Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/323830343a373531633a3a2f33322d3438203d3e20323731303234.roa
File:                     323830343a373531633a3a2f33322d3438203d3e20323731303234.roa (raw, json)
Hash identifier:          V6ltBgG4BADzuOh2UN/QU7i+pT5XLaMY1y48BaewnKk=
Subject key identifier:   2F:F8:B4:94:CA:E6:37:71:F0:BD:09:33:59:BD:2A:EB:DC:39:A8:E8
Certificate issuer:       /CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF
Certificate serial:       3D17963DD49750D0E9AA52EB10BB142091037DDD
Authority key identifier: 66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/323830343a373531633a3a2f33322d3438203d3e20323731303234.roa
Signing time:             Sat 07 Sep 2024 14:39:33 +0000
ROA not before:           Sat 07 Sep 2024 14:34:33 +0000
ROA not after:            Sat 06 Sep 2025 14:39:33 +0000
asID:                     271024
IP address blocks:        2804:751c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl
                          rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:15:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:17:96:3d:d4:97:50:d0:e9:aa:52:eb:10:bb:14:20:91:03:7d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF
        Validity
            Not Before: Sep  7 14:34:33 2024 GMT
            Not After : Sep  6 14:39:33 2025 GMT
        Subject: CN=2FF8B494CAE63771F0BD093359BD2AEBDC39A8E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ce:aa:46:37:63:ea:62:15:7f:b9:73:53:16:
                    31:21:ed:f8:6d:17:60:1c:e1:99:cc:39:02:e3:5f:
                    c2:fe:a4:43:0b:59:13:f4:2c:a0:a5:05:20:13:56:
                    16:95:e6:52:a2:73:9e:62:c7:09:fa:a7:f1:12:6c:
                    b9:c6:11:56:1a:df:67:0f:f8:df:50:3a:11:10:e5:
                    0f:12:1d:04:c3:6b:69:79:7d:e3:c5:cf:93:0b:d9:
                    a0:8d:f3:d1:bd:57:e6:f5:45:d9:d7:38:18:14:8d:
                    81:47:e5:52:0e:eb:5a:48:05:52:5a:9e:51:88:e2:
                    82:58:05:85:e9:36:75:ac:38:51:0c:55:89:b8:42:
                    73:4f:a0:b6:70:f7:b8:4a:d9:83:93:59:a0:06:5a:
                    35:7f:2b:bb:72:cc:4f:c8:4e:22:76:a8:d4:16:b7:
                    7f:bd:26:cf:1a:ed:ff:9a:73:a9:ba:4d:38:aa:63:
                    f3:05:be:9e:e4:52:88:b6:60:17:f6:8a:84:5c:1a:
                    08:f4:41:3f:28:20:66:f8:28:ac:2a:a2:1e:60:db:
                    0d:10:0b:46:ea:85:d1:5b:bb:05:e3:19:ef:17:ef:
                    fb:fd:69:2a:c7:d0:d6:85:c9:1a:f0:7b:93:43:a1:
                    ee:1e:9d:21:b2:6a:de:44:1e:8a:03:8f:78:7d:f7:
                    23:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F8:B4:94:CA:E6:37:71:F0:BD:09:33:59:BD:2A:EB:DC:39:A8:E8
            X509v3 Authority Key Identifier:
                keyid:66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/323830343a373531633a3a2f33322d3438203d3e20323731303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:751c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:3d:7d:62:db:a1:22:e5:c5:03:5c:9c:1c:55:d6:09:da:a5:
         4c:b9:b8:f5:06:79:89:4f:d9:18:f1:80:66:db:88:85:16:52:
         9a:d9:e3:8a:f6:13:ae:c8:16:ec:d1:47:aa:28:fe:4f:07:88:
         77:8e:d6:5c:22:81:ad:6a:dc:bf:16:b3:8e:3b:d5:d9:e8:bf:
         9b:09:f4:dd:a2:63:6c:f3:10:f5:d9:9d:66:5b:55:c2:bf:ed:
         98:0f:5e:e3:69:eb:23:2f:cd:e2:f9:8b:af:ff:df:87:c7:e0:
         bc:c3:cc:3e:f4:03:55:ed:fb:ab:5f:1e:73:47:5f:9c:01:c4:
         8a:fa:e2:65:4b:80:2a:21:81:81:f6:b7:6c:38:ed:3f:41:18:
         b7:b3:26:d4:87:a0:53:58:63:cd:ed:ad:b7:ff:02:2c:1b:4a:
         2b:5c:4a:5a:75:de:10:a9:a7:8a:33:2f:36:8c:dd:71:c1:7a:
         64:9b:12:a0:3b:5e:32:c1:64:7a:97:9c:01:07:52:e1:70:ba:
         5d:92:80:36:7f:9c:46:63:f4:c7:5c:95:45:8e:09:72:d8:35:
         82:b0:41:3c:03:a3:0b:61:fd:53:5c:60:e6:c2:3d:c4:4c:60:
         98:8a:81:0f:86:89:69:85:10:e3:9b:bf:61:0b:93:53:7c:08:
         fe:27:b4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:45 2024 by rpki-client on console-fra.rpki-client.org