Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/323830343a363032303a3a2f33322d313238203d3e20323639313437.roa
File:                     323830343a363032303a3a2f33322d313238203d3e20323639313437.roa (raw, json)
Hash identifier:          Mr6FTyStmGLnbo/XyVSMhH34I+SzgozIdOlEzZTGfh4=
Subject key identifier:   3F:6D:1C:CB:67:4D:32:2C:D4:94:5E:14:6D:02:DD:87:0E:39:00:8B
Certificate issuer:       /CN=7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7
Certificate serial:       7C5DAACEE9F8B2A210347C4E7877078743F075A7
Authority key identifier: 79:02:99:0B:6B:AE:3D:B7:24:9A:F5:2B:E3:F9:CA:51:F0:97:A6:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/323830343a363032303a3a2f33322d313238203d3e20323639313437.roa
Signing time:             Mon 08 Jul 2024 20:35:15 +0000
ROA not before:           Mon 08 Jul 2024 20:30:15 +0000
ROA not after:            Mon 07 Jul 2025 20:35:15 +0000
asID:                     269147
IP address blocks:        2804:6020::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.crl
                          rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 01:25:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5d:aa:ce:e9:f8:b2:a2:10:34:7c:4e:78:77:07:87:43:f0:75:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7
        Validity
            Not Before: Jul  8 20:30:15 2024 GMT
            Not After : Jul  7 20:35:15 2025 GMT
        Subject: CN=3F6D1CCB674D322CD4945E146D02DD870E39008B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d6:11:c5:93:9c:a6:5a:45:eb:7e:b7:94:7e:
                    15:c1:06:17:ae:1c:46:5a:c3:d4:ae:43:6b:25:a4:
                    58:fb:37:b0:40:bc:14:c5:fb:c8:33:22:7f:88:1a:
                    41:9a:12:32:4f:25:9d:fa:87:13:4e:43:ca:81:4a:
                    39:f6:1f:ae:3c:9e:6c:a0:5b:3e:a3:46:ca:d5:7f:
                    94:1f:04:cd:83:57:e3:59:eb:7f:52:09:a5:87:06:
                    fe:15:78:43:70:2f:99:b9:88:3b:f4:5f:8c:5c:bb:
                    e0:10:93:4f:0f:76:d0:36:d3:80:6f:83:14:a4:e8:
                    35:4c:1e:bb:bb:ce:95:af:2c:04:be:4e:a1:9d:d2:
                    b2:63:e7:af:fc:6b:54:21:05:af:72:6a:f3:f3:5a:
                    c0:50:b8:7e:a7:bb:09:8a:40:19:0f:de:d5:fc:f0:
                    4d:7e:94:84:92:4c:db:68:c2:76:6e:ac:a9:cb:ae:
                    d8:1b:e9:12:9e:15:79:81:55:b4:a7:b6:1d:10:93:
                    07:37:14:cb:aa:3d:5c:39:03:f4:26:9c:d6:3d:be:
                    5a:10:24:69:b8:97:d5:ad:02:17:c2:a3:02:30:f9:
                    3f:b4:07:87:f2:25:a5:8a:c9:97:67:1a:7c:c9:f6:
                    8a:68:66:04:a3:66:a3:9e:a5:70:47:ce:7a:65:bb:
                    c4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6D:1C:CB:67:4D:32:2C:D4:94:5E:14:6D:02:DD:87:0E:39:00:8B
            X509v3 Authority Key Identifier:
                keyid:79:02:99:0B:6B:AE:3D:B7:24:9A:F5:2B:E3:F9:CA:51:F0:97:A6:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/323830343a363032303a3a2f33322d313238203d3e20323639313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6020::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:60:81:f3:5a:04:35:62:cc:b4:5e:b1:ec:61:c2:87:c1:34:
         7a:fb:5d:54:8b:d8:52:e4:24:09:ed:71:08:01:a1:89:6f:20:
         e0:4e:8c:3b:b2:c8:81:b5:c0:09:98:ee:79:6c:9f:8f:3d:b1:
         10:ba:e8:e4:15:b1:48:b4:5b:e9:94:64:1e:cb:c4:35:3d:4e:
         86:4c:40:0e:50:50:c4:07:8a:e1:2a:6a:f1:bf:d5:60:0e:0b:
         14:9e:56:35:a1:4e:ea:33:f5:80:46:e9:89:81:13:5e:bd:ee:
         8f:b7:ce:1d:6e:24:fb:a9:1b:36:30:f9:7f:82:f3:c8:ec:7c:
         17:a4:5a:3d:44:f0:9a:12:68:6d:ac:e5:ae:fc:da:15:27:c1:
         e2:e0:7c:9a:69:74:3e:88:c9:54:ca:fd:ec:24:bd:1c:1b:0c:
         b5:1a:a8:ad:84:51:c7:0a:04:40:1f:e7:92:a8:82:7e:f1:77:
         85:b1:a7:68:00:1d:2d:ee:08:2b:c4:2a:52:b3:c7:08:b2:c2:
         da:91:b9:48:8f:55:d8:30:7b:c1:dc:60:0b:de:5c:16:e4:6f:
         9e:33:87:54:4d:41:5b:39:1f:55:c5:50:e6:4d:77:9e:ad:41:
         6e:8e:6c:33:fb:96:68:9f:0c:e6:5c:70:9e:01:22:13:ee:da:
         f0:49:f1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:28 2024 by rpki-client on console-ams.rpki-client.org