Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/323830343a363934343a3a2f33322d3438203d3e20323730323539.roa
File:                     323830343a363934343a3a2f33322d3438203d3e20323730323539.roa (raw, json)
Hash identifier:          hZrjosDProl0pC+MmSpzQWy/4wjIhG9f9ep4w3B2SDw=
Subject key identifier:   8A:98:8E:39:39:8E:48:B8:B3:E2:63:BC:14:D0:5B:C6:56:5C:FA:C7
Certificate issuer:       /CN=511754C54989305CCE22941E6D3C0BF8AF6D7F6C
Certificate serial:       6AEA06170841B450F68326A044B2E1371D0A4D2F
Authority key identifier: 51:17:54:C5:49:89:30:5C:CE:22:94:1E:6D:3C:0B:F8:AF:6D:7F:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/323830343a363934343a3a2f33322d3438203d3e20323730323539.roa
Signing time:             Thu 04 Apr 2024 03:01:11 +0000
ROA not before:           Thu 04 Apr 2024 02:56:11 +0000
ROA not after:            Thu 03 Apr 2025 03:01:11 +0000
asID:                     270259
IP address blocks:        2804:6944::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl
                          rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 14:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ea:06:17:08:41:b4:50:f6:83:26:a0:44:b2:e1:37:1d:0a:4d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=511754C54989305CCE22941E6D3C0BF8AF6D7F6C
        Validity
            Not Before: Apr  4 02:56:11 2024 GMT
            Not After : Apr  3 03:01:11 2025 GMT
        Subject: CN=8A988E39398E48B8B3E263BC14D05BC6565CFAC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:27:ac:85:0b:35:8f:6d:d0:00:33:ea:99:02:
                    27:b6:c6:a8:1f:65:6a:27:72:67:07:cd:63:95:f1:
                    2e:1e:4f:c6:e2:03:19:15:34:2f:3c:62:4f:d0:55:
                    57:9a:de:b9:0d:fa:44:fd:e9:c0:fa:69:47:b2:49:
                    e9:e7:1e:7f:a9:da:e2:3c:ce:05:30:b8:ef:69:5f:
                    a3:1c:49:5f:10:2a:78:46:10:45:b5:cb:ca:c6:7c:
                    03:4d:93:a9:e8:95:86:f0:2f:a9:b1:91:6f:90:de:
                    4a:20:6c:7f:fa:c4:4d:24:38:aa:6d:11:42:ba:e0:
                    79:a0:17:25:ab:b1:27:41:6b:d3:98:ad:97:94:5d:
                    c1:58:ba:6e:16:3c:34:5e:86:af:6d:24:7a:52:6f:
                    cb:59:c6:94:05:98:50:47:e4:14:87:a8:06:f8:be:
                    17:73:95:a4:28:5f:a4:65:de:1f:67:30:5f:1c:47:
                    8e:3b:02:7b:84:c4:bb:ea:5b:6a:94:32:47:d5:4c:
                    ad:cb:7b:2c:fa:be:bb:8f:c6:12:c6:90:57:bc:f5:
                    66:6a:5a:c3:18:d2:a8:d3:3f:bc:6d:76:c5:d0:eb:
                    b8:cd:f6:cb:cf:f2:e4:b3:17:2f:f4:bb:4a:f5:1a:
                    29:45:47:47:a4:f2:46:ff:4e:16:43:d3:b5:2a:81:
                    50:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:98:8E:39:39:8E:48:B8:B3:E2:63:BC:14:D0:5B:C6:56:5C:FA:C7
            X509v3 Authority Key Identifier:
                keyid:51:17:54:C5:49:89:30:5C:CE:22:94:1E:6D:3C:0B:F8:AF:6D:7F:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/323830343a363934343a3a2f33322d3438203d3e20323730323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6944::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:e7:51:23:0e:26:6d:e8:44:70:40:0a:50:6d:08:7e:f8:e3:
         64:bb:2b:58:4c:6a:6f:3f:c9:9a:2f:8b:fc:2a:d8:6f:87:58:
         4e:1e:14:d2:20:98:59:03:14:a8:fb:23:31:4f:a9:da:89:8d:
         be:3a:cb:dc:71:1e:f8:9b:f0:06:3e:b3:cf:4d:8d:49:2e:91:
         5d:10:ee:11:ac:65:e9:6e:10:9d:9c:a8:d9:d6:ec:d6:ed:6f:
         23:fb:70:61:2e:6e:06:d0:f7:f9:c7:49:07:60:73:53:d3:16:
         7d:9f:04:17:c8:9a:8f:cd:5d:f6:15:7f:fd:8c:db:02:b2:66:
         5b:38:c6:25:b8:93:25:2d:96:c7:e8:6b:57:de:87:b2:ab:14:
         2f:29:09:47:56:6c:ce:12:48:f2:29:bd:18:7f:36:d7:f9:09:
         bb:37:12:fa:fc:9d:d5:d1:94:d3:32:74:4b:77:66:e1:c4:58:
         73:b3:ce:7a:de:0f:e1:86:89:6b:2f:27:7c:82:d9:72:6f:6b:
         3e:d0:5a:a1:8a:6e:ef:3f:b4:f6:72:56:2c:0a:f5:db:94:10:
         ad:9a:3d:b5:9b:1c:f6:86:96:a5:9c:ce:5f:f6:20:05:44:02:
         ba:83:f7:ec:59:fb:83:ed:f4:0e:ed:3a:10:e1:29:e2:9f:c3:
         c9:e1:b1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:15:19 2024 by rpki-client on console-fra.rpki-client.org