Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28bULS6EtCidXUgxcqZ7rywD2cbV7Fsh66f9bmMpFNa5/0/323830343a383037303a3a2f33322d313238203d3e20323731373530.roa
File:                     323830343a383037303a3a2f33322d313238203d3e20323731373530.roa (raw, json)
Hash identifier:          A0XeTnau+6VtDtj3TpzjdbZAN2eO0S4xsDBOr0wXbEg=
Subject key identifier:   EE:9F:70:FB:64:0C:52:D6:73:FE:AD:D7:32:B8:B3:0D:63:DF:21:09
Certificate issuer:       /CN=C2633AE04CD5A036A3DD1083FB4E6FD22108FE09
Certificate serial:       59B68A240497CE5FBF41A5761B81C502D114D149
Authority key identifier: C2:63:3A:E0:4C:D5:A0:36:A3:DD:10:83:FB:4E:6F:D2:21:08:FE:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2633AE04CD5A036A3DD1083FB4E6FD22108FE09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28bULS6EtCidXUgxcqZ7rywD2cbV7Fsh66f9bmMpFNa5/0/323830343a383037303a3a2f33322d313238203d3e20323731373530.roa
Signing time:             Sat 17 Aug 2024 11:12:42 +0000
ROA not before:           Sat 17 Aug 2024 11:07:42 +0000
ROA not after:            Sat 16 Aug 2025 11:12:42 +0000
asID:                     271750
IP address blocks:        2804:8070::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28bULS6EtCidXUgxcqZ7rywD2cbV7Fsh66f9bmMpFNa5/0/C2633AE04CD5A036A3DD1083FB4E6FD22108FE09.crl
                          rsync://rpki-repo.registro.br/repo/28bULS6EtCidXUgxcqZ7rywD2cbV7Fsh66f9bmMpFNa5/0/C2633AE04CD5A036A3DD1083FB4E6FD22108FE09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2633AE04CD5A036A3DD1083FB4E6FD22108FE09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b6:8a:24:04:97:ce:5f:bf:41:a5:76:1b:81:c5:02:d1:14:d1:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2633AE04CD5A036A3DD1083FB4E6FD22108FE09
        Validity
            Not Before: Aug 17 11:07:42 2024 GMT
            Not After : Aug 16 11:12:42 2025 GMT
        Subject: CN=EE9F70FB640C52D673FEADD732B8B30D63DF2109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7b:a3:fc:73:37:b4:ca:8d:3c:8d:24:2d:38:
                    64:fe:71:73:92:94:e3:3e:4e:13:f3:2e:67:57:71:
                    09:7a:c6:c3:32:a7:ad:c4:28:78:a8:07:04:15:15:
                    2c:fb:3c:42:28:b9:c2:93:92:12:0f:64:9b:4a:38:
                    64:00:14:fd:09:dd:ab:fc:88:7b:8c:38:1a:fc:cf:
                    6e:a6:8b:52:5c:f9:08:b9:1a:5a:3c:a8:a9:03:da:
                    7a:19:5e:cf:22:27:37:1d:65:62:d7:c1:f0:af:1f:
                    7c:fb:85:3a:3b:66:c6:d2:70:90:38:1d:cc:e7:6b:
                    03:e4:f2:06:64:63:6f:6c:f7:77:82:e8:53:3a:04:
                    b0:f3:43:4f:16:ce:42:32:d3:58:6d:e5:09:db:32:
                    c5:2d:47:7a:59:f3:35:5b:17:c1:81:4a:e3:8c:2a:
                    66:af:a7:8d:07:4d:f4:24:17:3e:aa:36:34:4e:23:
                    38:d6:f6:34:d1:6f:82:5d:39:4c:6c:7c:b1:09:1c:
                    b1:27:23:bb:4f:8e:5b:e1:4c:9a:3b:9f:1c:73:51:
                    0f:73:cf:36:10:0b:c1:1b:8f:bd:f2:a8:6b:3e:f7:
                    48:17:3c:14:da:1c:8e:de:0c:00:fd:02:61:b7:73:
                    bb:78:af:6a:65:f8:b1:d4:dc:31:f9:da:fa:df:40:
                    25:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9F:70:FB:64:0C:52:D6:73:FE:AD:D7:32:B8:B3:0D:63:DF:21:09
            X509v3 Authority Key Identifier:
                keyid:C2:63:3A:E0:4C:D5:A0:36:A3:DD:10:83:FB:4E:6F:D2:21:08:FE:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28bULS6EtCidXUgxcqZ7rywD2cbV7Fsh66f9bmMpFNa5/0/C2633AE04CD5A036A3DD1083FB4E6FD22108FE09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2633AE04CD5A036A3DD1083FB4E6FD22108FE09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28bULS6EtCidXUgxcqZ7rywD2cbV7Fsh66f9bmMpFNa5/0/323830343a383037303a3a2f33322d313238203d3e20323731373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8070::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:7a:42:5e:b6:ff:11:69:05:c4:99:11:db:7a:89:25:e4:5b:
         3a:68:fd:80:c5:f7:71:2c:76:bc:50:97:da:53:27:81:6a:d3:
         1e:df:65:35:21:cc:03:db:7c:04:87:28:84:66:b1:67:d4:c5:
         54:dd:ba:ff:55:41:a2:ba:19:ee:55:dd:8f:f4:d0:5c:bb:3c:
         1e:49:6a:30:55:7a:ba:99:7f:81:57:44:6e:3b:f1:f9:1a:49:
         f1:3b:6a:c4:ed:dc:b2:87:55:97:2f:61:95:6f:01:80:5f:b0:
         3a:9f:d3:86:aa:4d:da:0b:81:6b:49:b8:3f:e0:4b:eb:fe:0e:
         8b:f2:e9:a0:dd:33:4d:97:22:7d:26:c4:bc:9d:1e:1b:3c:f8:
         f5:9e:a7:24:5c:34:41:60:7c:6a:97:bf:d4:03:10:90:3d:b4:
         85:84:88:a0:55:27:fa:85:b1:27:d1:1a:d5:51:5f:46:d9:f4:
         ef:2f:84:9b:d2:bf:ec:d5:9a:0e:17:5c:05:6e:f3:7c:9b:74:
         6b:8b:7b:a5:8a:83:c7:11:c6:09:3a:7a:ba:5a:1d:dd:74:3f:
         10:a2:d8:63:d2:ad:46:d6:da:60:ae:ea:f8:a4:7d:89:3c:46:
         7e:33:9a:b3:ae:ae:c6:7f:38:d9:5d:b1:3e:ec:bc:35:0a:60:
         f0:b4:24:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:15 2024 by rpki-client on console-fra.rpki-client.org