Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/323830343a353538383a3a2f33322d3332203d3e20323637393430.roa
File:                     323830343a353538383a3a2f33322d3332203d3e20323637393430.roa (raw, json)
Hash identifier:          CUMXKI06k2y+ZqXSFTt1RPn34liXc0FcfqmoArxndpQ=
Subject key identifier:   D5:BC:1B:7E:1E:3F:C7:30:D2:5D:FC:89:BB:85:D7:A6:D6:78:15:CB
Certificate issuer:       /CN=EB171D41C3E8E0BE446E1CFEC87A2E905D659F88
Certificate serial:       6D7B1823D13E2D9981906DBA9E3DB514CBF09DA8
Authority key identifier: EB:17:1D:41:C3:E8:E0:BE:44:6E:1C:FE:C8:7A:2E:90:5D:65:9F:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/323830343a353538383a3a2f33322d3332203d3e20323637393430.roa
Signing time:             Wed 16 Oct 2024 21:53:57 +0000
ROA not before:           Wed 16 Oct 2024 21:48:57 +0000
ROA not after:            Wed 15 Oct 2025 21:53:57 +0000
asID:                     267940
IP address blocks:        2804:5588::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.crl
                          rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 20:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:7b:18:23:d1:3e:2d:99:81:90:6d:ba:9e:3d:b5:14:cb:f0:9d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB171D41C3E8E0BE446E1CFEC87A2E905D659F88
        Validity
            Not Before: Oct 16 21:48:57 2024 GMT
            Not After : Oct 15 21:53:57 2025 GMT
        Subject: CN=D5BC1B7E1E3FC730D25DFC89BB85D7A6D67815CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:86:6b:a3:2d:4b:6a:9b:95:1c:cf:12:f3:df:
                    05:bd:71:32:25:30:44:81:2b:11:c4:31:db:07:2f:
                    cc:27:83:da:e2:3e:81:2c:43:aa:f7:81:fa:e9:d0:
                    df:76:f7:1c:fc:a2:7e:9a:64:ad:69:47:30:5b:95:
                    d0:12:2b:09:e9:15:69:79:a9:de:7f:81:61:c3:e8:
                    8b:e9:8f:0c:84:5f:34:ca:43:33:f6:71:5f:f0:3c:
                    c6:c8:c6:b1:f4:5f:09:34:97:a5:a6:d2:ce:1c:65:
                    30:6e:a8:d8:5d:56:bf:e7:2e:a8:1c:3f:45:60:1d:
                    14:34:d4:90:14:6a:29:7d:e3:26:f8:5e:51:20:94:
                    e8:7e:2d:d3:f8:2d:04:15:19:88:f9:ad:86:46:dc:
                    89:bd:b3:16:99:68:0b:c2:b6:69:44:c3:84:52:89:
                    4a:57:f9:c1:3c:7f:a1:0a:95:8f:33:87:68:57:ca:
                    6e:a6:21:22:38:ef:c5:91:85:b4:c7:32:09:f4:cf:
                    1f:17:dc:06:3a:10:6d:fb:99:04:20:24:af:bb:41:
                    64:a9:ba:11:88:3e:0e:e3:06:8c:8e:4b:6f:f8:67:
                    62:a9:fe:e0:7e:7c:6e:eb:45:df:ce:45:19:d2:f0:
                    4f:e2:be:ad:ee:62:94:8c:fd:2c:7d:a3:3f:83:02:
                    58:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BC:1B:7E:1E:3F:C7:30:D2:5D:FC:89:BB:85:D7:A6:D6:78:15:CB
            X509v3 Authority Key Identifier:
                keyid:EB:17:1D:41:C3:E8:E0:BE:44:6E:1C:FE:C8:7A:2E:90:5D:65:9F:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/323830343a353538383a3a2f33322d3332203d3e20323637393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5588::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:56:12:2b:66:de:38:83:eb:2c:86:bf:a4:51:4e:12:73:6f:
         8b:5b:7b:c0:a7:61:db:df:04:1e:d5:1a:e7:5d:53:04:23:b1:
         77:44:ed:11:67:4e:1b:44:ab:4f:71:36:46:82:95:0c:ac:54:
         d9:d7:3d:be:6f:0d:e8:ee:c2:78:ce:8a:58:b2:33:0b:17:62:
         78:0c:fa:f2:cf:c7:48:26:87:39:46:90:de:76:a4:1a:f7:b6:
         6e:f7:90:14:00:a6:be:d5:dd:52:ba:33:c3:c4:fc:89:3b:bc:
         9c:1c:21:a2:9c:88:98:5c:8a:88:77:34:f2:3b:65:ea:1e:32:
         ff:d2:ee:d9:91:f6:1b:15:6c:b9:c4:be:12:0b:76:1b:6b:db:
         7e:7b:c3:a2:ca:a7:aa:95:3a:e6:4a:7c:93:b8:9c:39:ca:56:
         11:e6:c1:71:54:94:08:68:d7:d2:1b:82:0d:78:9f:4f:10:62:
         e5:b6:74:30:c3:b7:5d:04:d0:e0:e3:56:dd:d8:ab:0e:b8:a2:
         e7:33:e3:cc:07:de:16:9e:6f:64:22:e1:f9:32:57:cf:8b:82:
         8b:14:a1:3b:6d:d4:c1:a0:d9:b5:53:c6:a8:f6:c5:8b:7c:61:
         66:40:1b:de:cc:51:c3:4e:81:6e:ab:a6:07:b9:d4:a7:56:20:
         84:b8:5a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:47 2024 by rpki-client on console-fra.rpki-client.org