Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/323830343a373030343a36313a3a2f34382d3438203d3e203631363032.roa
File:                     323830343a373030343a36313a3a2f34382d3438203d3e203631363032.roa (raw, json)
Hash identifier:          7KsYrkratGxa7Z8jxvuROU3AwS9IX4ijFzyUK3zPAFY=
Subject key identifier:   0C:34:B2:18:27:74:DF:ED:7E:11:AF:29:E3:03:E1:1E:D0:96:A3:91
Certificate issuer:       /CN=B87CE29C7C1D5FA3C283B0AE0AD75B5364556618
Certificate serial:       21FD44A333BF43F0A02659990D7CD6FFB2FFC8FC
Authority key identifier: B8:7C:E2:9C:7C:1D:5F:A3:C2:83:B0:AE:0A:D7:5B:53:64:55:66:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/323830343a373030343a36313a3a2f34382d3438203d3e203631363032.roa
Signing time:             Thu 04 Jul 2024 07:58:30 +0000
ROA not before:           Thu 04 Jul 2024 07:53:30 +0000
ROA not after:            Thu 03 Jul 2025 07:58:30 +0000
asID:                     61602
IP address blocks:        2804:7004:61::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:fd:44:a3:33:bf:43:f0:a0:26:59:99:0d:7c:d6:ff:b2:ff:c8:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87CE29C7C1D5FA3C283B0AE0AD75B5364556618
        Validity
            Not Before: Jul  4 07:53:30 2024 GMT
            Not After : Jul  3 07:58:30 2025 GMT
        Subject: CN=0C34B2182774DFED7E11AF29E303E11ED096A391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b4:e6:9c:11:88:b7:e4:99:89:3c:e3:5d:9b:
                    6d:bc:da:9a:88:40:56:f5:5f:a0:2e:22:37:87:4a:
                    a5:d2:58:83:7d:2c:6b:af:81:c0:a9:e4:b1:d3:fb:
                    46:5c:f9:80:24:c9:5f:32:90:b2:87:ff:6d:0f:74:
                    3f:39:6d:35:a2:5e:d3:35:07:f8:28:b3:42:a4:5a:
                    76:a4:69:17:17:d9:58:5a:92:db:79:1e:dc:4b:61:
                    c4:76:9d:5f:dd:9a:a4:e6:75:71:69:0f:72:49:f1:
                    2e:46:4a:77:13:89:41:94:5a:cb:50:51:72:12:12:
                    5d:56:b4:fb:0d:5f:b0:09:02:16:b7:da:15:4e:77:
                    f7:61:f5:a8:49:8d:b3:ee:9c:a8:08:9e:88:8e:a3:
                    64:5d:20:42:8d:30:59:5e:ba:a5:19:23:61:62:da:
                    70:2f:04:18:ab:aa:4d:2e:0d:ae:1b:68:3f:e6:0f:
                    9f:67:38:a7:38:13:3f:41:c7:62:77:77:83:fb:c4:
                    43:f7:fa:a4:2e:46:69:22:ee:e8:e7:19:ed:bb:d5:
                    48:e9:a5:16:4d:28:89:98:54:14:e7:0c:5b:5d:40:
                    e3:4c:12:d2:54:19:25:ae:cd:43:c0:b7:5e:1b:00:
                    9c:18:5c:d3:ae:dc:ed:aa:73:31:dc:4e:32:c7:23:
                    cd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:34:B2:18:27:74:DF:ED:7E:11:AF:29:E3:03:E1:1E:D0:96:A3:91
            X509v3 Authority Key Identifier:
                keyid:B8:7C:E2:9C:7C:1D:5F:A3:C2:83:B0:AE:0A:D7:5B:53:64:55:66:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/323830343a373030343a36313a3a2f34382d3438203d3e203631363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7004:61::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:3f:46:9d:dc:74:ad:ca:cb:33:6a:17:67:81:fb:d4:1a:2c:
         04:61:00:e7:70:b0:c9:96:c9:fc:0b:3e:b9:4b:28:98:fc:45:
         a9:ac:c9:58:77:03:5d:25:e1:2f:0a:b3:49:6d:05:2d:ee:c8:
         72:42:0a:f7:71:a4:b4:5a:3a:d6:ec:64:ed:44:5a:fe:d3:2b:
         f6:d0:b7:ef:75:aa:f3:14:72:e7:ac:b1:96:45:f1:c4:12:17:
         99:bf:e0:1c:fe:19:b3:f4:60:97:0a:ae:15:32:b4:e0:ad:96:
         ed:1c:66:16:8e:75:11:f8:68:aa:f1:22:cf:46:47:1d:72:73:
         f5:50:8b:27:bc:72:74:11:63:4a:c1:e9:be:dc:cb:09:cf:24:
         ae:4e:fb:16:f2:35:0a:1f:19:ef:d6:cc:eb:19:ef:d0:6e:74:
         74:69:a9:36:80:78:e2:84:d6:03:70:3b:f5:89:d9:0b:a0:f5:
         4c:f2:3d:39:07:56:fc:78:5b:14:2e:4a:0f:55:65:fa:74:16:
         06:e4:71:02:42:5b:7f:e9:f7:75:62:9b:fb:e3:44:63:72:60:
         5d:fd:e2:af:62:20:d9:fa:11:ce:2b:d4:0b:3d:73:ee:f3:81:
         71:bf:fe:27:ce:8b:00:20:17:d5:44:7c:9d:29:78:1a:1b:9c:
         a7:b3:14:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:07 2024 by rpki-client on console-fra.rpki-client.org