Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/323830343a366261303a343038303a3a2f34322d3432203d3e20323730343133.roa
File:                     323830343a366261303a343038303a3a2f34322d3432203d3e20323730343133.roa (raw, json)
Hash identifier:          3d7wfKVZe8kzgG+aUioRsrJegiNi3ya9r5FCdQVZaFM=
Subject key identifier:   F0:27:8E:8C:55:F5:68:2A:12:89:11:0C:DB:84:4E:25:3D:CA:EB:0C
Certificate issuer:       /CN=BE6164348043E6AA537C7ED74D50CC40298757FC
Certificate serial:       6D253A4574503B083EB3781A45DF473CBCCCD29B
Authority key identifier: BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/323830343a366261303a343038303a3a2f34322d3432203d3e20323730343133.roa
Signing time:             Wed 07 Aug 2024 14:52:31 +0000
ROA not before:           Wed 07 Aug 2024 14:47:31 +0000
ROA not after:            Wed 06 Aug 2025 14:52:31 +0000
asID:                     270413
IP address blocks:        2804:6ba0:4080::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl
                          rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:25:3a:45:74:50:3b:08:3e:b3:78:1a:45:df:47:3c:bc:cc:d2:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6164348043E6AA537C7ED74D50CC40298757FC
        Validity
            Not Before: Aug  7 14:47:31 2024 GMT
            Not After : Aug  6 14:52:31 2025 GMT
        Subject: CN=F0278E8C55F5682A1289110CDB844E253DCAEB0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b0:83:52:f3:71:cd:f6:97:5d:96:b4:34:3a:
                    02:11:2e:22:59:d1:a9:d8:b9:24:72:38:51:0a:fd:
                    8a:88:55:91:3a:1d:2a:c7:e6:96:ee:45:af:9a:23:
                    4d:bd:79:92:5d:90:d7:18:7a:22:27:25:c7:aa:13:
                    a2:5a:53:d1:ae:f8:7d:f6:d0:d1:5f:a1:74:7f:51:
                    c7:bd:07:82:73:39:f5:7e:42:e1:1b:c5:5b:cb:ea:
                    3f:c3:38:28:07:1e:09:ff:b1:b2:2c:8a:d6:5d:1f:
                    23:bf:1d:86:62:4e:e3:89:f5:69:dc:e2:0e:6a:94:
                    c7:ec:7c:53:f2:46:2b:b5:6b:8d:5d:d3:18:c3:6c:
                    34:8f:7c:1d:8f:1c:8f:a2:fb:fe:10:a1:c7:80:8b:
                    16:d8:4d:c9:98:39:f6:48:46:e2:b0:05:57:84:75:
                    bc:37:6e:7c:d8:20:a6:50:6c:d2:00:0c:87:cb:70:
                    a1:24:4f:0a:3b:25:4f:bb:36:cc:c3:4a:44:b7:64:
                    f6:89:3f:6f:9b:d6:45:c9:04:7a:c2:8f:10:a8:91:
                    da:e7:00:a4:0f:8e:ab:40:a1:60:d3:97:e5:20:47:
                    15:ec:60:e1:49:54:cf:56:77:73:57:d2:cb:63:c4:
                    90:bb:fc:4e:13:8b:34:dd:f3:a3:34:bc:c2:fb:4e:
                    4e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:27:8E:8C:55:F5:68:2A:12:89:11:0C:DB:84:4E:25:3D:CA:EB:0C
            X509v3 Authority Key Identifier:
                keyid:BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/323830343a366261303a343038303a3a2f34322d3432203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ba0:4080::/42

    Signature Algorithm: sha256WithRSAEncryption
         80:29:97:62:a9:d9:58:89:6a:1c:62:e9:f2:e8:4f:ef:a1:4e:
         d2:8a:6c:e8:97:7c:c4:bf:b0:f4:5e:87:45:a7:a0:5d:a0:7c:
         e3:8d:ca:4d:c4:1f:3f:29:09:ac:b9:21:58:1c:2b:bc:1d:5e:
         fe:80:28:14:bf:4d:b3:f6:33:7c:08:70:ca:46:f8:d8:b3:16:
         2a:8b:e3:9a:a3:c6:cf:59:7b:af:2c:90:00:81:96:44:21:0b:
         e1:f6:43:c3:2b:0b:5d:e8:d0:0d:34:50:04:0e:f0:52:b8:0f:
         9a:1f:f9:48:8f:51:04:81:42:d3:26:a5:33:8e:71:56:77:17:
         f0:8d:bd:68:21:20:0f:00:41:5b:f7:70:86:09:26:87:73:1d:
         86:57:7f:ef:9e:3d:90:d0:5c:d5:c0:af:94:ac:85:4c:c0:4a:
         e7:9c:e8:55:12:9a:29:90:d7:a9:56:30:61:e0:a4:8c:7b:38:
         3b:64:a0:e5:2d:70:08:25:80:ec:5b:05:f5:ab:63:bf:9a:f7:
         c6:ed:4a:93:d5:23:ee:d5:96:17:b5:70:f1:51:4c:5f:20:1d:
         22:84:b8:79:60:fb:c7:a4:c5:2c:50:63:db:3d:f5:3b:ec:65:
         5c:23:0d:ff:20:7c:d5:cf:7b:68:59:b9:3e:85:f4:d9:1a:37:
         7f:28:ea:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:18 2024 by rpki-client on console-ams.rpki-client.org