Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/323830343a376634343a323030303a3a2f34342d3434203d3e20323731363737.roa
File:                     323830343a376634343a323030303a3a2f34342d3434203d3e20323731363737.roa (raw, json)
Hash identifier:          g0lbgh35I+FtN6ZJMNWaOmrdjWk2+oefWa1Tvnsweso=
Subject key identifier:   3F:FC:4C:D2:E7:C7:BB:D5:83:30:B6:6D:4D:DB:7E:09:8C:26:78:92
Certificate issuer:       /CN=8CA6945320EBC94436672D14C02A85C8DD0ACCB1
Certificate serial:       4CFAC3DE622F679F833544F6C5D7F618F082E969
Authority key identifier: 8C:A6:94:53:20:EB:C9:44:36:67:2D:14:C0:2A:85:C8:DD:0A:CC:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/323830343a376634343a323030303a3a2f34342d3434203d3e20323731363737.roa
Signing time:             Tue 07 May 2024 19:24:27 +0000
ROA not before:           Tue 07 May 2024 19:19:27 +0000
ROA not after:            Tue 06 May 2025 19:24:27 +0000
asID:                     271677
IP address blocks:        2804:7f44:2000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.crl
                          rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:fa:c3:de:62:2f:67:9f:83:35:44:f6:c5:d7:f6:18:f0:82:e9:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CA6945320EBC94436672D14C02A85C8DD0ACCB1
        Validity
            Not Before: May  7 19:19:27 2024 GMT
            Not After : May  6 19:24:27 2025 GMT
        Subject: CN=3FFC4CD2E7C7BBD58330B66D4DDB7E098C267892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:55:17:4c:53:93:60:ae:fa:8b:3f:62:fa:9b:
                    18:57:55:08:b6:71:d6:55:1c:f1:47:f1:36:78:8e:
                    3b:72:48:f2:6b:52:a5:34:2c:04:12:6b:71:a4:08:
                    a5:3d:42:8f:5d:74:9d:fc:d5:3c:b5:a4:6d:04:10:
                    01:5b:88:58:08:b1:cc:d9:cc:a5:98:70:00:85:c6:
                    d1:39:09:60:b9:a9:a3:99:65:f6:61:f0:e2:50:d9:
                    c9:22:e7:b3:7c:47:1d:45:b5:40:7e:70:f2:67:7c:
                    dd:b8:a6:87:4e:fb:a4:86:f6:14:80:de:ff:24:0e:
                    f6:20:58:6a:d6:85:13:34:d3:05:3f:68:cd:62:9d:
                    4f:54:b4:1d:db:e0:e2:6d:81:d0:93:86:87:02:74:
                    fc:dd:5e:b0:f3:4c:5d:4c:55:93:49:3f:0c:b9:38:
                    0c:be:2c:4e:86:9b:33:0b:a8:2d:61:23:db:9c:03:
                    8c:38:37:bb:6b:9c:bd:9c:aa:78:22:f3:0c:ec:c6:
                    01:74:50:9a:2d:82:0a:ae:53:e6:7c:8f:b3:63:ec:
                    3c:1a:47:14:fe:4c:ed:cb:5d:2d:6b:e3:ed:6f:ff:
                    8a:ae:6d:c6:f6:74:19:d1:54:4c:0f:a4:f3:41:59:
                    55:4b:81:8a:38:d1:f1:b9:99:c1:80:77:a3:dd:7d:
                    ad:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:FC:4C:D2:E7:C7:BB:D5:83:30:B6:6D:4D:DB:7E:09:8C:26:78:92
            X509v3 Authority Key Identifier:
                keyid:8C:A6:94:53:20:EB:C9:44:36:67:2D:14:C0:2A:85:C8:DD:0A:CC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/323830343a376634343a323030303a3a2f34342d3434203d3e20323731363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f44:2000::/44

    Signature Algorithm: sha256WithRSAEncryption
         37:b8:37:08:0a:0e:5d:c1:3f:7f:a6:62:f7:a6:63:8c:fd:48:
         7d:bc:74:5d:13:a6:6e:84:de:d4:39:fd:06:7c:47:6e:bd:24:
         6b:97:29:7d:70:a9:1f:44:88:f7:74:91:37:de:e3:b7:0d:83:
         0b:36:42:bb:7a:0f:39:bb:3f:19:7a:42:c8:ab:b7:66:56:d1:
         8e:09:a1:68:47:7e:e1:e4:47:2c:92:51:40:da:56:f5:14:10:
         3a:99:36:80:d2:3c:73:64:9c:50:62:25:0f:60:1a:4b:f4:6a:
         46:7e:9a:a7:18:b1:22:b0:5a:80:35:d6:c5:bc:73:0c:a5:46:
         05:3d:c9:9a:5c:59:2b:05:42:8d:4d:a0:15:ed:4f:b5:8a:a6:
         92:11:91:fc:9a:a9:17:92:48:9c:0d:78:0a:78:31:de:d8:90:
         6e:f6:00:28:f6:c2:d5:28:6c:a1:c0:b0:e1:c7:49:84:f6:2b:
         35:d6:a5:14:b7:c3:68:99:75:87:73:89:d8:60:76:da:e4:20:
         17:c2:5a:64:7c:e4:46:b9:4b:9e:b2:4b:fc:82:e8:15:3f:9b:
         a5:42:61:29:c3:5e:6c:5b:da:f7:1e:1b:53:56:c8:42:bf:81:
         f9:37:b6:a3:21:d7:b3:cb:13:25:6e:47:79:ca:48:51:7a:e0:
         67:54:0a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:06 2024 by rpki-client on console-ams.rpki-client.org