Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/323830343a376533633a3a2f33322d3438203d3e20323731363131.roa
File:                     323830343a376533633a3a2f33322d3438203d3e20323731363131.roa (raw, json)
Hash identifier:          pd1HXH/DYjViMTTxIabFeQckf+e9/H0hwBZgSdUjU/U=
Subject key identifier:   ED:D1:2B:96:AE:5C:A2:76:99:84:04:5C:4B:ED:83:A3:C3:30:72:3D
Certificate issuer:       /CN=D6BFBE91A9C1216A37227717AD547135C4C3280E
Certificate serial:       6AB1D9C2B75A4C1D45A50AD30A2325E437E11CAA
Authority key identifier: D6:BF:BE:91:A9:C1:21:6A:37:22:77:17:AD:54:71:35:C4:C3:28:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BFBE91A9C1216A37227717AD547135C4C3280E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/323830343a376533633a3a2f33322d3438203d3e20323731363131.roa
Signing time:             Wed 05 Jun 2024 19:35:23 +0000
ROA not before:           Wed 05 Jun 2024 19:30:23 +0000
ROA not after:            Wed 04 Jun 2025 19:35:23 +0000
asID:                     271611
IP address blocks:        2804:7e3c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/D6BFBE91A9C1216A37227717AD547135C4C3280E.crl
                          rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/D6BFBE91A9C1216A37227717AD547135C4C3280E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BFBE91A9C1216A37227717AD547135C4C3280E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b1:d9:c2:b7:5a:4c:1d:45:a5:0a:d3:0a:23:25:e4:37:e1:1c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6BFBE91A9C1216A37227717AD547135C4C3280E
        Validity
            Not Before: Jun  5 19:30:23 2024 GMT
            Not After : Jun  4 19:35:23 2025 GMT
        Subject: CN=EDD12B96AE5CA2769984045C4BED83A3C330723D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1b:19:12:71:90:d6:0e:f5:c7:d1:7f:36:d9:
                    3c:f1:a3:a6:ee:75:b7:8c:49:1e:44:2b:1f:90:ab:
                    44:a8:bc:5b:ec:92:5a:3c:8f:62:04:ce:db:7b:bc:
                    27:cc:c6:7e:af:bc:42:a9:a7:2e:43:34:02:d6:86:
                    a2:dd:3b:cd:e3:ec:6e:54:4e:3f:6a:c3:68:08:b2:
                    39:91:d9:99:eb:3c:5f:c4:43:d1:69:87:8e:24:fc:
                    bf:ce:c9:99:cc:d4:8d:68:e1:ed:54:d2:8c:2a:71:
                    a4:61:d6:f8:04:96:8e:cb:43:31:37:56:1d:8e:f8:
                    cb:5c:28:59:df:69:b5:5c:ea:5c:e9:6f:3a:74:ac:
                    2e:4d:e2:c5:aa:75:d0:2b:db:86:2c:0e:51:1d:91:
                    17:ed:e1:f5:90:98:bf:7a:80:60:88:43:34:09:99:
                    cc:94:57:5d:f8:cd:5b:a1:00:8a:07:b7:88:b8:3c:
                    ea:63:7a:be:62:56:2a:21:26:b8:6e:aa:18:2e:cb:
                    ba:56:0c:e0:3c:ac:f7:e1:09:31:9e:ef:ac:2f:99:
                    11:83:d5:a9:83:6f:a7:a9:d6:c2:83:d9:ac:b4:ef:
                    c0:dc:18:71:d1:fc:8c:96:c5:12:f9:d5:2d:9e:c7:
                    9d:6c:94:10:9e:73:8d:29:c5:3d:ac:9b:87:8f:83:
                    c1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D1:2B:96:AE:5C:A2:76:99:84:04:5C:4B:ED:83:A3:C3:30:72:3D
            X509v3 Authority Key Identifier:
                keyid:D6:BF:BE:91:A9:C1:21:6A:37:22:77:17:AD:54:71:35:C4:C3:28:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/D6BFBE91A9C1216A37227717AD547135C4C3280E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BFBE91A9C1216A37227717AD547135C4C3280E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/323830343a376533633a3a2f33322d3438203d3e20323731363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:5b:2b:34:4a:cf:33:e6:8e:3d:a4:da:82:f7:cd:c6:56:c5:
         02:92:29:52:b2:99:67:a5:df:12:d8:6e:67:8e:de:88:07:f4:
         fb:1e:c2:7c:c8:4d:58:88:88:d4:0f:3d:fa:ec:2b:a6:c1:d0:
         00:0e:f6:88:4b:24:f4:16:84:a6:34:dc:42:2e:b4:d5:a0:80:
         09:56:5c:2e:a0:14:92:c6:97:97:ee:c4:37:28:cb:2b:63:13:
         57:1b:7b:c2:55:96:a0:af:8c:59:15:eb:9d:23:f8:76:64:54:
         2c:fd:35:40:aa:2a:1e:6c:86:a1:b2:29:c0:68:76:e1:cd:08:
         2e:00:69:66:d2:de:07:3d:b9:e9:2f:f8:9e:d5:c8:e7:43:39:
         2c:af:dc:07:3c:e9:ed:0e:40:70:2c:a9:1f:df:75:09:ae:bc:
         37:93:15:c1:e8:3b:50:d4:c9:8f:b3:48:2b:c0:f9:3f:c8:b9:
         2e:ba:3c:e9:d9:f3:e9:27:ce:6d:05:78:99:4b:7e:b0:f5:ce:
         39:37:7b:78:40:3a:89:ba:95:82:cf:33:94:a0:82:ef:72:e1:
         b3:d6:39:ad:d7:69:e4:68:21:ba:c9:c5:4c:02:08:ee:f7:38:
         a0:c4:98:5a:28:01:cf:17:ea:41:d3:2c:27:f9:c8:5b:db:35:
         49:55:31:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 08:54:51 2024 by rpki-client on console-fra.rpki-client.org