Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/323830343a376534303a633030303a3a2f33342d3334203d3e20323731363132.roa
File:                     323830343a376534303a633030303a3a2f33342d3334203d3e20323731363132.roa (raw, json)
Hash identifier:          IFQbW31kYZhuSCu7zzw7efQ+1rv/RfWAGYLXLcAUX3g=
Subject key identifier:   AB:88:8D:3F:EC:3E:57:03:ED:51:06:D3:92:67:BB:73:7D:C1:D6:58
Certificate issuer:       /CN=6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11
Certificate serial:       7D05ED94D42D8356E1075D7A997C67DDB497E981
Authority key identifier: 6F:4E:1F:59:E6:18:6A:77:B0:AD:EF:3E:51:0A:CE:74:7B:F1:AB:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/323830343a376534303a633030303a3a2f33342d3334203d3e20323731363132.roa
Signing time:             Thu 04 Apr 2024 02:55:38 +0000
ROA not before:           Thu 04 Apr 2024 02:50:38 +0000
ROA not after:            Thu 03 Apr 2025 02:55:38 +0000
asID:                     271612
IP address blocks:        2804:7e40:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.crl
                          rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:05:ed:94:d4:2d:83:56:e1:07:5d:7a:99:7c:67:dd:b4:97:e9:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11
        Validity
            Not Before: Apr  4 02:50:38 2024 GMT
            Not After : Apr  3 02:55:38 2025 GMT
        Subject: CN=AB888D3FEC3E5703ED5106D39267BB737DC1D658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:0a:db:15:c5:43:08:8c:9b:9e:f2:fb:d0:
                    a2:fa:32:af:8e:08:85:45:cd:80:cb:e3:09:5f:6b:
                    b1:0f:49:28:59:02:b5:82:f2:40:69:23:12:a9:e7:
                    2e:c9:ce:f4:0a:4d:9e:2e:0f:f4:75:dc:11:98:65:
                    ea:da:b7:6f:7d:98:68:60:94:50:c4:6c:98:41:c0:
                    ae:a3:1c:1a:e7:f5:5c:0d:4a:0c:90:03:53:65:4a:
                    99:f1:bd:cd:02:89:85:b7:bc:93:f3:3f:56:73:6b:
                    71:e9:ea:11:32:06:a2:bf:ad:ca:90:9d:80:f4:48:
                    26:31:8f:08:72:ba:38:d5:39:6f:10:d1:4a:ed:86:
                    ea:3f:59:9e:4c:b3:c4:a2:2d:1b:0e:71:74:db:c8:
                    ad:b8:37:04:d1:4d:b8:cb:d3:d8:24:b8:7a:2a:b4:
                    3d:b3:e5:8e:f1:f1:e2:81:16:a1:68:77:3e:99:65:
                    ea:13:1a:74:9b:b4:47:8c:e5:91:b5:2d:9e:a1:d2:
                    a6:d6:81:7d:d6:cb:51:47:1f:b6:02:1a:5e:1a:e5:
                    57:db:cd:27:52:c8:a2:1e:93:33:f6:8d:58:52:e8:
                    07:b5:9a:e4:5d:40:4b:e5:c8:7c:31:4c:9e:1b:40:
                    ea:36:ac:89:20:39:c0:76:0b:ff:26:de:5b:65:89:
                    98:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:88:8D:3F:EC:3E:57:03:ED:51:06:D3:92:67:BB:73:7D:C1:D6:58
            X509v3 Authority Key Identifier:
                keyid:6F:4E:1F:59:E6:18:6A:77:B0:AD:EF:3E:51:0A:CE:74:7B:F1:AB:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/323830343a376534303a633030303a3a2f33342d3334203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e40:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         89:6e:bb:05:63:6a:25:ea:48:20:e4:f6:05:f6:aa:a4:c6:17:
         77:4e:30:bb:98:dd:18:b0:c3:00:83:1d:02:f0:02:24:6c:e6:
         4a:ff:31:c6:0d:21:41:fa:3f:98:8a:2d:b2:b3:6a:6d:e6:fd:
         3e:a0:3a:b7:04:68:59:4f:13:4f:2c:6e:1a:c0:52:47:e5:2d:
         c3:33:d7:47:12:84:d7:48:15:18:b3:41:66:2c:14:fe:77:37:
         0c:c7:07:d5:f7:13:2d:b0:b3:d8:02:1a:e4:d3:79:8c:e4:5b:
         3f:a3:fd:91:dd:14:e9:f9:29:21:31:3f:d1:66:02:08:f4:87:
         5b:51:76:03:bc:0d:84:17:aa:52:1c:47:2f:00:3a:b0:b8:f6:
         78:12:d0:bd:f3:ad:de:09:94:53:ad:5d:13:60:a9:d0:8c:42:
         49:d5:34:c0:75:de:78:6a:f2:1c:0a:f1:bf:73:6b:2e:f9:3e:
         b7:c0:f9:15:24:e7:b9:ad:be:6f:ea:14:91:9f:3a:50:0e:ed:
         5c:df:60:67:c1:9f:c8:52:d0:38:b5:31:05:c3:b6:f8:2e:93:
         42:f1:c0:79:33:b2:99:e8:ed:d9:57:8f:cf:80:f3:49:b0:e8:
         e2:d9:54:bd:65:e9:73:d8:0a:fc:69:2a:9c:ad:71:98:a6:be:
         39:f9:12:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:52 2024 by rpki-client on console-ams.rpki-client.org