Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/323830343a363031383a3a2f33332d3333203d3e20323639313435.roa
File:                     323830343a363031383a3a2f33332d3333203d3e20323639313435.roa (raw, json)
Hash identifier:          jWWvGhHp2MbSZOyKzePu8Rr/IJ1P9XlB8pllXV/bIhI=
Subject key identifier:   E7:B7:B2:D5:4E:23:81:D0:C5:8A:F6:F4:F1:3B:11:8B:99:73:C3:3A
Certificate issuer:       /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Certificate serial:       6BEF19D12941387275D51D0657A7AC197320651D
Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/323830343a363031383a3a2f33332d3333203d3e20323639313435.roa
Signing time:             Thu 04 Apr 2024 08:36:28 +0000
ROA not before:           Thu 04 Apr 2024 08:31:28 +0000
ROA not after:            Thu 03 Apr 2025 08:36:28 +0000
asID:                     269145
IP address blocks:        2804:6018::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl
                          rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ef:19:d1:29:41:38:72:75:d5:1d:06:57:a7:ac:19:73:20:65:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
        Validity
            Not Before: Apr  4 08:31:28 2024 GMT
            Not After : Apr  3 08:36:28 2025 GMT
        Subject: CN=E7B7B2D54E2381D0C58AF6F4F13B118B9973C33A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e6:2c:de:79:b8:4b:8e:92:66:a5:ac:29:76:
                    43:b4:8c:e4:1f:0b:e3:02:5c:ae:02:f0:02:ec:72:
                    e2:35:b1:99:55:1e:ee:bc:a0:2d:b7:13:58:60:62:
                    23:a2:e3:c4:54:d1:dc:0e:e4:71:0e:ff:5b:ef:b1:
                    9f:ee:4e:d4:50:fe:fd:1e:2c:d7:ac:c7:2d:d3:a4:
                    d4:c1:4f:e0:23:50:a1:33:0f:c0:4b:b3:fe:48:df:
                    bc:c8:d1:ac:d2:ed:a7:68:bf:5c:5d:44:9a:d4:3c:
                    f6:35:33:62:f7:bc:45:c0:c9:73:cb:95:3d:dd:7b:
                    63:ad:2e:c6:44:22:3f:80:b8:af:96:7c:78:5f:de:
                    7f:ea:bf:83:65:b5:6e:b9:e9:32:0d:8a:97:19:98:
                    da:17:e8:f3:bc:62:7a:82:10:34:60:56:03:2d:ea:
                    a5:eb:6b:ac:e1:ba:1a:bc:30:19:57:ab:33:e3:18:
                    b0:70:0c:30:bc:8a:3d:40:09:9a:21:7b:4d:95:8d:
                    40:c3:27:7f:f3:de:d0:b7:5c:7e:2f:50:35:79:c3:
                    52:69:8d:33:ba:76:10:1c:8b:21:e6:b5:8a:f5:c1:
                    3d:6d:60:17:30:c0:67:31:d9:16:10:02:cb:f2:ad:
                    d0:34:d7:bb:af:c7:db:5d:07:08:1c:43:97:12:55:
                    23:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B7:B2:D5:4E:23:81:D0:C5:8A:F6:F4:F1:3B:11:8B:99:73:C3:3A
            X509v3 Authority Key Identifier:
                keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/323830343a363031383a3a2f33332d3333203d3e20323639313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6018::/33

    Signature Algorithm: sha256WithRSAEncryption
         50:67:25:30:79:51:ee:92:be:f4:76:93:0d:9b:4a:9a:c3:3c:
         05:4c:7c:4f:39:a7:37:a3:8d:99:b3:d3:6a:da:ba:39:80:94:
         6d:61:3a:81:9f:99:89:fc:59:c9:5f:e9:22:bb:43:0b:9d:56:
         ac:2f:59:ce:dd:68:23:e6:ce:b1:69:5d:63:4c:cf:7e:15:e3:
         d4:b3:38:30:b8:ab:75:77:65:f2:0b:78:c6:2e:c7:a1:04:f2:
         e1:ae:c8:bd:dc:3d:98:41:f9:e9:d1:25:c1:b2:26:c4:82:f2:
         6e:79:45:cd:f0:3e:b0:4d:22:f9:12:f4:a7:ae:82:c3:5b:fc:
         46:58:8b:19:32:0d:63:70:59:b1:99:a5:65:09:b1:5a:c0:d0:
         53:fb:f1:5b:bb:17:55:95:db:f1:e3:bd:b4:94:0c:3a:e1:e7:
         f6:a9:5e:2b:c0:f5:f5:87:16:f6:db:ee:6b:41:dd:95:12:85:
         97:43:e4:8d:d6:85:eb:09:aa:ae:10:43:9e:24:95:16:dd:1a:
         68:7f:9f:97:59:bb:19:e3:8a:d9:ee:70:b2:6a:38:1e:d5:8b:
         ac:c7:24:7d:98:35:d9:0b:21:05:36:35:d3:e3:55:d7:5b:12:
         d4:c1:33:15:62:29:f5:de:da:77:8a:b6:b7:a4:e0:0a:46:26:
         f7:04:fd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:13 2024 by rpki-client on console-ams.rpki-client.org