Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/323830343a376530633a383030303a3a2f33332d3333203d3e20323731353939.roa
File:                     323830343a376530633a383030303a3a2f33332d3333203d3e20323731353939.roa (raw, json)
Hash identifier:          +0TxQqZEvvvFrqIbec0mJDPSftooFmTXarICFAgYAh4=
Subject key identifier:   6B:53:01:AF:FF:D5:84:35:7D:8A:E2:80:8D:E8:2F:F0:F9:7F:58:80
Certificate issuer:       /CN=085B4B97D0BA72E679EC0F52343750221AD51660
Certificate serial:       66C33300C947198D2D492C1A16D9F129589CC3A0
Authority key identifier: 08:5B:4B:97:D0:BA:72:E6:79:EC:0F:52:34:37:50:22:1A:D5:16:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085B4B97D0BA72E679EC0F52343750221AD51660.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/323830343a376530633a383030303a3a2f33332d3333203d3e20323731353939.roa
Signing time:             Thu 04 Apr 2024 13:04:32 +0000
ROA not before:           Thu 04 Apr 2024 12:59:32 +0000
ROA not after:            Thu 03 Apr 2025 13:04:32 +0000
asID:                     271599
IP address blocks:        2804:7e0c:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/085B4B97D0BA72E679EC0F52343750221AD51660.crl
                          rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/085B4B97D0BA72E679EC0F52343750221AD51660.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085B4B97D0BA72E679EC0F52343750221AD51660.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c3:33:00:c9:47:19:8d:2d:49:2c:1a:16:d9:f1:29:58:9c:c3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085B4B97D0BA72E679EC0F52343750221AD51660
        Validity
            Not Before: Apr  4 12:59:32 2024 GMT
            Not After : Apr  3 13:04:32 2025 GMT
        Subject: CN=6B5301AFFFD584357D8AE2808DE82FF0F97F5880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:93:5f:91:18:ff:31:e6:b3:3d:08:d7:90:f2:
                    e9:bb:6d:2b:39:ee:7e:a6:01:68:6b:86:84:65:3f:
                    31:06:9e:74:d1:e7:8e:64:59:8c:3f:2f:83:c9:94:
                    23:c6:cd:b1:dd:7c:1b:11:f4:93:92:0e:8b:fb:ff:
                    1f:67:41:a6:c1:16:ec:d1:b5:2c:9e:d0:7f:3c:74:
                    2a:77:b0:c8:c5:a6:c5:e0:ba:d6:bf:09:78:78:de:
                    33:e8:7d:1c:13:13:52:a6:9b:57:4e:23:66:ec:0e:
                    e4:6c:23:12:4b:68:89:9b:29:d3:ee:cc:9d:db:c4:
                    e4:da:62:f3:ae:de:e1:0c:2f:03:5e:9e:bb:1d:b5:
                    b2:db:a0:15:be:65:3e:59:4f:25:8a:b9:a8:8e:1f:
                    89:b6:ae:db:7a:77:3f:d1:42:b5:f1:54:08:bd:62:
                    17:0c:33:d4:7d:7d:47:33:e3:9b:99:dc:2e:42:cf:
                    ff:92:6d:80:2f:be:1b:a8:dc:97:4d:0b:5c:80:c4:
                    16:cb:68:9f:ae:1a:66:99:7b:fe:dd:c9:83:e9:ca:
                    73:8a:48:8c:d7:b5:31:73:0a:e4:52:83:08:92:c8:
                    20:59:5d:ce:4c:a3:c5:38:46:cd:f4:e9:c0:72:20:
                    71:03:db:fa:dc:a1:2f:4d:0b:ae:4b:dc:2c:89:7b:
                    de:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:53:01:AF:FF:D5:84:35:7D:8A:E2:80:8D:E8:2F:F0:F9:7F:58:80
            X509v3 Authority Key Identifier:
                keyid:08:5B:4B:97:D0:BA:72:E6:79:EC:0F:52:34:37:50:22:1A:D5:16:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/085B4B97D0BA72E679EC0F52343750221AD51660.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085B4B97D0BA72E679EC0F52343750221AD51660.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/323830343a376530633a383030303a3a2f33332d3333203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e0c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         54:75:fd:d0:7e:24:bb:bd:d4:94:c2:03:8d:01:9d:c8:e0:12:
         27:20:19:13:42:7b:0e:77:0e:25:92:ff:8b:7d:fb:4b:29:b1:
         c5:f6:c5:2e:d9:1e:90:e1:34:2e:3c:90:96:fe:31:83:a3:ba:
         c0:14:ec:88:82:9e:d9:53:57:ff:cc:a5:5a:91:58:e6:8a:46:
         3c:26:52:7c:dd:22:b3:91:15:ac:19:71:c0:ca:e8:c9:58:72:
         2d:e8:78:ba:87:73:f0:1c:3d:49:00:37:cf:40:25:2e:da:82:
         6a:fe:e8:5b:83:d7:68:79:ba:b7:7a:dc:cd:fe:c2:c1:94:e6:
         af:77:d2:9e:40:d5:c2:85:5f:cb:6f:fb:f2:d1:35:f0:cf:0e:
         6e:cf:7c:6e:6c:57:9d:ce:05:56:8a:fc:c7:6b:0e:06:1e:ef:
         a2:36:57:61:f8:cc:b3:f1:70:b3:32:71:8b:33:63:ab:dc:c2:
         0d:d1:2a:bf:13:8c:f4:16:cd:ae:42:70:1d:49:e1:1b:fe:79:
         31:ce:13:c1:4a:54:e2:65:78:26:7f:2c:d8:87:ae:1c:1f:95:
         47:db:95:04:fb:dd:7e:29:36:f9:13:f1:cc:2e:72:2d:4a:b3:
         c8:13:c1:6f:04:33:8f:19:51:36:ff:28:df:4a:b8:12:68:65:
         93:94:16:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org