Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/323830343a376534303a383030303a3a2f33332d3333203d3e20323731363132.roa
File:                     323830343a376534303a383030303a3a2f33332d3333203d3e20323731363132.roa (raw, json)
Hash identifier:          QAxQv8HZyCjrHEvTv/dnVKgQ3AQlb34LAnEIc04NJcs=
Subject key identifier:   28:3A:A0:42:D7:6D:D0:42:88:75:11:91:5C:BB:63:CB:3D:44:AC:5F
Certificate issuer:       /CN=6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11
Certificate serial:       3514346DD865F55CA16A73E8EF992941D4CE3781
Authority key identifier: 6F:4E:1F:59:E6:18:6A:77:B0:AD:EF:3E:51:0A:CE:74:7B:F1:AB:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/323830343a376534303a383030303a3a2f33332d3333203d3e20323731363132.roa
Signing time:             Thu 04 Apr 2024 02:55:38 +0000
ROA not before:           Thu 04 Apr 2024 02:50:38 +0000
ROA not after:            Thu 03 Apr 2025 02:55:38 +0000
asID:                     271612
IP address blocks:        2804:7e40:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.crl
                          rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:14:34:6d:d8:65:f5:5c:a1:6a:73:e8:ef:99:29:41:d4:ce:37:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11
        Validity
            Not Before: Apr  4 02:50:38 2024 GMT
            Not After : Apr  3 02:55:38 2025 GMT
        Subject: CN=283AA042D76DD042887511915CBB63CB3D44AC5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ae:7a:bc:a0:47:65:9f:4c:e4:89:2f:04:b5:
                    58:36:b4:78:ae:be:74:1c:c0:db:30:29:f6:74:38:
                    a7:f4:4a:83:90:de:d5:bc:44:2a:6f:2c:ef:b9:24:
                    e7:d2:bc:11:e2:44:75:9a:b9:45:af:c5:49:ae:a6:
                    0b:67:e6:ad:ce:a2:c8:a8:58:d3:c9:0b:d4:72:bc:
                    89:a1:a6:18:33:85:d6:cc:7d:a5:20:5d:df:64:bd:
                    41:bd:ae:c8:90:ff:a5:a2:c8:5f:65:c7:c8:42:b8:
                    be:74:99:e2:f0:54:cd:0a:05:cd:a3:d0:a4:ee:89:
                    56:75:a7:99:5c:ae:95:a0:72:3b:80:91:8d:7c:7f:
                    fc:3f:62:ae:f5:c4:14:5c:e0:05:5d:2d:30:2b:9c:
                    fd:a3:a1:06:44:ad:6a:c9:57:bd:5e:12:e6:cc:83:
                    3f:46:b6:9c:35:99:82:36:57:63:b2:01:6d:24:22:
                    4f:16:77:91:1c:27:ac:2d:fe:7b:b1:55:af:a8:1d:
                    87:72:85:dd:e4:4d:a1:a7:c9:35:b4:7b:b9:84:73:
                    72:bd:be:a9:78:c6:38:f6:8e:f5:02:f4:70:52:bc:
                    88:37:d3:7b:8b:18:59:4f:4a:3c:1e:c2:35:20:b3:
                    1c:24:55:76:76:b9:51:48:6d:59:d3:26:d2:2a:79:
                    67:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3A:A0:42:D7:6D:D0:42:88:75:11:91:5C:BB:63:CB:3D:44:AC:5F
            X509v3 Authority Key Identifier:
                keyid:6F:4E:1F:59:E6:18:6A:77:B0:AD:EF:3E:51:0A:CE:74:7B:F1:AB:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/323830343a376534303a383030303a3a2f33332d3333203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e40:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         09:37:18:30:a3:05:6f:80:f1:46:d9:ac:5b:e4:17:ed:6d:1c:
         17:51:32:10:0e:22:4e:10:6d:fe:dc:8c:86:19:48:94:70:d7:
         40:79:90:5d:0c:38:f0:5e:3c:1e:2f:5d:f1:b3:57:1e:14:1b:
         ad:70:c5:e1:11:7a:af:21:fc:28:f5:d8:6d:35:75:28:37:be:
         4a:2c:ed:85:4e:9d:94:43:60:ff:55:1d:c8:83:46:3d:5a:1a:
         eb:6e:19:a4:08:8e:40:33:aa:99:29:08:9d:e8:21:04:20:78:
         60:95:f5:e9:5e:4a:a9:f2:d3:e7:78:9d:bd:8e:d2:fe:5b:c4:
         11:32:e2:9e:61:da:5a:d3:32:44:75:03:b8:33:f6:e6:89:47:
         79:ab:3b:b2:9d:f4:c8:e5:bf:bb:14:11:9b:94:f8:ef:49:f2:
         42:db:5c:8e:8c:13:d7:a4:f1:fb:2c:03:4e:1d:38:8b:0f:49:
         9a:e2:d2:61:8d:66:7d:2b:6c:f7:02:98:bb:30:39:89:b7:44:
         27:71:a9:6c:9c:73:68:39:84:ce:19:56:24:ff:25:f0:fb:83:
         c2:b8:d5:ee:02:15:3e:0a:39:46:33:66:45:38:6a:ce:96:e1:
         61:84:8d:e9:70:d9:0b:93:15:e5:7f:12:2e:79:83:1a:b2:36:
         ab:2f:2e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:52 2024 by rpki-client on console-ams.rpki-client.org