Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a383030303a3a2f33332d3333203d3e20323633313436.roa
File:                     323830343a313737383a383030303a3a2f33332d3333203d3e20323633313436.roa (raw, json)
Hash identifier:          SLCkKk5v/xbV6VajzsI/RkegAb7fgEbpw34FcYhrLXI=
Subject key identifier:   89:9E:90:0F:FF:C5:03:BD:23:FF:43:08:F1:B6:B4:A3:BE:82:B3:10
Certificate issuer:       /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
Certificate serial:       59DBD57BEF9CAA43E4B3902D215C5BF59D93D34B
Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a383030303a3a2f33332d3333203d3e20323633313436.roa
Signing time:             Thu 04 Apr 2024 07:28:53 +0000
ROA not before:           Thu 04 Apr 2024 07:23:53 +0000
ROA not after:            Thu 03 Apr 2025 07:28:53 +0000
asID:                     263146
IP address blocks:        2804:1778:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl
                          rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:db:d5:7b:ef:9c:aa:43:e4:b3:90:2d:21:5c:5b:f5:9d:93:d3:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
        Validity
            Not Before: Apr  4 07:23:53 2024 GMT
            Not After : Apr  3 07:28:53 2025 GMT
        Subject: CN=899E900FFFC503BD23FF4308F1B6B4A3BE82B310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f1:92:cd:8c:86:33:f3:27:a9:58:62:65:af:
                    97:5d:08:8b:b6:4e:6d:a7:34:1b:cd:d6:1c:3d:80:
                    5e:e2:c6:4f:75:73:7e:03:2c:97:1e:40:8e:ec:6c:
                    c2:9d:84:b4:e5:b8:67:a8:c4:1b:6e:74:ca:14:20:
                    ff:a4:89:fb:da:ca:34:48:81:34:90:c3:4e:f6:a3:
                    08:36:77:30:43:0b:b7:72:06:0b:08:6b:21:e8:71:
                    7d:39:28:9c:41:3f:68:7f:bb:cd:ca:90:33:44:42:
                    08:c2:f7:24:0e:b1:60:56:fb:cb:28:7d:36:aa:91:
                    62:20:f7:19:69:c4:a7:24:cd:e6:70:54:57:b2:87:
                    ac:ec:dd:27:0c:ad:b2:25:12:97:9d:e1:4d:e8:a0:
                    f6:4f:ee:1a:14:07:cb:20:a4:66:cf:ae:89:36:81:
                    87:a0:0e:98:af:35:40:f9:2d:72:6d:26:07:71:35:
                    c0:73:1d:8b:c5:bb:e0:62:09:eb:6e:1a:a3:ec:fe:
                    d0:72:0e:4d:44:a3:28:93:bd:c3:da:e5:26:d6:d4:
                    d3:43:0b:b0:cf:15:45:38:47:9b:d7:f2:e3:2b:ef:
                    bf:e4:81:41:3d:28:36:56:0e:13:80:38:71:64:20:
                    fa:18:b5:31:b8:98:87:95:9e:d9:b1:ff:6d:49:49:
                    a0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9E:90:0F:FF:C5:03:BD:23:FF:43:08:F1:B6:B4:A3:BE:82:B3:10
            X509v3 Authority Key Identifier:
                keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a383030303a3a2f33332d3333203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1778:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b0:dd:31:4c:56:0b:89:b3:b5:58:da:63:d8:de:b6:e4:dc:05:
         28:f8:d3:75:53:d2:fd:53:eb:3e:c2:07:0c:df:0f:ba:64:52:
         a9:08:a2:ce:27:34:eb:7c:5a:45:63:4f:ac:4d:c5:60:42:7d:
         fc:41:bc:6a:ef:05:2b:06:5e:f7:e3:82:58:0f:b0:9f:72:57:
         84:b6:07:c5:f1:12:a2:9c:ad:f2:82:4a:d7:9e:dd:dd:64:ed:
         d0:73:92:d7:66:be:80:06:09:39:53:24:97:e8:4c:13:7c:bb:
         38:09:fd:22:1d:58:ca:26:f8:7a:eb:66:43:d7:9b:3d:14:91:
         d1:6c:02:4d:9d:3d:03:4c:af:7d:12:97:a9:df:4f:89:ee:ee:
         ca:21:c9:e7:c6:54:19:7e:b1:e0:a3:a8:0a:95:41:cf:6e:77:
         df:ed:ef:ef:e6:83:fd:b7:01:1b:29:c0:93:4d:91:28:b8:c9:
         70:9a:b5:5b:76:1d:48:de:df:b8:4d:16:d2:38:de:49:4f:79:
         1b:73:c8:ee:62:7f:06:cc:ee:a8:7a:94:d8:be:d2:ba:0d:32:
         8d:01:88:e0:2d:bf:96:b7:0f:db:d4:8d:2f:5a:8c:5a:30:91:
         d1:08:a2:d7:1e:ce:a0:6c:c3:b0:41:02:6b:ac:21:a6:69:be:
         5e:b6:bb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:32 2024 by rpki-client on console-fra.rpki-client.org