Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/323830343a383030303a363030363a3a2f34382d3438203d3e20323731373233.roa
File:                     323830343a383030303a363030363a3a2f34382d3438203d3e20323731373233.roa (raw, json)
Hash identifier:          X8sOnfMZhRHaTAnPssjQGIxyORhpLTgVSb98P7hDOak=
Subject key identifier:   12:04:9C:50:99:57:30:CD:16:B5:58:05:30:40:57:32:72:F1:B7:DD
Certificate issuer:       /CN=00329BFCE59988BC06ECC86EE26ADD745B04C576
Certificate serial:       0EC66C2980048C765D5F66527DA7AD33BAA5D128
Authority key identifier: 00:32:9B:FC:E5:99:88:BC:06:EC:C8:6E:E2:6A:DD:74:5B:04:C5:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00329BFCE59988BC06ECC86EE26ADD745B04C576.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/323830343a383030303a363030363a3a2f34382d3438203d3e20323731373233.roa
Signing time:             Thu 25 Apr 2024 14:00:31 +0000
ROA not before:           Thu 25 Apr 2024 13:55:31 +0000
ROA not after:            Thu 24 Apr 2025 14:00:31 +0000
asID:                     271723
IP address blocks:        2804:8000:6006::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/00329BFCE59988BC06ECC86EE26ADD745B04C576.crl
                          rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/00329BFCE59988BC06ECC86EE26ADD745B04C576.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00329BFCE59988BC06ECC86EE26ADD745B04C576.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 16:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c6:6c:29:80:04:8c:76:5d:5f:66:52:7d:a7:ad:33:ba:a5:d1:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00329BFCE59988BC06ECC86EE26ADD745B04C576
        Validity
            Not Before: Apr 25 13:55:31 2024 GMT
            Not After : Apr 24 14:00:31 2025 GMT
        Subject: CN=12049C50995730CD16B558053040573272F1B7DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b5:15:cf:38:62:02:74:8b:c1:ee:a0:7f:de:
                    76:2a:59:62:d1:dc:fd:81:45:31:07:18:63:6d:5c:
                    01:e4:3f:29:98:7d:db:87:50:f1:49:bb:67:b4:77:
                    c5:3b:5b:f8:9d:cc:2f:96:26:e8:24:23:4c:f2:58:
                    5d:30:ab:87:e6:9a:8a:2b:7e:f4:98:8f:37:0b:73:
                    43:55:d9:c3:76:5c:b2:2b:5d:da:d0:00:e7:c4:98:
                    9b:5e:bb:ef:ec:7b:f1:ad:5d:97:34:29:30:a5:56:
                    74:fa:9f:6e:29:38:6a:da:ba:87:9e:ed:4f:f8:c4:
                    d9:06:2d:69:b1:0a:ea:98:40:7b:e3:81:a8:49:dd:
                    90:92:cc:80:e6:15:55:1a:b3:0f:26:48:50:24:36:
                    cc:cf:88:99:4d:30:0a:35:00:9a:8d:a5:cf:87:89:
                    8e:da:96:be:58:6d:e2:42:bd:99:53:9e:87:72:1f:
                    24:2b:32:c7:d2:bf:cf:7b:be:7c:5a:32:47:4d:de:
                    8c:d0:d6:c1:57:04:14:1f:ef:03:d7:65:21:47:1d:
                    0e:4e:ce:0c:c8:1f:44:0c:a9:d4:ee:2e:54:98:0c:
                    bd:f3:dd:ae:ef:64:eb:05:69:8a:9b:7f:91:45:44:
                    2e:de:43:70:f8:dd:a9:e7:50:e5:4e:81:3e:1b:61:
                    1b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:04:9C:50:99:57:30:CD:16:B5:58:05:30:40:57:32:72:F1:B7:DD
            X509v3 Authority Key Identifier:
                keyid:00:32:9B:FC:E5:99:88:BC:06:EC:C8:6E:E2:6A:DD:74:5B:04:C5:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/00329BFCE59988BC06ECC86EE26ADD745B04C576.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00329BFCE59988BC06ECC86EE26ADD745B04C576.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/323830343a383030303a363030363a3a2f34382d3438203d3e20323731373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8000:6006::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:af:78:fa:66:03:6f:44:9e:a2:58:23:ff:53:4e:b0:05:13:
         0e:6f:d5:ac:ab:65:19:aa:8a:61:e6:e4:7b:46:bd:03:76:76:
         51:17:df:52:ba:3d:21:33:aa:c0:7a:e1:ba:bb:67:f9:e7:3a:
         01:52:06:31:07:37:57:74:1f:ce:12:cd:f0:40:15:ab:6d:ee:
         27:3a:59:90:59:56:8b:65:d3:25:99:1a:e2:0c:71:f2:96:c6:
         da:fa:e9:d9:d5:b0:24:c2:f5:9a:04:db:31:e2:72:46:4d:31:
         a2:6e:e6:a4:21:69:9c:b7:41:e5:1f:6c:77:46:33:8b:f1:45:
         32:a6:77:c9:f9:0a:42:71:65:9e:50:00:56:06:f1:d4:0a:5b:
         47:ad:d4:d5:f7:34:a3:f9:77:40:f9:5f:d3:02:70:2f:da:39:
         69:fd:a2:2f:cd:98:d2:10:15:e4:28:ae:2d:39:53:13:d1:22:
         7f:4c:a2:41:a3:8b:57:e9:2c:01:7c:5a:36:03:f5:af:95:82:
         10:0a:ec:67:01:0d:04:5c:fd:53:cb:b7:98:2c:f3:45:f6:49:
         5d:e3:03:85:e9:66:dc:e7:3a:46:ed:f1:bb:94:3f:de:54:a6:
         c7:c5:3a:c3:47:0b:3c:4f:f2:94:20:a0:4c:2b:f5:fd:dd:08:
         62:8e:dc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:44:25 2024 by rpki-client on console-fra.rpki-client.org