Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/323830343a363733343a3a2f33322d313238203d3e20323639363132.roa
File:                     323830343a363733343a3a2f33322d313238203d3e20323639363132.roa (raw, json)
Hash identifier:          pli9wLD/OITIt43fsf8dLX7eTO789RLRbLde5whUYZM=
Subject key identifier:   7C:45:BB:0B:04:35:FA:E0:55:4D:F1:06:8F:88:C7:B2:6D:0E:C3:76
Certificate issuer:       /CN=7930F5595D461706449AEC2E969F5BB9DFCE33AB
Certificate serial:       768A4B248CC3A99B45199D9963F8C62C0EE1AD70
Authority key identifier: 79:30:F5:59:5D:46:17:06:44:9A:EC:2E:96:9F:5B:B9:DF:CE:33:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7930F5595D461706449AEC2E969F5BB9DFCE33AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/323830343a363733343a3a2f33322d313238203d3e20323639363132.roa
Signing time:             Mon 16 Sep 2024 19:21:33 +0000
ROA not before:           Mon 16 Sep 2024 19:16:33 +0000
ROA not after:            Mon 15 Sep 2025 19:21:33 +0000
asID:                     269612
IP address blocks:        2804:6734::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/7930F5595D461706449AEC2E969F5BB9DFCE33AB.crl
                          rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/7930F5595D461706449AEC2E969F5BB9DFCE33AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7930F5595D461706449AEC2E969F5BB9DFCE33AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:8a:4b:24:8c:c3:a9:9b:45:19:9d:99:63:f8:c6:2c:0e:e1:ad:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7930F5595D461706449AEC2E969F5BB9DFCE33AB
        Validity
            Not Before: Sep 16 19:16:33 2024 GMT
            Not After : Sep 15 19:21:33 2025 GMT
        Subject: CN=7C45BB0B0435FAE0554DF1068F88C7B26D0EC376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:56:71:70:be:ac:09:6f:02:7f:e1:0d:8b:6d:
                    71:7d:e5:83:12:1f:79:eb:41:f3:cf:66:e8:d9:b7:
                    7f:7b:5d:6e:4f:49:31:14:ad:60:14:6a:6d:bb:a1:
                    89:3b:e7:fe:d6:7f:8d:0a:7b:b3:3a:2a:18:97:66:
                    62:ee:0a:c0:f6:5b:69:9a:04:7d:a5:f3:65:8e:d5:
                    7c:45:7d:26:ab:9f:58:21:a6:57:7b:44:25:f8:83:
                    ce:0d:5e:84:c9:04:9e:d7:2c:b5:4a:2b:7a:a1:26:
                    ba:12:8b:a7:a8:2c:3f:6a:93:2c:41:25:6e:58:4b:
                    73:e5:35:e4:65:39:e5:f3:3a:5a:30:a4:57:55:04:
                    9b:6d:f3:45:1e:e5:ad:2e:dc:46:51:a6:28:d8:d2:
                    1c:54:4d:ff:1b:59:3e:2e:6c:40:8e:f3:df:25:db:
                    30:d9:91:63:2d:9d:93:38:ee:74:2b:17:75:43:e5:
                    bc:bc:c8:ce:5d:7f:05:31:33:91:75:63:7f:96:ac:
                    7c:63:04:cc:15:6f:d5:47:c2:5b:74:69:09:d1:99:
                    96:fd:e7:3a:ba:2a:54:c7:2b:43:6e:2e:8c:39:d4:
                    99:a0:4d:d7:2a:eb:3c:55:42:0e:d5:96:ec:65:4f:
                    96:f7:aa:4c:b2:99:47:c5:ec:c2:b3:54:a6:47:97:
                    9f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:45:BB:0B:04:35:FA:E0:55:4D:F1:06:8F:88:C7:B2:6D:0E:C3:76
            X509v3 Authority Key Identifier:
                keyid:79:30:F5:59:5D:46:17:06:44:9A:EC:2E:96:9F:5B:B9:DF:CE:33:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/7930F5595D461706449AEC2E969F5BB9DFCE33AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7930F5595D461706449AEC2E969F5BB9DFCE33AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/323830343a363733343a3a2f33322d313238203d3e20323639363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6734::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:03:f4:62:e9:b0:66:46:31:2d:23:ab:65:62:92:e2:13:f3:
         dd:63:ec:e2:17:dd:0a:55:b8:d3:4d:26:e5:c1:22:f4:42:0f:
         57:90:f3:5c:f5:7e:cc:8e:03:fc:e0:7f:c0:be:ea:fb:1b:68:
         72:d1:56:28:26:72:57:f5:09:bd:b9:f0:e3:5f:7f:ea:81:7f:
         65:6b:e2:e5:7f:ee:d8:83:e0:cb:b4:4f:1f:c1:d4:22:e4:dd:
         c8:da:ba:ec:69:92:45:2d:96:53:70:0f:54:ca:31:7d:2c:ce:
         07:ee:23:e1:c9:91:97:55:16:c3:8f:c8:42:2d:0d:39:9e:e6:
         97:4f:9f:d7:08:8a:2d:bb:31:e8:85:65:b0:4d:cb:cf:c4:06:
         ca:39:f8:40:ec:2f:25:35:08:47:7b:00:fb:f0:ca:d5:2d:a5:
         b7:74:71:fb:4c:56:3a:eb:6b:ee:68:17:fa:2a:e5:b2:2d:99:
         49:c5:36:89:9b:9d:10:53:d5:7b:41:ac:5b:2e:45:d9:ac:0f:
         62:a7:77:54:d0:15:61:73:06:86:40:0a:b0:31:e2:b2:6f:31:
         38:a3:13:07:bc:01:97:42:b4:ff:cb:88:60:a7:6f:a2:ae:2b:
         df:5e:94:0e:29:9b:24:a2:7e:cc:99:19:81:a3:7b:4d:fe:7a:
         67:0c:92:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:13 2024 by rpki-client on console-ams.rpki-client.org