Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/323830343a366261303a383030303a3a2f33332d3333203d3e20323730343133.roa
File:                     323830343a366261303a383030303a3a2f33332d3333203d3e20323730343133.roa (raw, json)
Hash identifier:          h8f8Cn/LBSsI7DUYqV0VUMoTbAiwisDRHj6KFciP/Bg=
Subject key identifier:   59:C7:FA:45:D2:8D:A4:97:9B:6B:5F:7C:DE:62:00:B1:12:8E:E8:B2
Certificate issuer:       /CN=BE6164348043E6AA537C7ED74D50CC40298757FC
Certificate serial:       1D4E5C2380F3DECAEBC320EC83CE626545CCFE46
Authority key identifier: BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/323830343a366261303a383030303a3a2f33332d3333203d3e20323730343133.roa
Signing time:             Thu 03 Oct 2024 13:43:12 +0000
ROA not before:           Thu 03 Oct 2024 13:38:12 +0000
ROA not after:            Thu 02 Oct 2025 13:43:12 +0000
asID:                     270413
IP address blocks:        2804:6ba0:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl
                          rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4e:5c:23:80:f3:de:ca:eb:c3:20:ec:83:ce:62:65:45:cc:fe:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6164348043E6AA537C7ED74D50CC40298757FC
        Validity
            Not Before: Oct  3 13:38:12 2024 GMT
            Not After : Oct  2 13:43:12 2025 GMT
        Subject: CN=59C7FA45D28DA4979B6B5F7CDE6200B1128EE8B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:be:ac:87:9f:21:a4:49:5a:91:06:93:38:1b:
                    d7:6c:8a:cf:33:de:a7:99:db:fc:11:37:b1:6c:7e:
                    39:43:60:6b:7b:0d:5c:50:b9:40:3e:58:bb:32:af:
                    b2:39:da:81:34:50:b5:65:c0:37:a5:c0:d2:e5:84:
                    34:21:8a:c6:f4:80:7e:dd:ac:fa:37:50:54:c1:dd:
                    1d:bc:e5:05:14:1c:36:5c:11:e4:a4:db:19:59:ca:
                    7d:39:25:2b:73:b2:0d:d9:c1:1a:3b:bb:f8:60:d8:
                    9f:fd:33:36:17:74:16:cd:36:4e:c6:3f:b0:b2:8c:
                    9b:d8:20:2d:67:14:7c:23:1f:27:a2:60:2f:8f:56:
                    4e:13:fc:ef:7c:c6:da:0c:c9:58:ea:38:86:78:9a:
                    eb:98:4f:6f:4e:c1:5a:3f:0f:7a:53:12:49:81:d2:
                    9d:67:79:49:3b:05:d4:ca:f0:0d:30:28:06:b9:d6:
                    ac:5e:23:ba:33:15:c5:5d:e2:27:23:56:f9:0d:7e:
                    4e:78:f5:f7:2d:26:31:3c:1f:eb:6e:63:08:cd:17:
                    47:cd:6f:54:09:c6:41:cb:f7:b3:e9:0a:03:b1:fb:
                    66:2a:2e:bc:7d:b7:75:12:4c:9b:a8:ad:4a:77:47:
                    77:10:39:b7:00:c9:bc:47:24:58:c1:05:ed:77:08:
                    f6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C7:FA:45:D2:8D:A4:97:9B:6B:5F:7C:DE:62:00:B1:12:8E:E8:B2
            X509v3 Authority Key Identifier:
                keyid:BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/323830343a366261303a383030303a3a2f33332d3333203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ba0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         60:c1:7f:e4:e9:9c:49:0f:b5:f3:ae:20:19:bf:1a:d8:53:06:
         0a:ec:04:0b:94:ad:78:f6:44:f5:03:b6:39:40:6c:1e:9c:5f:
         d7:19:8c:01:de:78:17:f8:af:76:f5:39:71:60:31:e6:b3:f3:
         f3:75:11:b0:39:cb:8e:b5:61:ad:fe:5d:17:00:67:ee:64:7a:
         9c:37:1d:09:5e:79:61:ff:65:f9:c6:d8:b3:b8:dd:91:21:c6:
         6b:b8:3c:59:64:a9:d3:62:71:e6:2f:bf:7f:10:6d:14:de:6d:
         34:81:de:1f:d2:d9:1e:b9:33:7a:55:6e:e4:0d:f7:6b:21:fe:
         ac:71:39:a8:98:4e:f8:c6:ef:07:cd:a7:58:fc:16:a4:1d:4c:
         ac:49:7d:85:f6:3c:14:e1:da:93:6a:85:79:a9:67:2d:5c:17:
         a1:2f:0e:85:a5:07:11:f4:42:d3:5a:15:28:21:30:a4:ba:a2:
         46:7a:74:53:b0:59:da:60:b2:9b:70:ff:04:61:83:ce:a2:bd:
         a7:a4:05:02:9f:f3:6f:0b:6b:52:9b:99:47:be:b4:76:1e:ee:
         c1:4c:c9:f5:08:96:4d:a4:8f:f0:3c:b5:7c:b4:f8:0d:7e:7a:
         40:06:a9:f9:8d:cc:18:ae:97:64:96:c6:bc:2c:e0:53:fd:17:
         d9:33:67:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:16 2024 by rpki-client on console-fra.rpki-client.org