69:35:A2:85:23:07:47:C0:C0:3D
Certificate issuer:       /CN=F9FD945661279E684F2D83F08D42ABC68D0123E5
Certificate serial:       363F441A93FCDE41565B2B9C4C0D2BEC4BF2C90F
Authority key identifier: F9:FD:94:56:61:27:9E:68:4F:2D:83:F0:8D:42:AB:C6:8D:01:23:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FD945661279E684F2D83F08D42ABC68D0123E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/2/323830343a323463633a3a2f33322d313238203d3e20323634323432.roa
Signing time:             Thu 04 Apr 2024 21:34:47 +0000
ROA not before:           Thu 04 Apr 2024 21:29:47 +0000
ROA not after:            Thu 03 Apr 2025 21:34:47 +0000
asID:                     264242
IP address blocks:        2804:24cc::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/2/F9FD945661279E684F2D83F08D42ABC68D0123E5.crl
                          rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/2/F9FD945661279E684F2D83F08D42ABC68D0123E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FD945661279E684F2D83F08D42ABC68D0123E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3f:44:1a:93:fc:de:41:56:5b:2b:9c:4c:0d:2b:ec:4b:f2:c9:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9FD945661279E684F2D83F08D42ABC68D0123E5
        Validity
            Not Before: Apr  4 21:29:47 2024 GMT
            Not After : Apr  3 21:34:47 2025 GMT
        Subject: CN=E207FA603A735DA533056935A285230747C0C03D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:3e:99:13:44:40:f0:8e:f6:5b:63:7f:d0:
                    31:fc:a6:fa:0c:30:7a:57:60:b7:f1:81:0d:51:bf:
                    68:d3:f5:e3:57:c1:c0:dd:55:ed:01:19:21:9f:49:
                    06:89:ea:f0:61:d3:20:a6:65:a2:65:9c:4b:63:08:
                    66:35:ce:ae:1b:04:d4:9e:8d:18:26:0a:73:16:ec:
                    9f:41:7c:eb:6a:df:b4:f5:d0:01:28:54:bc:50:99:
                    90:91:07:45:4a:c3:b5:0f:f9:b2:6c:f2:fb:c4:31:
                    65:af:34:ad:14:fd:62:30:4b:4c:ce:c8:74:a5:4f:
                    8f:1e:ae:51:9d:b8:8a:f3:c4:89:77:d2:2f:49:6b:
                    ab:3a:70:a1:90:df:d1:6e:45:49:8b:1d:ca:e4:d5:
                    14:a8:b1:4a:9c:fc:af:b3:85:b8:fa:d9:64:01:20:
                    c6:9f:31:61:dc:fa:ed:7f:7c:e3:0b:db:d2:67:fd:
                    34:72:19:6d:b3:9d:e8:d1:56:1f:89:b4:9f:28:4d:
                    44:dd:a9:c8:59:0e:63:96:c6:76:7a:87:e7:f4:f4:
                    1d:49:be:e1:a0:d6:0b:d2:9d:8b:eb:fc:bf:2d:86:
                    10:8f:6d:b8:47:b8:e5:a0:48:6b:d4:07:ac:7c:b0:
                    89:92:da:49:25:0e:69:ba:f0:98:d9:4e:49:95:18:
                    fe:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:07:FA:60:3A:73:5D:A5:33:05:69:35:A2:85:23:07:47:C0:C0:3D
            X509v3 Authority Key Identifier:
                keyid:F9:FD:94:56:61:27:9E:68:4F:2D:83:F0:8D:42:AB:C6:8D:01:23:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/2/F9FD945661279E684F2D83F08D42ABC68D0123E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FD945661279E684F2D83F08D42ABC68D0123E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/2/323830343a323463633a3a2f33322d313238203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:7b:fe:39:92:9b:93:19:a1:49:50:5e:c2:55:18:52:58:4b:
         66:41:d8:50:5a:93:8c:3e:cb:47:7b:b8:b1:c2:7a:12:ce:fd:
         0a:36:84:88:ec:c3:31:37:b5:09:ed:e0:4a:88:9e:de:fd:a6:
         3c:3c:48:e0:a1:db:c4:ef:ea:a5:cd:d8:e7:b4:eb:cd:1b:e5:
         b1:f1:d5:d6:47:29:4e:66:38:bc:0f:6c:de:3c:08:6a:b2:f4:
         62:be:f7:16:b3:85:c0:f8:0a:a3:cc:b8:c6:b2:63:e2:d7:3d:
         e9:21:5e:bf:99:a4:04:c2:5d:77:3d:3c:40:49:5e:2d:65:a9:
         97:d1:47:32:1c:2f:c8:8d:ac:79:70:29:4f:fd:0f:73:96:79:
         70:3e:53:5d:dc:a1:64:c0:eb:4e:8a:60:5e:a6:87:fe:d9:fc:
         c2:77:35:81:fd:15:ac:07:77:df:e5:26:50:d9:b6:d8:17:b1:
         83:44:8f:d0:8a:b9:27:58:92:19:f1:29:e8:9d:f3:2c:ea:b6:
         4b:b7:88:58:d3:18:63:33:8c:04:94:18:30:cb:46:a7:f9:6c:
         18:da:1d:8f:e2:67:70:68:39:55:2d:72:41:be:da:2e:0f:e2:
         80:fb:de:9d:52:47:ba:64:b8:93:bd:17:d9:2f:18:64:59:3b:
         7b:9f:ac:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:44 2024 by rpki-client on console-ams.rpki-client.org