Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2YLArYCJA7ZVYvDMFHN18RfvsLTE8HVvHhx2MTwsRjWr/1/323830343a373561343a3a2f33322d3438203d3e20323731303630.roa
File:                     323830343a373561343a3a2f33322d3438203d3e20323731303630.roa (raw, json)
Hash identifier:          g9b060UvGi1qemzdGoCvH3AawwLqLV4vyd566aohLws=
Subject key identifier:   AB:45:7B:E4:42:38:73:46:0A:FC:A2:A2:68:3A:A1:87:A5:04:6C:91
Certificate issuer:       /CN=7060E33282702ABCE5F9D4885CC70B1F11E76FED
Certificate serial:       0FFA06C05E4DFC8196FF0E0BBF10741DB7DD9D62
Authority key identifier: 70:60:E3:32:82:70:2A:BC:E5:F9:D4:88:5C:C7:0B:1F:11:E7:6F:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7060E33282702ABCE5F9D4885CC70B1F11E76FED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2YLArYCJA7ZVYvDMFHN18RfvsLTE8HVvHhx2MTwsRjWr/1/323830343a373561343a3a2f33322d3438203d3e20323731303630.roa
Signing time:             Thu 04 Apr 2024 01:49:57 +0000
ROA not before:           Thu 04 Apr 2024 01:44:57 +0000
ROA not after:            Thu 03 Apr 2025 01:49:57 +0000
asID:                     271060
IP address blocks:        2804:75a4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2YLArYCJA7ZVYvDMFHN18RfvsLTE8HVvHhx2MTwsRjWr/1/7060E33282702ABCE5F9D4885CC70B1F11E76FED.crl
                          rsync://rpki-repo.registro.br/repo/2YLArYCJA7ZVYvDMFHN18RfvsLTE8HVvHhx2MTwsRjWr/1/7060E33282702ABCE5F9D4885CC70B1F11E76FED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7060E33282702ABCE5F9D4885CC70B1F11E76FED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fa:06:c0:5e:4d:fc:81:96:ff:0e:0b:bf:10:74:1d:b7:dd:9d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7060E33282702ABCE5F9D4885CC70B1F11E76FED
        Validity
            Not Before: Apr  4 01:44:57 2024 GMT
            Not After : Apr  3 01:49:57 2025 GMT
        Subject: CN=AB457BE4423873460AFCA2A2683AA187A5046C91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8a:6a:0f:08:de:b8:7e:75:4b:fe:a5:3a:4f:
                    71:13:6a:3d:20:ec:4c:2e:91:e1:65:88:3f:11:8f:
                    d8:c3:88:7d:c9:3d:52:46:1f:29:a5:00:23:39:97:
                    66:2d:aa:2f:fb:f1:2a:8c:90:c4:d1:48:cb:2c:04:
                    eb:d4:50:b5:12:35:bb:18:e7:b3:19:7b:be:b5:65:
                    8f:c9:c5:66:ee:b7:4b:7a:3e:82:83:4d:e9:d5:1f:
                    08:03:5b:98:fc:6d:57:82:a3:4b:b0:47:14:cb:8b:
                    bc:9a:d9:05:2a:bf:64:3a:14:cd:e0:98:ba:4e:ea:
                    b9:77:01:f6:40:63:cb:cd:f9:f5:cb:32:95:cf:ff:
                    82:51:0c:c1:10:ab:e6:6f:3b:75:4c:d9:f1:7e:18:
                    3a:09:f7:25:70:67:6e:60:38:ff:f7:26:b1:66:3d:
                    af:a4:d1:84:cc:c0:a1:25:ee:38:80:eb:92:ec:c2:
                    86:73:d8:ec:53:b6:2b:54:35:91:87:88:0b:d3:98:
                    d9:b2:b9:43:7d:06:52:e2:d5:b2:20:9f:bb:0d:8a:
                    ac:9d:5d:df:af:4d:bc:5d:c6:c8:f9:db:ca:aa:7a:
                    b3:4e:e3:e5:b4:7f:f9:04:ab:02:61:29:e5:ea:6e:
                    ef:0e:4c:8f:76:71:a3:a7:93:50:16:e1:ca:ba:30:
                    11:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:45:7B:E4:42:38:73:46:0A:FC:A2:A2:68:3A:A1:87:A5:04:6C:91
            X509v3 Authority Key Identifier:
                keyid:70:60:E3:32:82:70:2A:BC:E5:F9:D4:88:5C:C7:0B:1F:11:E7:6F:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2YLArYCJA7ZVYvDMFHN18RfvsLTE8HVvHhx2MTwsRjWr/1/7060E33282702ABCE5F9D4885CC70B1F11E76FED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7060E33282702ABCE5F9D4885CC70B1F11E76FED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2YLArYCJA7ZVYvDMFHN18RfvsLTE8HVvHhx2MTwsRjWr/1/323830343a373561343a3a2f33322d3438203d3e20323731303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:75a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:19:92:0f:f5:68:56:89:3b:f7:5a:2d:90:0a:05:02:57:c5:
         cf:21:41:99:2f:c0:3a:4d:1a:15:ed:79:16:91:6a:86:6b:03:
         b7:54:c4:70:ea:a7:b6:bd:9a:d4:ad:55:fc:5a:63:c5:4d:8e:
         0e:c9:07:0a:e4:ee:b4:46:ba:76:f6:2a:57:53:c8:7d:b8:72:
         06:ba:5e:39:05:6c:48:b6:4e:7a:73:e9:e7:e7:12:8c:6c:56:
         bb:95:79:13:78:eb:1c:93:7b:92:65:84:bc:9b:b6:c3:9a:3f:
         3c:d6:6a:de:82:cd:a9:63:b2:51:cb:70:6d:09:57:bf:6c:09:
         30:f4:a2:fb:95:f2:fc:f2:9e:b3:69:58:da:fc:6e:e8:c0:22:
         70:3d:41:c1:bf:cf:e6:5b:55:09:b5:81:9b:7b:30:d6:14:4c:
         44:d3:32:91:3a:e8:22:e3:c0:88:bb:67:ec:b8:aa:14:61:b6:
         5b:8a:20:fd:66:28:15:18:ea:9f:32:fd:36:de:44:3b:4f:2b:
         0f:89:e4:6a:74:c9:c6:12:c8:3d:63:a8:6c:b8:13:e2:44:f8:
         64:fc:da:5c:db:f3:1b:96:a6:e1:be:9c:71:5d:7a:c2:be:fb:
         bf:83:da:31:7d:53:2e:93:dd:c3:67:26:db:c0:f2:63:e8:ff:
         00:9f:8e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:40 2024 by rpki-client on console-fra.rpki-client.org