Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/323830343a386631383a3a2f33332d3333203d3e20323733343637.roa
File:                     323830343a386631383a3a2f33332d3333203d3e20323733343637.roa (raw, json)
Hash identifier:          J7SOd+mFYIJOCveOsN99w4N8sAc61v/dfYXO8qdiMsk=
Subject key identifier:   12:7C:DD:6A:9E:5C:7E:6A:C2:C9:4D:F6:9E:60:C7:E2:A5:3A:1F:01
Certificate issuer:       /CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
Certificate serial:       5505BEF6956A1E4F324FDB17FAB64FFA42CE29DF
Authority key identifier: E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/323830343a386631383a3a2f33332d3333203d3e20323733343637.roa
Signing time:             Tue 12 Nov 2024 14:06:39 +0000
ROA not before:           Tue 12 Nov 2024 14:01:39 +0000
ROA not after:            Tue 11 Nov 2025 14:06:39 +0000
asID:                     273467
IP address blocks:        2804:8f18::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl
                          rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:05:be:f6:95:6a:1e:4f:32:4f:db:17:fa:b6:4f:fa:42:ce:29:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
        Validity
            Not Before: Nov 12 14:01:39 2024 GMT
            Not After : Nov 11 14:06:39 2025 GMT
        Subject: CN=127CDD6A9E5C7E6AC2C94DF69E60C7E2A53A1F01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e1:15:d9:d5:35:d7:31:9c:fd:a3:1b:7a:3b:
                    25:cd:a2:b0:a0:24:8b:e0:54:da:39:57:5d:32:7a:
                    f3:02:cb:4c:37:80:03:91:2c:ad:00:dc:cd:be:4c:
                    21:14:72:d0:95:63:c0:0e:d3:23:6a:0e:3a:f2:51:
                    06:6b:a1:70:3f:7e:17:60:6e:9e:46:07:c8:49:6e:
                    02:65:b6:ed:be:df:75:ca:ab:89:a7:d7:08:72:d2:
                    f9:22:b5:17:59:e1:74:62:ee:67:fa:85:a4:12:6c:
                    a2:16:80:54:7f:50:33:ba:40:3f:9d:59:d5:38:c4:
                    1f:15:37:a0:1c:09:d8:3f:7b:c3:21:af:74:7c:97:
                    c3:b3:b3:bc:2e:d2:e7:87:5f:88:9e:81:5a:2c:42:
                    c1:a2:f8:fe:12:50:d9:2b:6f:46:02:73:b0:78:64:
                    67:a0:d9:e8:1b:31:75:11:28:c9:eb:9d:98:b1:ba:
                    b8:be:d5:21:fd:d7:a1:a3:1d:06:ca:38:a3:9b:0e:
                    1f:7d:63:e3:b9:07:e5:cf:d9:a6:78:e0:25:b7:d5:
                    55:ff:2a:cc:54:7e:f2:a0:87:d1:1c:9a:41:94:a2:
                    9b:1d:81:5f:3c:48:44:e4:d5:08:1e:79:81:b9:48:
                    a3:61:5a:b1:f7:59:30:8f:24:b0:06:42:de:67:4b:
                    1b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7C:DD:6A:9E:5C:7E:6A:C2:C9:4D:F6:9E:60:C7:E2:A5:3A:1F:01
            X509v3 Authority Key Identifier:
                keyid:E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/323830343a386631383a3a2f33332d3333203d3e20323733343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f18::/33

    Signature Algorithm: sha256WithRSAEncryption
         a0:a4:1e:1c:e9:e9:77:19:5f:1b:0b:e3:1a:b8:55:7d:23:88:
         79:26:08:96:b0:91:32:10:63:37:45:be:ec:71:44:4c:cf:3d:
         06:46:59:b9:e4:94:fa:a2:8f:59:85:78:e9:7f:d6:2d:2f:b7:
         18:05:80:35:0d:6f:43:af:6d:7c:6c:70:61:24:04:61:17:55:
         ff:0e:9d:4c:e7:9b:16:a0:79:03:aa:08:d2:07:5e:5b:77:b5:
         35:43:2f:da:73:f8:0d:87:2e:af:44:16:50:8d:4e:ac:07:49:
         f3:d6:e6:42:12:a8:02:d3:b2:04:7e:76:72:5f:16:5d:b6:27:
         2d:bf:22:d5:12:df:5e:d3:00:f3:e8:1e:a1:79:60:27:45:c7:
         cd:79:ee:1c:c9:d0:42:35:68:b7:5a:6d:df:a8:70:cf:77:24:
         be:b0:ff:fb:35:01:90:2d:9c:47:68:8d:90:a0:72:38:c9:d2:
         37:13:0c:7e:30:ba:15:6b:c6:94:fe:6e:ce:63:e8:f9:04:29:
         61:66:5a:20:b9:48:6f:86:8e:61:d3:ce:0e:24:bb:91:b0:12:
         04:87:61:47:93:5a:68:ab:54:99:12:1b:9e:00:c7:6e:50:40:
         7e:12:a3:5f:cf:aa:77:ca:95:bb:a9:59:96:07:c9:d0:db:8a:
         34:0e:c2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:48 2024 by rpki-client on console-fra.rpki-client.org