Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/323830343a326635633a3a2f33322d3335203d3e20323634383836.roa
File:                     323830343a326635633a3a2f33322d3335203d3e20323634383836.roa (raw, json)
Hash identifier:          snd6nRzvXZmwn8Oo/dZNpJJ3eJ0I3IihZBnnBebYdl0=
Subject key identifier:   E0:C6:1E:DD:6E:2A:29:ED:50:DE:AF:72:E3:A3:F8:8D:02:1C:DD:52
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       77E8F00EAF5E2D6DE745C0898FA602E3C3E81DFE
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/323830343a326635633a3a2f33322d3335203d3e20323634383836.roa
Signing time:             Thu 04 Apr 2024 04:53:05 +0000
ROA not before:           Thu 04 Apr 2024 04:48:05 +0000
ROA not after:            Thu 03 Apr 2025 04:53:05 +0000
asID:                     264886
IP address blocks:        2804:2f5c::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e8:f0:0e:af:5e:2d:6d:e7:45:c0:89:8f:a6:02:e3:c3:e8:1d:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Apr  4 04:48:05 2024 GMT
            Not After : Apr  3 04:53:05 2025 GMT
        Subject: CN=E0C61EDD6E2A29ED50DEAF72E3A3F88D021CDD52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:02:0a:5c:10:42:5c:a8:f9:f5:7a:6b:d3:d9:
                    71:56:ba:6d:1e:47:1d:75:ad:27:64:cf:d7:53:fa:
                    25:17:3e:03:35:bd:30:53:9a:b2:ef:b2:92:f5:09:
                    8a:64:0a:2e:f7:e0:e4:c0:f3:b0:fc:8b:e9:8c:ec:
                    8c:12:c9:6c:15:2a:6f:6d:b6:a8:7d:5d:bc:89:96:
                    44:25:b5:ef:db:14:0c:ad:e2:7e:4d:c2:3c:30:c7:
                    80:c3:48:23:e7:7c:a4:eb:9b:d5:bb:06:09:6f:10:
                    ea:d8:f0:c1:d4:7a:a0:3a:50:86:2b:35:8a:ca:58:
                    8a:12:7a:2e:f8:9b:6e:26:a9:a2:ac:d3:19:7c:2f:
                    8d:73:25:ba:97:70:0b:60:7e:18:5c:4d:69:0f:13:
                    5f:76:af:d3:82:ea:ec:dc:66:ec:2e:62:aa:ef:44:
                    77:ee:48:16:6a:33:c3:64:49:e6:6c:0a:72:de:90:
                    d1:a4:3a:82:19:1f:55:36:df:4f:4e:82:ff:60:41:
                    67:ef:82:30:3b:be:f6:c2:ee:80:a4:83:b7:1b:f6:
                    e4:31:75:4d:82:9b:38:5e:b2:eb:8e:21:24:4c:e0:
                    6c:ab:18:0c:88:b4:66:10:0e:14:87:18:4e:d8:96:
                    aa:02:94:c1:21:7a:b5:4c:ab:37:34:85:b1:09:d5:
                    ec:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C6:1E:DD:6E:2A:29:ED:50:DE:AF:72:E3:A3:F8:8D:02:1C:DD:52
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/323830343a326635633a3a2f33322d3335203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:fc:d7:ef:3c:c0:23:42:ee:d9:ee:41:4d:3b:d5:f3:35:e2:
         ed:fb:e5:75:e3:ff:2e:15:b1:9b:8d:6b:99:62:3b:b5:ea:7a:
         ea:2e:61:ab:26:fc:58:b5:04:66:d7:68:3f:94:0f:76:21:cf:
         96:60:64:47:a0:5a:79:cd:91:4c:74:4e:1e:2f:e4:23:8f:64:
         0c:bc:a5:7f:0d:e0:5d:d8:69:ef:0a:b8:53:a4:8e:07:4c:f8:
         34:c9:2c:09:6f:3d:78:5e:71:d5:6e:73:1c:0e:b0:bc:72:31:
         63:a2:29:7f:2a:61:53:df:5f:1e:15:a4:c7:34:e3:c8:73:45:
         35:c0:0c:5e:f7:83:a4:5e:8d:65:a8:fc:0a:33:0b:56:8a:c5:
         6f:37:8a:7c:a3:52:0d:25:7b:9d:30:ea:7f:25:b9:6a:83:23:
         5f:8c:ef:c3:8f:d8:a6:8a:7c:e9:5b:08:d1:ba:95:d3:9b:60:
         1a:9e:15:63:29:23:41:0c:9d:95:69:63:a6:ad:a2:7d:12:88:
         55:11:df:e1:df:08:6d:28:7e:45:6a:08:44:1d:b4:09:14:78:
         f9:23:1e:d5:65:18:50:53:cd:c9:df:cc:54:c6:b8:5f:14:56:
         54:97:2d:8c:2e:23:25:69:f5:2b:2a:9b:65:95:43:42:4a:b4:
         bd:cc:15:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:32 2024 by rpki-client on console-ams.rpki-client.org