Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/0/323830343a363934633a3a2f33322d313238203d3e20323730323631.roa
File:                     323830343a363934633a3a2f33322d313238203d3e20323730323631.roa (raw, json)
Hash identifier:          A+IFDKa9SLIpE22SrOE7Wj13aiz0DtIGUXyjM8JKc04=
Subject key identifier:   C7:A8:8B:28:BB:36:3E:55:47:AF:05:B9:70:24:6D:AE:A0:D2:1A:AA
Certificate issuer:       /CN=21F94622ABB07C40B00A61480B9A8AE148AE33AE
Certificate serial:       68B62E36A482EC7CF0972BFC44D412EF9EC31B7B
Authority key identifier: 21:F9:46:22:AB:B0:7C:40:B0:0A:61:48:0B:9A:8A:E1:48:AE:33:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F94622ABB07C40B00A61480B9A8AE148AE33AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/0/323830343a363934633a3a2f33322d313238203d3e20323730323631.roa
Signing time:             Thu 04 Apr 2024 11:39:19 +0000
ROA not before:           Thu 04 Apr 2024 11:34:19 +0000
ROA not after:            Thu 03 Apr 2025 11:39:19 +0000
asID:                     270261
IP address blocks:        2804:694c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/0/21F94622ABB07C40B00A61480B9A8AE148AE33AE.crl
                          rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/0/21F94622ABB07C40B00A61480B9A8AE148AE33AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F94622ABB07C40B00A61480B9A8AE148AE33AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b6:2e:36:a4:82:ec:7c:f0:97:2b:fc:44:d4:12:ef:9e:c3:1b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F94622ABB07C40B00A61480B9A8AE148AE33AE
        Validity
            Not Before: Apr  4 11:34:19 2024 GMT
            Not After : Apr  3 11:39:19 2025 GMT
        Subject: CN=C7A88B28BB363E5547AF05B970246DAEA0D21AAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:67:41:e4:89:c7:ac:f4:9c:db:97:ed:f7:08:
                    0e:2b:cf:34:81:44:38:c7:6a:f0:1e:15:d2:1a:30:
                    6d:50:47:8d:92:2f:4c:d7:ac:a9:17:b1:3e:a8:f6:
                    29:17:71:37:bb:5f:14:6c:3e:e5:64:cd:b2:f3:a6:
                    3d:1c:6a:46:9d:b8:44:69:57:67:7b:e0:7c:dc:7d:
                    e5:03:f4:33:52:aa:6f:9d:02:c1:b1:6b:24:a4:e5:
                    4d:0b:a3:66:4b:83:c0:32:74:92:58:f7:ad:64:be:
                    02:6f:fd:00:63:07:f9:6a:6a:11:b3:d0:37:d3:76:
                    97:d5:af:aa:f7:89:f6:f8:6f:99:e9:6a:65:7f:e1:
                    20:bc:bc:aa:f9:19:d0:79:5b:f8:4e:32:6c:60:b9:
                    e3:60:1f:da:b9:49:49:08:6e:48:e2:44:4d:4c:3c:
                    fe:99:12:d0:7d:6b:79:ff:88:3a:87:50:f2:cc:de:
                    f4:68:4d:12:26:58:fa:21:bf:60:e9:ab:3e:f2:9a:
                    cc:df:40:54:66:e8:dd:26:4c:e7:d8:6c:b9:d1:6d:
                    61:b8:64:6b:76:3b:03:35:fe:37:ed:e4:d8:86:22:
                    09:d4:97:a8:64:ee:53:90:4b:42:3b:ed:53:3c:e8:
                    60:cf:2c:2c:e2:ad:9d:f1:d4:47:80:13:bb:6d:36:
                    9b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A8:8B:28:BB:36:3E:55:47:AF:05:B9:70:24:6D:AE:A0:D2:1A:AA
            X509v3 Authority Key Identifier:
                keyid:21:F9:46:22:AB:B0:7C:40:B0:0A:61:48:0B:9A:8A:E1:48:AE:33:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/0/21F94622ABB07C40B00A61480B9A8AE148AE33AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F94622ABB07C40B00A61480B9A8AE148AE33AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/0/323830343a363934633a3a2f33322d313238203d3e20323730323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:694c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:92:d3:41:89:da:b6:2e:7c:40:fd:d5:f9:74:4a:4c:81:6b:
         35:2b:d3:9b:c2:e9:01:93:43:d2:d8:0c:32:9e:cf:3d:3e:5d:
         6b:18:1e:eb:a3:43:18:6c:e4:5f:b9:e7:66:86:3a:1d:f1:6d:
         0d:4e:69:51:7a:d0:94:7a:c6:d0:1a:bf:db:e2:21:c6:83:22:
         90:70:8d:ef:74:65:8b:cc:b0:a4:64:14:3e:67:4a:2e:16:1b:
         a7:94:9f:6a:16:26:17:29:d5:0e:da:05:f8:e5:33:b4:c6:26:
         a0:f0:6c:3d:3c:b3:e3:ad:a3:01:79:7b:a3:f1:3a:f0:2b:da:
         25:a0:f9:9f:d2:d1:db:f0:33:28:2b:a5:f3:ab:3f:a1:4a:b4:
         9f:d3:a8:7b:5e:da:33:c7:1e:2d:58:e9:b9:47:71:ec:5c:d8:
         c0:9a:94:9a:a4:bc:76:69:80:06:94:8c:09:cd:72:c4:29:05:
         ac:06:e3:00:30:93:44:aa:1d:20:ca:db:7b:26:e8:61:29:70:
         6c:76:33:a3:b9:88:15:8c:27:59:9c:55:a1:47:c2:31:0d:1b:
         ae:34:27:12:78:64:b0:88:31:4c:e0:62:6b:e1:50:a1:2c:9a:
         02:ef:93:55:6e:09:45:7e:8f:7d:b1:a6:14:8d:fd:67:ea:3a:
         13:35:f1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:41 2024 by rpki-client on console-fra.rpki-client.org