Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a633030303a3a2f33342d3334203d3e20323731363236.roa
File:                     323830343a376537383a633030303a3a2f33342d3334203d3e20323731363236.roa (raw, json)
Hash identifier:          X81USljmBrJdl+EA+/mZhrTv2AbxIqjXSuaUZ3MUgEg=
Subject key identifier:   B7:29:E6:30:7F:0F:94:71:4D:6F:47:40:C3:3A:3D:C2:79:CD:50:57
Certificate issuer:       /CN=226524F55AA764292A51BB669FC2AD0B4C417266
Certificate serial:       72DCCF2EB8C74C001918CA2DB5DE5BDBBAD49367
Authority key identifier: 22:65:24:F5:5A:A7:64:29:2A:51:BB:66:9F:C2:AD:0B:4C:41:72:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226524F55AA764292A51BB669FC2AD0B4C417266.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a633030303a3a2f33342d3334203d3e20323731363236.roa
Signing time:             Fri 22 Nov 2024 18:21:19 +0000
ROA not before:           Fri 22 Nov 2024 18:16:19 +0000
ROA not after:            Fri 21 Nov 2025 18:21:19 +0000
asID:                     271626
IP address blocks:        2804:7e78:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/226524F55AA764292A51BB669FC2AD0B4C417266.crl
                          rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/226524F55AA764292A51BB669FC2AD0B4C417266.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226524F55AA764292A51BB669FC2AD0B4C417266.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:dc:cf:2e:b8:c7:4c:00:19:18:ca:2d:b5:de:5b:db:ba:d4:93:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226524F55AA764292A51BB669FC2AD0B4C417266
        Validity
            Not Before: Nov 22 18:16:19 2024 GMT
            Not After : Nov 21 18:21:19 2025 GMT
        Subject: CN=B729E6307F0F94714D6F4740C33A3DC279CD5057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b1:b8:82:51:bb:f6:86:93:fb:ae:3d:b9:ab:
                    8d:d3:27:c6:d5:0c:73:f5:1c:25:a5:77:f7:b3:d5:
                    96:70:b8:4d:0a:ed:c5:2a:1c:97:b8:b3:d7:44:6e:
                    78:a5:b4:88:f5:ff:bd:1b:5c:dd:f4:7e:ea:ff:1c:
                    31:e9:c2:da:40:57:6f:d8:c0:1a:a1:2e:cc:2a:76:
                    6d:d8:c8:cb:e3:9a:73:2e:e3:e1:fb:02:0d:b6:da:
                    d0:aa:96:9d:6d:e7:3e:c4:e8:ae:a8:1b:8f:51:cb:
                    2a:5f:11:5c:37:e6:02:1f:28:45:fe:43:8f:a3:f2:
                    06:9a:ff:c5:7a:d5:17:52:67:6a:65:03:90:10:b6:
                    0e:b5:27:b9:11:5d:fb:89:8f:27:6c:37:0a:d1:4a:
                    f1:b3:78:32:0d:fc:ec:c5:d1:a6:b5:90:a0:58:8d:
                    06:33:cf:5c:81:bf:a8:67:70:90:cf:74:95:d5:6b:
                    64:31:3a:42:e9:aa:fe:65:c2:1b:af:31:0a:0f:ac:
                    72:5e:d1:6b:48:0e:13:c7:80:ef:57:e0:61:b7:0f:
                    4b:29:a8:e4:e9:8a:5f:40:2e:e3:a1:93:f7:d0:4c:
                    92:fe:11:64:3c:77:6b:ac:7f:f3:ea:db:80:2a:34:
                    31:65:a9:54:ff:95:96:03:8f:44:e1:1c:11:46:a6:
                    e5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:29:E6:30:7F:0F:94:71:4D:6F:47:40:C3:3A:3D:C2:79:CD:50:57
            X509v3 Authority Key Identifier:
                keyid:22:65:24:F5:5A:A7:64:29:2A:51:BB:66:9F:C2:AD:0B:4C:41:72:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/226524F55AA764292A51BB669FC2AD0B4C417266.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226524F55AA764292A51BB669FC2AD0B4C417266.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a633030303a3a2f33342d3334203d3e20323731363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e78:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         83:9e:28:32:44:e8:f0:bc:a8:5b:16:ff:e8:0f:a9:ab:04:d8:
         68:d2:94:00:c9:76:45:d8:ab:19:e9:d7:33:25:47:39:b8:9c:
         89:d0:84:ee:f5:02:bb:65:df:ac:72:c1:7d:86:eb:3b:c3:69:
         19:a2:e5:60:5a:68:00:67:53:b0:44:18:27:61:5a:f3:08:87:
         c6:31:8e:7c:bd:4a:d0:42:df:ea:8c:63:5e:c1:f6:7e:c8:a8:
         9e:d5:9e:88:eb:12:72:1e:67:b8:75:5d:95:40:82:f2:51:e7:
         0d:3d:00:b1:23:d3:9d:50:b4:fe:40:c3:0f:fb:50:39:cc:55:
         e6:88:7e:cf:f1:87:53:53:06:5a:76:ee:c5:b2:b0:89:da:6c:
         1f:71:bc:6a:15:26:7f:4e:2e:b5:ef:c6:0b:82:72:fb:af:56:
         32:b2:d8:40:3d:f5:30:bb:75:fa:92:82:83:25:6c:03:07:37:
         1c:c9:ed:88:20:b9:51:96:80:16:9c:35:bb:f4:4c:19:6e:40:
         3e:8b:34:81:69:7e:70:c7:4a:96:0a:af:4e:14:f6:fa:4b:b9:
         7d:32:45:6a:72:5b:cf:fb:3b:8a:d4:9a:bc:9a:33:76:b5:4e:
         b3:89:da:bc:8a:ae:a4:8f:b7:80:63:e6:f5:2b:e4:0e:b3:74:
         bf:30:f8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:15 2024 by rpki-client on console-fra.rpki-client.org