Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/323830343a343234383a3a2f33322d313238203d3e20323637343930.roa
File:                     323830343a343234383a3a2f33322d313238203d3e20323637343930.roa (raw, json)
Hash identifier:          tlJfwely8SrG46OeGhZ10by4+YU1lZmwGwe8548VKi0=
Subject key identifier:   70:69:C6:39:CA:B7:95:AB:F6:82:A3:5B:12:B1:30:22:87:C5:A2:0A
Certificate issuer:       /CN=8351D68395C08BF478012D25B79F2499141C8F54
Certificate serial:       60AC7F3C9CF1D787C8B48077B5D51F4A247D324E
Authority key identifier: 83:51:D6:83:95:C0:8B:F4:78:01:2D:25:B7:9F:24:99:14:1C:8F:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8351D68395C08BF478012D25B79F2499141C8F54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/323830343a343234383a3a2f33322d313238203d3e20323637343930.roa
Signing time:             Wed 16 Oct 2024 17:24:34 +0000
ROA not before:           Wed 16 Oct 2024 17:19:34 +0000
ROA not after:            Wed 15 Oct 2025 17:24:34 +0000
asID:                     267490
IP address blocks:        2804:4248::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/8351D68395C08BF478012D25B79F2499141C8F54.crl
                          rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/8351D68395C08BF478012D25B79F2499141C8F54.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8351D68395C08BF478012D25B79F2499141C8F54.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ac:7f:3c:9c:f1:d7:87:c8:b4:80:77:b5:d5:1f:4a:24:7d:32:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8351D68395C08BF478012D25B79F2499141C8F54
        Validity
            Not Before: Oct 16 17:19:34 2024 GMT
            Not After : Oct 15 17:24:34 2025 GMT
        Subject: CN=7069C639CAB795ABF682A35B12B1302287C5A20A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1b:9e:7f:b7:c7:58:29:0b:ac:98:2e:3a:58:
                    4f:28:19:85:69:13:5e:54:18:06:97:b7:e7:38:d1:
                    95:b4:5c:e6:da:a7:cf:63:9f:88:bb:60:8c:0c:8d:
                    f7:fa:d3:27:da:94:de:a5:d4:c4:65:85:60:ba:ce:
                    7d:c4:75:a9:1c:ab:ae:d2:c8:eb:10:3b:ec:65:4e:
                    62:0f:b2:18:82:95:d5:de:58:98:e0:71:c9:96:fc:
                    59:fb:3b:77:c7:65:ac:88:c3:69:be:42:cb:c0:41:
                    98:94:40:0e:24:e1:9b:9d:a7:be:e9:f3:c9:e3:00:
                    97:70:16:ba:36:82:8f:99:e1:0d:4e:0f:c4:9d:c2:
                    d1:e5:2e:12:78:6f:11:37:13:1b:74:40:b6:f2:9e:
                    dc:59:ac:7c:c1:07:9a:ab:4b:51:9d:6e:22:c8:0c:
                    f7:64:4b:46:a3:dd:ab:4c:c0:fd:bf:38:39:2a:84:
                    b5:1f:30:70:cf:04:de:a4:71:dc:ee:86:f5:8a:5c:
                    3e:df:59:3b:89:4f:b2:d4:05:ce:df:bc:9e:f8:0b:
                    10:2a:3a:7c:ec:af:10:86:36:06:d2:89:38:43:18:
                    ef:c8:45:7b:b5:76:1d:e2:3c:4b:c3:15:9a:ab:05:
                    06:2f:1c:ab:03:0b:bf:40:6e:74:29:15:1f:41:f2:
                    7b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:69:C6:39:CA:B7:95:AB:F6:82:A3:5B:12:B1:30:22:87:C5:A2:0A
            X509v3 Authority Key Identifier:
                keyid:83:51:D6:83:95:C0:8B:F4:78:01:2D:25:B7:9F:24:99:14:1C:8F:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/8351D68395C08BF478012D25B79F2499141C8F54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8351D68395C08BF478012D25B79F2499141C8F54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/323830343a343234383a3a2f33322d313238203d3e20323637343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4248::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:fc:68:e5:2c:e6:f4:85:16:66:63:7b:ca:fc:ad:7f:14:1f:
         3b:e0:4c:aa:67:47:c6:c7:d8:1f:2a:84:b4:21:98:26:7b:11:
         02:ff:b4:7b:12:85:86:10:37:ea:c2:56:5b:6f:c8:2c:32:55:
         b3:36:25:49:43:8e:8a:a8:be:b7:76:2f:a0:20:be:aa:e2:1f:
         e8:f9:1f:a5:16:5a:4d:e5:d0:4c:e4:c8:b5:d1:40:3b:35:fd:
         b8:da:94:8b:62:f7:2d:c6:e3:09:d9:23:cf:71:84:79:be:30:
         0e:d2:da:da:68:a3:87:57:6f:26:b1:85:25:0e:bf:33:ae:57:
         5f:d2:48:12:09:fd:0f:fd:64:0a:3a:a4:d8:26:58:a5:6c:0e:
         6f:72:cd:8a:b2:bd:a8:38:e8:5a:c6:5a:e7:02:7c:14:33:57:
         6f:ea:3b:f6:55:7d:6d:43:0d:09:82:a2:a9:02:d8:8f:df:b4:
         b7:48:d9:a2:df:e0:c4:2d:d2:1d:fb:ab:9d:7a:6d:05:9a:12:
         07:7b:d4:1c:bc:80:11:4e:0d:ce:3a:ad:67:43:6c:53:1d:26:
         03:c9:9f:81:8c:0c:17:7e:bf:6e:31:c3:34:f7:63:55:21:91:
         63:09:b6:ca:39:ce:cd:63:56:50:d9:50:fb:84:ee:fd:1b:46:
         19:c1:8f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:06 2024 by rpki-client on console-fra.rpki-client.org