Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/323830343a343363303a343030303a3a2f33342d3334203d3e20323637353838.roa
File:                     323830343a343363303a343030303a3a2f33342d3334203d3e20323637353838.roa (raw, json)
Hash identifier:          /Dn/mFzq8RIoWqu/zzXK7c38H13XpRstfRiO8KrH1PI=
Subject key identifier:   45:20:A4:EC:71:4E:3C:E1:3B:12:C3:67:63:13:F5:67:51:B2:F7:89
Certificate issuer:       /CN=EB27E991207232DB9C6D847F06224E25D3606469
Certificate serial:       1BA6DDAAC788AAE67ABC7EF0CA276B323E94650C
Authority key identifier: EB:27:E9:91:20:72:32:DB:9C:6D:84:7F:06:22:4E:25:D3:60:64:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB27E991207232DB9C6D847F06224E25D3606469.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/323830343a343363303a343030303a3a2f33342d3334203d3e20323637353838.roa
Signing time:             Fri 12 Jul 2024 15:13:06 +0000
ROA not before:           Fri 12 Jul 2024 15:08:06 +0000
ROA not after:            Fri 11 Jul 2025 15:13:06 +0000
asID:                     267588
IP address blocks:        2804:43c0:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/EB27E991207232DB9C6D847F06224E25D3606469.crl
                          rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/EB27E991207232DB9C6D847F06224E25D3606469.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB27E991207232DB9C6D847F06224E25D3606469.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a6:dd:aa:c7:88:aa:e6:7a:bc:7e:f0:ca:27:6b:32:3e:94:65:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB27E991207232DB9C6D847F06224E25D3606469
        Validity
            Not Before: Jul 12 15:08:06 2024 GMT
            Not After : Jul 11 15:13:06 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1a:0e:5e:50:ad:31:ec:6b:e1:92:a1:36:79:
                    ad:01:5d:94:8b:5b:8b:fa:e0:59:e9:af:18:d9:6f:
                    e7:66:97:96:08:b3:63:bd:95:1d:3b:68:00:02:21:
                    ec:d6:95:b0:14:41:ab:9b:74:f1:1b:77:24:08:4d:
                    b6:92:fa:72:33:78:d5:4c:7a:d0:94:16:12:d4:0c:
                    a2:6c:63:d4:91:cf:f7:1d:b8:2b:2f:79:e2:7b:1b:
                    3b:22:10:6f:d9:3e:33:46:36:9b:ed:61:aa:a2:02:
                    24:2e:d0:2e:b7:24:29:29:0d:57:06:63:1c:e3:6c:
                    38:13:70:1a:70:be:48:d5:4b:1e:c3:ae:ee:a3:62:
                    c0:f7:23:f9:2e:26:be:5e:b7:3c:91:45:18:ee:d7:
                    61:99:30:19:f8:4f:61:76:15:20:8d:68:d6:2d:ef:
                    ac:fa:da:19:0a:c9:d0:0c:6c:59:06:11:da:27:f1:
                    b3:8e:b6:02:8a:fb:26:7e:61:43:0f:7b:6a:f0:ac:
                    f3:34:52:09:be:5f:70:8f:31:84:54:dc:ca:05:e9:
                    92:ef:82:89:4b:66:ea:75:7c:2c:56:c7:a6:68:4f:
                    6d:f4:5d:84:41:85:95:79:84:b1:5e:27:c8:b9:b0:
                    34:bd:04:4d:a5:9c:84:71:c3:15:a7:2b:22:cf:90:
                    81:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:20:A4:EC:71:4E:3C:E1:3B:12:C3:67:63:13:F5:67:51:B2:F7:89
            X509v3 Authority Key Identifier:
                keyid:EB:27:E9:91:20:72:32:DB:9C:6D:84:7F:06:22:4E:25:D3:60:64:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/EB27E991207232DB9C6D847F06224E25D3606469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB27E991207232DB9C6D847F06224E25D3606469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/323830343a343363303a343030303a3a2f33342d3334203d3e20323637353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43c0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c2:59:58:2e:10:96:a6:67:a5:e1:b9:ba:b6:c7:c3:58:da:d3:
         26:73:02:69:db:30:79:97:1a:fa:da:33:42:89:28:22:d3:75:
         2e:7a:d5:e2:42:95:af:1f:1b:1b:9e:e7:dd:cc:7c:f6:e3:59:
         71:16:e4:b5:84:32:b1:42:4c:2d:56:1e:63:83:a5:96:44:14:
         22:b8:ba:68:fb:f3:53:2c:a4:11:ef:e4:c1:98:47:6d:fe:1a:
         ea:83:81:b2:d7:9f:02:da:de:24:06:c0:f7:99:62:26:f8:72:
         d7:51:9f:42:33:e7:e3:e4:da:8b:2c:2c:28:b8:5c:4c:da:d2:
         f1:01:4c:90:9f:68:d4:44:5c:89:1d:3b:7c:9a:df:40:0d:b3:
         d8:43:1a:74:55:a5:6a:57:21:2f:a5:b5:5d:19:d9:e3:de:88:
         92:ab:f2:61:07:4a:43:a6:b3:dd:c0:9e:d8:03:59:8a:23:34:
         f1:39:2e:d6:9a:65:a6:ac:29:b7:9b:36:3d:96:5d:9d:2e:b1:
         c5:c2:e7:10:25:22:a8:d6:d6:67:a4:45:6a:4a:d9:32:9b:08:
         06:6b:7f:07:1b:0c:57:7f:e8:3a:66:d3:2a:e5:4b:0f:da:a4:
         5e:62:dd:f9:16:c6:6a:a1:0f:85:73:2d:71:24:0f:41:e5:8c:
         46:80:f4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:34 2024 by rpki-client on console-ams.rpki-client.org