Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a61613a3a2f34382d3530203d3e20323637333239.roa
File:                     323830343a346263383a61613a3a2f34382d3530203d3e20323637333239.roa (raw, json)
Hash identifier:          vk06WLrejgKLaN9cskLO1tuM5MBx/zwr6zxeObP2Q1E=
Subject key identifier:   B6:1E:07:E5:72:86:EA:B1:FC:74:B9:41:79:A1:81:56:8B:13:B5:8F
Certificate issuer:       /CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
Certificate serial:       3AAB5DBEF3D445B10D818191341189B8ADD58A55
Authority key identifier: 8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a61613a3a2f34382d3530203d3e20323637333239.roa
Signing time:             Thu 04 Apr 2024 04:01:09 +0000
ROA not before:           Thu 04 Apr 2024 03:56:09 +0000
ROA not after:            Thu 03 Apr 2025 04:01:09 +0000
asID:                     267329
IP address blocks:        2804:4bc8:aa::/48 maxlen: 50

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.crl
                          rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 22:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ab:5d:be:f3:d4:45:b1:0d:81:81:91:34:11:89:b8:ad:d5:8a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
        Validity
            Not Before: Apr  4 03:56:09 2024 GMT
            Not After : Apr  3 04:01:09 2025 GMT
        Subject: CN=B61E07E57286EAB1FC74B94179A181568B13B58F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6f:46:41:06:70:9d:f6:4a:ce:7b:e8:34:63:
                    4d:dd:0e:6f:ad:65:cc:ce:d0:61:6d:b8:32:1d:2e:
                    57:14:cb:b6:27:33:05:22:58:d6:e3:6d:54:39:be:
                    ba:83:eb:7d:e9:0b:e3:94:e8:cc:58:89:6f:5c:54:
                    b9:fa:99:75:8f:39:93:a4:1e:65:92:c0:fa:6f:c6:
                    13:f4:3a:83:8a:f1:77:67:46:d3:73:f5:0c:ec:d2:
                    45:06:b6:89:65:0d:74:5d:21:00:f9:40:25:ae:0a:
                    14:1c:84:98:98:06:df:c8:16:d3:9a:12:8d:3b:88:
                    5f:9c:fa:29:1f:16:58:f9:0f:9b:70:61:5d:b0:2c:
                    4b:e1:7c:51:ba:6c:1c:0c:9e:d5:80:c1:03:39:ab:
                    cd:c8:15:76:e6:72:80:b1:38:22:df:f2:06:d5:d0:
                    30:47:54:56:28:78:12:65:99:a7:18:a6:0f:d5:16:
                    85:7e:6e:23:8b:9b:00:bf:6b:c3:ba:96:4b:46:de:
                    3d:e4:91:21:3b:b8:49:e8:14:97:45:05:65:2d:de:
                    6f:ba:ff:fe:63:2a:5c:0b:33:60:bc:32:b6:9c:9b:
                    a1:20:b3:22:63:17:36:07:1c:e9:af:91:95:44:d8:
                    43:5d:78:a4:c8:df:0a:ff:ac:12:ed:54:c7:8c:db:
                    4f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1E:07:E5:72:86:EA:B1:FC:74:B9:41:79:A1:81:56:8B:13:B5:8F
            X509v3 Authority Key Identifier:
                keyid:8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a61613a3a2f34382d3530203d3e20323637333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc8:aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:6b:fb:cd:af:6a:f1:48:87:1b:e3:4a:17:10:fc:db:d4:e8:
         9d:7c:7a:f3:27:5f:8b:9d:60:a0:08:bd:2a:88:c5:21:f5:00:
         98:f4:53:09:b9:9a:0d:43:2f:27:62:38:58:b8:6c:72:3e:15:
         17:fc:63:33:f1:88:0b:50:87:44:44:f4:54:0f:63:6f:11:c6:
         77:62:ae:53:02:e8:63:20:60:7b:22:df:48:2e:0c:e8:24:2e:
         75:54:61:31:e3:da:95:15:77:c7:79:a8:7e:7d:1a:48:9d:6d:
         e9:5e:23:a9:04:ea:ba:2e:35:86:05:a7:5e:0e:85:a8:45:31:
         be:a8:bf:ff:a2:79:8e:f5:75:0c:36:13:d4:c9:f2:42:d2:be:
         ff:8d:fb:5e:8b:d1:90:20:2b:88:31:af:f6:e7:c6:84:34:a4:
         a5:06:4b:5c:85:d8:05:01:33:4f:1d:40:d9:fc:59:4d:33:cb:
         28:8a:25:b3:5b:30:33:a5:e2:d3:53:b9:0b:22:c2:92:75:21:
         89:e4:fb:10:25:01:97:3d:83:72:8e:5c:fe:ed:e9:59:91:c9:
         fd:4a:82:68:d4:fb:a6:d0:b2:cf:ff:05:c8:f7:3e:0d:27:09:
         65:7c:0c:33:da:75:73:e2:9f:a4:f6:ea:a7:1f:2e:81:ed:c9:
         90:e7:21:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 19:50:12 2024 by rpki-client on console-fra.rpki-client.org