Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/323830343a386631383a383030303a3a2f33332d3333203d3e20323733343637.roa
File:                     323830343a386631383a383030303a3a2f33332d3333203d3e20323733343637.roa (raw, json)
Hash identifier:          wiEa4w5Y7zWYMAJPNvnmyxRsc/hJ0NyLXoC4IE7G9ak=
Subject key identifier:   C8:8D:4E:AC:66:EC:C4:E5:4C:7B:F8:7D:9A:90:DE:71:90:04:33:4D
Certificate issuer:       /CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
Certificate serial:       4CF603B031D53FA63A80C6E1F67A768EC7F63469
Authority key identifier: E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/323830343a386631383a383030303a3a2f33332d3333203d3e20323733343637.roa
Signing time:             Tue 12 Nov 2024 14:06:42 +0000
ROA not before:           Tue 12 Nov 2024 14:01:42 +0000
ROA not after:            Tue 11 Nov 2025 14:06:42 +0000
asID:                     273467
IP address blocks:        2804:8f18:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl
                          rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f6:03:b0:31:d5:3f:a6:3a:80:c6:e1:f6:7a:76:8e:c7:f6:34:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
        Validity
            Not Before: Nov 12 14:01:42 2024 GMT
            Not After : Nov 11 14:06:42 2025 GMT
        Subject: CN=C88D4EAC66ECC4E54C7BF87D9A90DE719004334D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:77:a2:7b:f1:31:06:96:82:dc:7e:78:41:4a:
                    f5:bc:28:d3:bb:2b:14:19:17:ea:9b:84:f0:b2:97:
                    54:bf:d4:1f:a8:83:ac:ea:ce:10:0f:88:e4:f0:f5:
                    02:f8:7a:6e:51:f4:0f:76:60:fa:61:b6:89:af:64:
                    86:38:bc:14:ee:f6:c2:9d:c6:f1:c2:7f:c5:ec:d0:
                    80:ad:75:50:5f:62:17:ae:da:0a:b1:d0:79:3e:95:
                    b2:20:62:39:35:4c:a5:07:de:4c:d3:c4:ea:b1:a4:
                    e4:c0:f0:03:77:96:8e:34:0c:40:25:96:b9:64:54:
                    c5:b8:20:b1:f9:d1:b0:0e:ef:f0:43:bb:62:f3:57:
                    db:89:32:1e:c3:6e:b4:48:37:2d:85:ff:c1:e2:c2:
                    2b:e6:0c:95:e0:8e:9a:36:5c:ee:5c:88:e0:5a:36:
                    8d:4b:d0:85:be:6e:2a:03:45:f9:6f:81:13:34:77:
                    ba:dc:45:5f:f5:83:b6:9e:a1:a5:d7:6a:85:a8:2f:
                    30:b6:cb:c0:bb:1e:e9:fd:41:f5:d7:6e:4b:de:a6:
                    33:e6:7c:58:0d:4d:ab:e1:32:cd:64:1c:b3:6e:57:
                    09:8b:33:a0:33:92:e5:31:ad:fc:86:19:3f:ab:a7:
                    47:92:41:0c:67:9a:8a:fa:71:e3:ce:ba:fb:80:e7:
                    29:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8D:4E:AC:66:EC:C4:E5:4C:7B:F8:7D:9A:90:DE:71:90:04:33:4D
            X509v3 Authority Key Identifier:
                keyid:E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/323830343a386631383a383030303a3a2f33332d3333203d3e20323733343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f18:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         67:ca:79:e4:57:e6:c2:53:86:ee:17:d0:5b:d6:0b:33:c7:d6:
         2f:72:89:65:42:8f:09:51:9f:70:6e:c5:41:f6:38:b1:05:f8:
         17:cd:28:b6:54:86:83:8e:03:e8:79:8b:eb:cf:60:e8:c8:70:
         b1:fa:52:3b:4a:aa:84:9e:d9:e7:fb:4f:5d:97:cc:9f:0d:32:
         10:20:8f:03:c1:11:5f:21:4e:f5:46:6e:da:6f:93:0b:98:89:
         20:a5:22:0c:09:34:74:d2:17:ed:43:08:70:34:2d:09:46:ba:
         1b:ad:23:1e:49:74:2a:3a:b6:2d:46:8d:35:f4:9b:4f:a6:49:
         7a:d2:6a:20:c3:85:f2:a7:e6:3f:ca:20:76:ce:ba:c1:03:92:
         c7:4b:dc:2a:6d:d2:2a:bd:ac:22:a3:f8:de:bf:cf:1f:19:b0:
         fc:c0:e5:40:f2:1f:18:c8:77:0b:c3:a5:b6:bb:8a:43:83:a8:
         6f:16:14:a4:f1:cc:fc:87:14:03:d5:e7:22:91:67:95:7c:fc:
         7f:81:8d:4d:9d:22:e9:61:8a:3b:1a:b8:82:26:cd:e4:61:e8:
         16:c4:47:44:4e:2b:9c:88:39:4e:86:0c:6a:77:fd:4a:6d:76:
         de:99:ba:d7:ba:3d:9c:92:fb:7f:c9:49:1a:b8:69:a8:d9:b8:
         fc:8f:f7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:32 2024 by rpki-client on console-ams.rpki-client.org