Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/323830343a376635303a3a2f33322d3332203d3e20323731363830.roa
File:                     323830343a376635303a3a2f33322d3332203d3e20323731363830.roa (raw, json)
Hash identifier:          jWGlMX6Gd9fToh0HLfCRCt9TPtHD93ydGTXzQBlTc/4=
Subject key identifier:   DA:A6:7F:5D:44:65:C4:2A:58:F8:D9:16:7C:31:BE:67:B7:3F:7C:80
Certificate issuer:       /CN=0667C1E975614C995A6FB737132548928E943717
Certificate serial:       6D219EEAA49FC282435AF7F6F8604E84CD384655
Authority key identifier: 06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/323830343a376635303a3a2f33322d3332203d3e20323731363830.roa
Signing time:             Tue 23 Apr 2024 15:02:48 +0000
ROA not before:           Tue 23 Apr 2024 14:57:48 +0000
ROA not after:            Tue 22 Apr 2025 15:02:48 +0000
asID:                     271680
IP address blocks:        2804:7f50::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl
                          rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:21:9e:ea:a4:9f:c2:82:43:5a:f7:f6:f8:60:4e:84:cd:38:46:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0667C1E975614C995A6FB737132548928E943717
        Validity
            Not Before: Apr 23 14:57:48 2024 GMT
            Not After : Apr 22 15:02:48 2025 GMT
        Subject: CN=DAA67F5D4465C42A58F8D9167C31BE67B73F7C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cc:e5:75:7a:22:b6:27:59:4b:5b:cf:10:09:
                    2d:51:d1:1b:bd:57:88:48:50:85:67:b9:ac:ab:0c:
                    73:05:78:b8:94:8f:87:41:30:9b:57:15:3b:00:bb:
                    c2:9d:51:56:9d:89:c8:56:42:6a:ce:a5:cd:3d:78:
                    b1:db:0f:61:94:f6:d4:93:85:2f:9b:a7:7f:28:09:
                    c9:f3:41:56:ec:af:e6:ea:ea:6a:f1:30:29:e2:5e:
                    0a:c9:c9:b8:4d:88:a4:51:ab:3b:2c:5b:53:32:3a:
                    54:5a:c7:da:d4:6f:fa:c5:15:66:73:75:bd:35:5f:
                    ef:a3:a8:8e:c5:36:5b:b7:52:8a:cf:6c:82:0f:f6:
                    43:ce:0e:be:49:58:a6:7b:fb:3c:04:9e:da:e0:91:
                    2e:d4:0c:c5:a3:69:ec:ce:29:53:e2:fc:15:d1:85:
                    6c:f6:c0:bc:c1:0b:b4:13:c9:85:d3:44:14:3b:ba:
                    41:67:3f:db:6f:52:f1:9e:c4:64:43:02:7a:bd:9f:
                    03:21:cc:32:7d:1f:20:53:dc:9c:1d:93:72:2a:73:
                    b6:93:e0:50:43:db:85:a2:b4:fb:bd:71:89:87:69:
                    3d:e4:1f:4f:35:e7:79:4b:18:58:54:8e:df:f9:0f:
                    f1:18:45:64:0a:b8:96:d9:13:f9:87:50:8c:b4:b3:
                    7b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A6:7F:5D:44:65:C4:2A:58:F8:D9:16:7C:31:BE:67:B7:3F:7C:80
            X509v3 Authority Key Identifier:
                keyid:06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/323830343a376635303a3a2f33322d3332203d3e20323731363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f50::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:3c:ab:1b:42:d2:a1:59:58:43:9e:2d:85:80:97:37:16:30:
         62:3c:0f:13:2b:63:cf:1c:79:73:e9:d0:ae:f0:2e:a5:ce:7d:
         6a:2a:1a:f9:56:f4:10:b1:9b:d9:e7:76:e9:a0:a4:32:fc:b9:
         37:92:fd:1f:55:49:ae:0b:35:7f:04:ce:bf:b1:12:fe:10:3a:
         a8:2e:97:13:ff:dc:b0:95:ad:f8:8a:dc:ee:89:4a:7d:48:aa:
         c0:41:7a:23:78:97:3e:ec:41:da:77:dc:e2:48:87:86:c3:66:
         68:c0:b4:9f:ab:6e:45:b2:1c:9b:5e:aa:21:26:92:4e:af:4e:
         b6:39:97:16:48:32:a7:f6:88:29:1b:d6:61:c5:99:78:2c:59:
         c2:9c:8d:30:78:a5:9c:96:ee:2c:52:d6:e4:77:61:b5:68:2e:
         12:14:51:35:43:01:fc:ec:be:8f:6a:13:fa:0e:25:55:aa:9f:
         ae:97:3c:f2:9d:a1:f2:75:98:04:54:0c:fa:08:66:0a:39:a3:
         42:67:90:b7:4e:27:a1:3e:a8:f3:ea:26:26:ed:99:35:ff:72:
         23:66:f7:17:ea:15:7a:4a:f1:f4:c4:6d:23:05:92:47:d1:8a:
         95:be:92:88:44:1d:52:b5:54:46:3c:96:fc:fe:97:b5:17:00:
         b9:c4:21:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:35 2024 by rpki-client on console-fra.rpki-client.org