Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/323830343a366261303a3a2f33342d3334203d3e20323730343133.roa
File:                     323830343a366261303a3a2f33342d3334203d3e20323730343133.roa (raw, json)
Hash identifier:          4TIGMKYyONvasHoHNTr0mq4PRL6MLBQg903J9+GTBE8=
Subject key identifier:   2B:AC:5B:D6:8A:D1:E9:99:A8:F3:3C:F2:70:45:25:BC:BC:20:96:92
Certificate issuer:       /CN=BE6164348043E6AA537C7ED74D50CC40298757FC
Certificate serial:       1F3DD4D398F207C67D9D9A48F3359E95D7218432
Authority key identifier: BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/323830343a366261303a3a2f33342d3334203d3e20323730343133.roa
Signing time:             Thu 03 Oct 2024 13:43:23 +0000
ROA not before:           Thu 03 Oct 2024 13:38:23 +0000
ROA not after:            Thu 02 Oct 2025 13:43:23 +0000
asID:                     270413
IP address blocks:        2804:6ba0::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl
                          rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:3d:d4:d3:98:f2:07:c6:7d:9d:9a:48:f3:35:9e:95:d7:21:84:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6164348043E6AA537C7ED74D50CC40298757FC
        Validity
            Not Before: Oct  3 13:38:23 2024 GMT
            Not After : Oct  2 13:43:23 2025 GMT
        Subject: CN=2BAC5BD68AD1E999A8F33CF2704525BCBC209692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5a:4d:42:88:ed:ca:c8:d3:b3:18:a9:15:4f:
                    ba:45:a2:4b:34:52:e2:57:c8:93:f4:9b:ea:a3:ac:
                    3a:fb:74:6e:3e:12:a9:ac:90:b3:00:ff:3c:89:90:
                    22:56:1f:36:32:26:37:83:77:c8:0a:08:52:07:56:
                    f1:af:cb:c1:da:75:43:a0:57:dc:ef:a5:e7:08:69:
                    7d:b0:f9:72:f9:db:85:0e:6d:a3:b3:c4:79:17:cb:
                    22:d8:9f:3c:cb:8f:ca:ed:21:ed:c4:71:d0:40:15:
                    99:4c:f5:7a:00:62:1c:eb:1b:3d:46:62:15:31:e7:
                    db:7f:5e:7e:9a:8c:5f:0c:1e:23:21:a6:42:01:16:
                    3d:cf:01:5e:87:89:21:db:23:ad:ad:e7:96:a7:1c:
                    10:82:11:f6:0d:b5:37:82:fe:39:8b:0a:de:cd:47:
                    83:c0:3a:c3:ce:50:f6:11:e8:11:5f:81:6d:27:41:
                    d2:0a:ac:93:0f:15:e9:43:eb:89:cc:40:16:1c:ca:
                    d0:53:69:44:4b:0d:04:12:05:18:7b:3f:b0:88:2a:
                    54:0d:2e:8a:31:8a:b6:84:d4:73:5a:92:4c:3a:cd:
                    a9:e8:e9:cd:67:1f:b3:e8:34:6f:ff:98:df:ed:47:
                    79:ef:81:c0:1d:88:09:28:c0:a4:fd:0e:f1:96:89:
                    ed:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AC:5B:D6:8A:D1:E9:99:A8:F3:3C:F2:70:45:25:BC:BC:20:96:92
            X509v3 Authority Key Identifier:
                keyid:BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/323830343a366261303a3a2f33342d3334203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ba0::/34

    Signature Algorithm: sha256WithRSAEncryption
         09:cb:82:93:aa:ac:21:81:4b:45:98:85:fd:f3:bc:d5:4a:a9:
         e2:cd:37:9a:11:c8:39:3a:f9:36:e1:b9:78:3b:73:6c:ef:70:
         68:cb:08:bf:22:f2:cb:92:06:f7:9d:7b:54:22:61:5e:5d:44:
         64:46:b9:39:bc:70:d7:1c:14:3a:54:9c:fb:0f:f9:73:4f:f6:
         48:13:e2:f8:d5:fa:50:68:fe:69:13:5a:74:2b:cb:c9:24:5e:
         9b:1b:6c:fa:5c:86:d7:38:4f:5c:59:9e:2d:0a:d7:3e:dd:eb:
         3a:85:b6:7d:d1:9f:16:3c:9a:04:21:22:5b:36:3b:91:39:86:
         fd:5b:45:35:c3:6d:1f:19:44:51:c6:b9:7e:9d:ab:f8:eb:04:
         74:93:37:80:1d:cf:20:b9:88:06:f3:e0:1e:ef:02:c7:53:68:
         e6:22:16:bf:76:e9:23:e5:a2:01:fc:8a:51:bf:3f:38:f5:cb:
         0e:a1:ca:c4:31:44:a9:18:d5:91:b6:6f:a1:e3:29:6b:21:8d:
         87:53:e7:f8:a0:2c:5d:18:16:2d:90:e8:59:1b:9a:ad:07:c1:
         d7:d2:4f:5a:cb:20:06:65:e6:89:02:df:21:68:a0:4d:83:5a:
         95:7e:3a:64:b7:8d:b5:00:33:b2:7f:94:f7:96:0e:3d:08:24:
         46:52:80:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:16 2024 by rpki-client on console-fra.rpki-client.org