Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/323830343a376161343a383030303a3a2f33332d3333203d3e20323731333833.roa
File:                     323830343a376161343a383030303a3a2f33332d3333203d3e20323731333833.roa (raw, json)
Hash identifier:          vOTQpvs5eM2/CAh487XtTMNv+3Q36BfDUgw9Q+yxKFo=
Subject key identifier:   28:70:64:BF:92:52:AE:05:2D:6B:35:EC:AB:4D:38:95:E8:AF:79:18
Certificate issuer:       /CN=23235F2B7FAE22B78438698FD00F49F07D286674
Certificate serial:       7863777FFFB1E2608465744916DA34381B046CDE
Authority key identifier: 23:23:5F:2B:7F:AE:22:B7:84:38:69:8F:D0:0F:49:F0:7D:28:66:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23235F2B7FAE22B78438698FD00F49F07D286674.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/323830343a376161343a383030303a3a2f33332d3333203d3e20323731333833.roa
Signing time:             Mon 07 Oct 2024 18:38:00 +0000
ROA not before:           Mon 07 Oct 2024 18:33:00 +0000
ROA not after:            Mon 06 Oct 2025 18:38:00 +0000
asID:                     271383
IP address blocks:        2804:7aa4:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/23235F2B7FAE22B78438698FD00F49F07D286674.crl
                          rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/23235F2B7FAE22B78438698FD00F49F07D286674.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23235F2B7FAE22B78438698FD00F49F07D286674.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:63:77:7f:ff:b1:e2:60:84:65:74:49:16:da:34:38:1b:04:6c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23235F2B7FAE22B78438698FD00F49F07D286674
        Validity
            Not Before: Oct  7 18:33:00 2024 GMT
            Not After : Oct  6 18:38:00 2025 GMT
        Subject: CN=287064BF9252AE052D6B35ECAB4D3895E8AF7918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:88:ee:15:25:4c:56:18:20:e9:9c:3e:52:7d:
                    ee:87:3a:e8:9a:57:94:5e:b0:bc:af:50:cf:93:b5:
                    96:13:06:e0:3c:78:fb:fc:a9:9f:c7:d4:26:04:be:
                    8c:c0:2f:ed:e9:87:fd:26:83:20:9b:ee:2b:1d:9a:
                    98:1c:b1:04:21:3a:5a:2c:f7:8b:e4:b6:fc:2c:bb:
                    13:fa:d9:94:28:49:84:ba:cc:f4:b3:01:64:82:f6:
                    04:5f:9a:4e:09:a3:ab:e3:3e:e3:40:77:72:ae:e7:
                    06:cf:c4:ed:26:34:d7:11:25:8e:a1:5d:3b:45:46:
                    69:7e:81:c4:e9:c4:e9:46:6a:29:ee:5b:d4:4d:4b:
                    79:64:4e:68:88:8b:97:13:8d:36:aa:35:24:ff:ec:
                    35:63:a6:90:b0:1a:1b:2d:1f:f7:69:79:0a:af:b1:
                    d6:90:34:a8:d2:94:a8:64:6f:31:7c:ca:f2:bf:18:
                    68:d4:73:24:3a:e8:9a:66:73:c4:b4:73:f6:b7:9a:
                    90:17:ba:92:d8:fd:24:a0:f5:f0:77:66:5e:e1:d2:
                    dc:e4:8e:76:4c:50:a5:e5:75:bf:ba:bd:37:35:6e:
                    a0:6e:71:1f:9d:3f:40:fb:c8:af:8e:2f:64:b7:fd:
                    3e:03:a8:6c:65:81:63:6e:cb:46:12:59:e6:ec:bf:
                    72:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:70:64:BF:92:52:AE:05:2D:6B:35:EC:AB:4D:38:95:E8:AF:79:18
            X509v3 Authority Key Identifier:
                keyid:23:23:5F:2B:7F:AE:22:B7:84:38:69:8F:D0:0F:49:F0:7D:28:66:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/23235F2B7FAE22B78438698FD00F49F07D286674.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23235F2B7FAE22B78438698FD00F49F07D286674.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/323830343a376161343a383030303a3a2f33332d3333203d3e20323731333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7aa4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         bb:77:d5:ea:fb:d4:89:d1:b0:55:73:a9:be:f7:c4:ea:d7:79:
         60:6c:35:f7:b4:56:3b:41:e9:c2:80:af:31:7f:df:64:64:4a:
         f8:19:fc:3c:83:c1:3f:89:f9:ef:5d:8f:3a:96:6b:86:e0:d2:
         72:e5:a9:91:98:8d:c8:58:da:04:94:ba:68:11:63:ad:47:8b:
         1b:78:41:f6:77:19:13:6d:04:da:c5:38:dc:24:d7:7d:a2:6c:
         5e:85:59:ac:3e:a0:2b:1a:3e:c3:b4:2a:47:4c:92:f1:c1:81:
         5d:a2:a4:0e:74:ce:84:5e:f4:d0:a9:b0:db:12:dc:73:14:fc:
         ec:b4:5a:f4:d9:0f:3a:66:71:b2:50:5c:96:59:31:72:f4:1f:
         f3:5e:f3:a8:a0:43:2d:4a:60:51:f0:5d:d8:23:e8:61:ac:30:
         0b:11:ae:cf:25:1e:3b:5a:0c:b6:2e:29:8d:83:0b:55:84:86:
         20:cb:12:be:1f:50:99:c8:ad:27:65:b2:61:0e:45:8e:91:76:
         2b:ac:ff:f8:5d:f7:0f:5d:97:40:97:27:8e:26:96:7b:4f:a6:
         e8:24:11:13:2a:7b:5b:7e:f3:6d:69:56:29:26:eb:85:58:ca:
         d5:db:0d:c8:6b:b5:81:a1:52:c0:7e:16:8c:55:97:e7:f1:0a:
         af:9d:38:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:29:57 2024 by rpki-client on console-fra.rpki-client.org