Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Q9fqKqJbdWADRHdup9pFQDYqJAb5yA8ctMCBkZrbMdS/0/323830343a393039343a3a2f33322d3438203d3e20323733353631.roa
File:                     323830343a393039343a3a2f33322d3438203d3e20323733353631.roa (raw, json)
Hash identifier:          3zHzpBCpqQEsAB0XMqZqPib7Az/oMPVoig+eNoQJMvc=
Subject key identifier:   15:E9:71:F0:17:93:5B:C0:A1:62:A5:A8:B6:11:0D:AE:7E:4C:17:70
Certificate issuer:       /CN=EA740CAA70CF57B6679257FD6D7F1B7CD3AC0648
Certificate serial:       6F49B3D095CEB0626FF74BB35D6853F70325829E
Authority key identifier: EA:74:0C:AA:70:CF:57:B6:67:92:57:FD:6D:7F:1B:7C:D3:AC:06:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA740CAA70CF57B6679257FD6D7F1B7CD3AC0648.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Q9fqKqJbdWADRHdup9pFQDYqJAb5yA8ctMCBkZrbMdS/0/323830343a393039343a3a2f33322d3438203d3e20323733353631.roa
Signing time:             Wed 06 Nov 2024 19:57:54 +0000
ROA not before:           Wed 06 Nov 2024 19:52:54 +0000
ROA not after:            Wed 05 Nov 2025 19:57:54 +0000
asID:                     273561
IP address blocks:        2804:9094::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Q9fqKqJbdWADRHdup9pFQDYqJAb5yA8ctMCBkZrbMdS/0/EA740CAA70CF57B6679257FD6D7F1B7CD3AC0648.crl
                          rsync://rpki-repo.registro.br/repo/7Q9fqKqJbdWADRHdup9pFQDYqJAb5yA8ctMCBkZrbMdS/0/EA740CAA70CF57B6679257FD6D7F1B7CD3AC0648.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA740CAA70CF57B6679257FD6D7F1B7CD3AC0648.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 16:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:49:b3:d0:95:ce:b0:62:6f:f7:4b:b3:5d:68:53:f7:03:25:82:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA740CAA70CF57B6679257FD6D7F1B7CD3AC0648
        Validity
            Not Before: Nov  6 19:52:54 2024 GMT
            Not After : Nov  5 19:57:54 2025 GMT
        Subject: CN=15E971F017935BC0A162A5A8B6110DAE7E4C1770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:47:80:64:91:a3:43:a0:3a:08:d2:1d:2e:d3:
                    12:52:04:df:55:6c:06:19:76:cf:41:cf:fd:31:2f:
                    20:e2:c3:7c:e8:b8:cb:af:37:a9:7e:db:14:e3:90:
                    58:7c:a9:72:bf:52:12:fa:e5:77:7e:a7:8c:37:ea:
                    06:1e:92:6a:62:60:74:74:12:cd:17:f6:a1:a2:7e:
                    59:e2:46:6b:bf:9f:7a:a5:ee:e9:50:61:05:e7:9d:
                    e0:16:b6:51:66:e8:1c:e7:3a:b5:f3:2f:88:90:f9:
                    2f:01:e8:8d:23:85:61:a8:00:04:96:99:cb:ef:24:
                    4f:6c:f5:88:cc:a0:fe:35:a2:92:27:5f:a0:29:b8:
                    d7:58:2a:60:91:e0:6e:8e:e2:bc:3e:44:c6:b0:8f:
                    8a:33:56:bd:40:8e:1e:09:62:c5:d2:9c:ee:c0:24:
                    55:36:c5:6c:e8:31:0d:fd:f6:bf:fc:78:62:57:ea:
                    0f:ca:4a:2b:4d:ef:37:2a:09:77:4e:af:c0:e5:98:
                    22:61:58:b5:3c:ca:40:31:f7:09:1d:f6:69:1a:ae:
                    c1:b4:6d:95:97:e6:34:d0:36:ad:c4:ad:e9:92:cd:
                    36:da:42:44:d7:9a:5e:22:d8:c5:a5:be:39:ae:ed:
                    f0:88:a1:0a:33:89:ac:69:58:b1:db:88:4f:1e:3f:
                    fd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E9:71:F0:17:93:5B:C0:A1:62:A5:A8:B6:11:0D:AE:7E:4C:17:70
            X509v3 Authority Key Identifier:
                keyid:EA:74:0C:AA:70:CF:57:B6:67:92:57:FD:6D:7F:1B:7C:D3:AC:06:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Q9fqKqJbdWADRHdup9pFQDYqJAb5yA8ctMCBkZrbMdS/0/EA740CAA70CF57B6679257FD6D7F1B7CD3AC0648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA740CAA70CF57B6679257FD6D7F1B7CD3AC0648.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Q9fqKqJbdWADRHdup9pFQDYqJAb5yA8ctMCBkZrbMdS/0/323830343a393039343a3a2f33322d3438203d3e20323733353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9094::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:ac:e4:a1:38:cd:0a:27:aa:90:c8:5e:af:46:2e:39:23:8d:
         25:f9:6d:0d:7f:bc:8b:3f:42:0d:1a:2b:08:c0:ef:3b:3c:23:
         12:03:8d:e0:90:42:ba:c8:f9:51:d5:74:f6:a9:d6:89:57:a0:
         90:d3:09:a1:44:a6:42:6b:af:36:cb:f2:dd:6d:f9:bf:bb:4f:
         22:2e:2b:0c:b9:25:1c:77:6e:c5:c8:9e:2f:7f:1a:15:9b:6e:
         19:a0:fb:55:6f:27:70:b7:0c:e3:6a:52:b5:c5:bd:55:6d:24:
         18:b5:30:b0:2f:f3:de:69:c7:b3:3c:3e:7d:51:2a:ec:64:6a:
         8f:0d:e9:59:7d:18:fe:64:e4:75:8e:7e:5a:4c:0f:7c:64:fb:
         a9:47:b8:f4:36:53:80:3b:6b:05:bf:68:d3:ab:4f:91:a2:a2:
         95:4a:14:dc:9f:87:d7:02:8d:40:85:b7:dd:cb:4a:d2:8b:48:
         7c:f8:de:cc:5c:bd:7a:20:0f:57:7a:a1:3e:c2:7d:33:fc:e6:
         16:bf:18:b2:e2:42:cc:26:e8:65:ec:eb:45:cd:e0:be:99:00:
         fb:3f:d7:d7:a1:b4:a2:c2:3c:6b:0e:de:05:b7:73:2c:ba:fb:
         35:a8:73:4a:39:a6:56:25:7f:5e:c2:d9:53:e7:9f:bc:76:10:
         20:2b:a0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 15:30:11 2024 by rpki-client on console-ams.rpki-client.org