Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/323830343a376534303a313030303a3a2f34302d3430203d3e20323731363132.roa
File:                     323830343a376534303a313030303a3a2f34302d3430203d3e20323731363132.roa (raw, json)
Hash identifier:          zKE/zsuFkK5BAvrVTFTqeKEL1hMEo31LEoGzmJ4tetQ=
Subject key identifier:   FA:30:44:CE:BF:CE:13:89:BE:C6:16:3A:CE:3E:84:6B:77:4C:CB:F6
Certificate issuer:       /CN=6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11
Certificate serial:       6952A5AC27A91C9FD367AD4122AB396AE0E71977
Authority key identifier: 6F:4E:1F:59:E6:18:6A:77:B0:AD:EF:3E:51:0A:CE:74:7B:F1:AB:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/323830343a376534303a313030303a3a2f34302d3430203d3e20323731363132.roa
Signing time:             Fri 20 Sep 2024 19:52:12 +0000
ROA not before:           Fri 20 Sep 2024 19:47:12 +0000
ROA not after:            Fri 19 Sep 2025 19:52:12 +0000
asID:                     271612
IP address blocks:        2804:7e40:1000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.crl
                          rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:52:a5:ac:27:a9:1c:9f:d3:67:ad:41:22:ab:39:6a:e0:e7:19:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11
        Validity
            Not Before: Sep 20 19:47:12 2024 GMT
            Not After : Sep 19 19:52:12 2025 GMT
        Subject: CN=FA3044CEBFCE1389BEC6163ACE3E846B774CCBF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:14:d3:e2:dd:94:e4:44:cc:6d:0f:14:b4:1d:
                    99:41:d7:44:f8:19:97:80:82:d9:f6:ac:3b:b9:fa:
                    f5:79:69:8c:3d:66:0f:ff:c8:64:bf:34:da:12:53:
                    cf:11:ca:e1:14:55:77:dd:8d:be:6c:0e:ac:0a:5c:
                    51:ff:e9:7e:78:9f:27:4b:6b:d1:fc:b0:b8:eb:dd:
                    dc:8d:73:a3:33:d0:aa:2f:cf:bc:37:5b:2e:f3:7f:
                    c0:23:68:20:16:a5:3c:9f:76:df:f0:7b:71:23:00:
                    fb:c3:fa:b3:ba:7a:53:23:90:06:d4:35:b9:d5:1a:
                    c8:d5:77:d3:98:0a:eb:d7:d1:58:4f:b5:45:ad:76:
                    6c:34:9b:3a:ab:bf:0e:8b:cb:8b:18:55:df:37:ea:
                    30:7f:5f:3e:e1:c3:88:42:ee:4e:35:ab:d1:c3:50:
                    1b:61:d2:71:d7:16:81:51:fe:d0:7d:f9:5c:1b:16:
                    74:10:5f:89:0f:90:f6:c4:77:70:26:6b:c0:eb:b3:
                    50:2a:69:d2:37:dc:69:39:7c:ae:04:17:da:78:4b:
                    03:5d:0e:0d:b2:a6:0f:fb:40:24:0d:8b:cc:95:48:
                    60:0c:ee:8b:ca:df:0e:c5:d4:e3:87:42:ec:15:0e:
                    f5:27:92:e9:a9:00:c7:6f:7a:16:58:c6:5e:f7:73:
                    30:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:30:44:CE:BF:CE:13:89:BE:C6:16:3A:CE:3E:84:6B:77:4C:CB:F6
            X509v3 Authority Key Identifier:
                keyid:6F:4E:1F:59:E6:18:6A:77:B0:AD:EF:3E:51:0A:CE:74:7B:F1:AB:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/323830343a376534303a313030303a3a2f34302d3430203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e40:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1f:76:b1:0e:f1:16:d2:b1:6b:9b:4d:75:9e:2b:49:1c:18:56:
         16:d8:9d:57:d1:63:a1:f0:f6:c7:9f:6e:b2:d3:6b:8d:de:45:
         7d:c2:dd:c6:05:f9:e3:83:9c:21:98:59:27:b8:c6:32:f8:57:
         50:d5:7c:80:14:e6:96:18:38:d4:0d:77:3c:86:ac:b1:be:09:
         2b:b0:7d:d8:cb:6d:49:1d:c6:d1:fe:34:c3:5b:ae:2a:53:ef:
         1b:4e:23:68:32:88:e6:e6:5f:16:f9:d5:ae:f0:6b:eb:84:e9:
         d5:ba:f1:90:25:9a:b3:c4:cc:be:39:33:d2:f1:51:11:24:49:
         68:bc:1a:56:d4:82:ee:32:2f:95:2c:ef:f2:90:cf:7a:2f:5e:
         e4:e7:07:32:08:9b:e3:46:49:fb:ec:ed:c6:66:70:d4:19:79:
         bb:d7:d9:0f:46:69:fb:2c:e9:41:e1:9d:6d:39:8b:02:bb:63:
         b8:94:53:47:f4:6f:83:d2:71:75:09:52:3c:41:b1:1b:c6:15:
         d7:08:ab:e9:d6:d2:de:bf:ff:72:98:18:f7:5e:de:44:37:15:
         e4:19:07:c5:fd:86:1d:9a:42:16:2a:04:8a:07:cb:3f:21:01:
         b1:82:8c:a2:db:af:a4:25:5b:fe:3b:f0:33:2e:dc:3e:73:e1:
         5d:f8:e6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:52 2024 by rpki-client on console-ams.rpki-client.org