Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/323830343a316433303a3a2f33322d3334203d3e20323634333533.roa
File:                     323830343a316433303a3a2f33322d3334203d3e20323634333533.roa (raw, json)
Hash identifier:          EAONuMqEV62n3zoYlxGIRe2R4d/28Ckd/to6nIMOljM=
Subject key identifier:   E6:9A:10:71:94:8B:79:EA:1E:41:AE:37:2F:73:6A:41:86:E4:EF:44
Certificate issuer:       /CN=6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D
Certificate serial:       143DBEA34E2A97D7C022A0963A8E25900ED5F378
Authority key identifier: 6D:39:85:2A:3C:6A:B4:CF:15:9D:D7:D1:50:BB:AD:5D:44:E3:D8:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/323830343a316433303a3a2f33322d3334203d3e20323634333533.roa
Signing time:             Mon 19 Aug 2024 22:00:17 +0000
ROA not before:           Mon 19 Aug 2024 21:55:17 +0000
ROA not after:            Mon 18 Aug 2025 22:00:17 +0000
asID:                     264353
IP address blocks:        2804:1d30::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.crl
                          rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:3d:be:a3:4e:2a:97:d7:c0:22:a0:96:3a:8e:25:90:0e:d5:f3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D
        Validity
            Not Before: Aug 19 21:55:17 2024 GMT
            Not After : Aug 18 22:00:17 2025 GMT
        Subject: CN=E69A1071948B79EA1E41AE372F736A4186E4EF44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ec:09:a7:8b:cc:72:37:28:26:3f:2d:7a:d1:
                    0c:42:cb:9e:b6:51:7a:e1:8b:7b:6a:a4:ab:40:e8:
                    83:b8:68:3e:af:e9:53:3d:0f:44:fc:4f:af:7a:de:
                    4f:25:d7:ed:8d:41:3c:6d:24:a7:bd:91:7d:27:4f:
                    e5:e6:3d:96:58:91:5f:c2:b1:36:fc:b7:d9:c2:ae:
                    30:74:3d:36:fd:70:02:69:b4:ba:eb:84:de:fc:8c:
                    50:a1:62:02:2c:30:95:0d:a4:5a:ff:88:2f:68:ff:
                    55:54:e0:35:04:2b:3a:f0:4f:f2:77:69:52:aa:e3:
                    2e:ef:9a:dd:4d:de:15:a4:ff:6b:49:cb:ad:1a:03:
                    34:4f:2c:94:4e:6b:43:86:18:84:aa:9b:15:a3:a4:
                    64:40:0b:b4:5d:b4:7d:5c:dd:c5:2f:a3:11:36:81:
                    6b:64:86:81:41:ad:0c:8d:d9:c8:32:03:92:75:3f:
                    69:1e:2f:b7:97:94:fc:39:13:d0:5f:0b:9e:7d:b9:
                    f2:5b:fa:25:8b:f4:95:e5:86:7f:1f:1b:b8:68:ca:
                    87:62:94:0b:ee:51:39:4e:43:d5:8c:83:0f:a2:ad:
                    2b:bb:bf:f8:21:96:ae:b9:64:65:2b:17:91:11:17:
                    74:16:1b:25:fd:b0:35:e6:77:61:47:c5:2b:bd:04:
                    f7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9A:10:71:94:8B:79:EA:1E:41:AE:37:2F:73:6A:41:86:E4:EF:44
            X509v3 Authority Key Identifier:
                keyid:6D:39:85:2A:3C:6A:B4:CF:15:9D:D7:D1:50:BB:AD:5D:44:E3:D8:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/323830343a316433303a3a2f33322d3334203d3e20323634333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d30::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:c3:8a:a5:dd:d7:60:5f:c7:9c:fe:35:50:07:1d:2c:50:3d:
         b6:9e:99:ed:25:b4:89:c6:f5:81:54:63:66:b0:51:f7:38:16:
         95:99:84:61:6d:e8:34:66:57:bf:0e:da:f0:9b:4d:7f:8f:99:
         85:9a:2b:2b:bb:cc:45:58:85:02:a4:5c:62:d8:35:93:ce:4f:
         8a:cd:98:75:eb:fc:21:a4:65:b8:a4:69:99:a9:38:9d:5c:04:
         99:ab:ed:55:7e:39:37:e7:e8:d5:92:33:6b:ed:4d:d2:70:1b:
         0d:e9:32:53:9b:ac:e5:d3:ee:49:9a:fb:45:e1:4c:dc:40:6f:
         97:04:d3:68:f6:21:be:68:7e:84:f7:e7:b7:5f:c2:bc:73:7a:
         3f:11:27:77:f6:da:ff:61:f6:0f:f5:a0:00:82:58:12:7b:d8:
         1f:39:45:2b:5d:96:47:5c:ff:59:fc:c7:9b:88:7e:09:1c:75:
         e3:1e:2a:77:c0:5b:36:31:60:7a:5a:73:22:1c:bd:9e:29:0a:
         ec:88:5a:dd:02:7f:63:5b:58:b9:4c:c4:2d:ab:cc:05:f9:9e:
         fa:f9:11:4c:a9:ee:4f:3e:b1:3c:61:07:08:24:67:77:92:2a:
         cc:fc:34:07:95:b3:47:37:39:3b:3e:4d:22:cf:ea:bc:74:48:
         b2:a5:6f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:33 2024 by rpki-client on console-fra.rpki-client.org