Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/323830343a376562303a3a2f33322d313238203d3e20323731363431.roa
File:                     323830343a376562303a3a2f33322d313238203d3e20323731363431.roa (raw, json)
Hash identifier:          c2i1lwNtBHwC6Epls9deH0WlsPvLAAKfUK6lmZNxPXw=
Subject key identifier:   0A:12:B6:E6:EF:18:39:72:1B:4D:A6:6E:F4:70:FB:12:7E:29:51:01
Certificate issuer:       /CN=D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D
Certificate serial:       59C94BD89ECE1F75EC7D07A4AF4E22706E0A2F31
Authority key identifier: D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/323830343a376562303a3a2f33322d313238203d3e20323731363431.roa
Signing time:             Wed 03 Apr 2024 23:57:34 +0000
ROA not before:           Wed 03 Apr 2024 23:52:34 +0000
ROA not after:            Wed 02 Apr 2025 23:57:34 +0000
asID:                     271641
IP address blocks:        2804:7eb0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.crl
                          rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c9:4b:d8:9e:ce:1f:75:ec:7d:07:a4:af:4e:22:70:6e:0a:2f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D
        Validity
            Not Before: Apr  3 23:52:34 2024 GMT
            Not After : Apr  2 23:57:34 2025 GMT
        Subject: CN=0A12B6E6EF1839721B4DA66EF470FB127E295101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:87:3c:fb:8b:94:5f:42:fa:3d:ad:fb:9b:23:
                    85:81:21:9a:86:02:20:e6:7e:50:56:96:88:0d:e6:
                    30:e3:53:b4:e3:04:b3:47:9f:06:26:61:f8:09:40:
                    2f:dc:9f:78:34:db:2e:c9:80:ab:90:27:06:1a:ee:
                    ac:2e:4e:62:07:80:93:c6:03:54:e4:42:a1:b1:97:
                    63:9c:a7:c7:90:44:47:08:ad:3b:05:6c:76:f1:e4:
                    f9:59:12:17:06:66:25:a2:2a:7c:34:65:85:6f:b3:
                    98:d6:e4:3e:75:6d:b7:c4:5d:08:e8:84:14:75:33:
                    ae:86:8b:9a:41:51:80:eb:84:4c:30:85:6e:9d:4c:
                    71:79:bb:6c:97:a4:73:c2:ed:db:59:da:85:d6:7a:
                    85:33:51:77:f8:83:99:9d:9f:90:ad:11:8c:6b:d2:
                    b8:88:53:28:4b:9a:69:c0:c6:9a:62:15:6e:20:5d:
                    7c:87:93:d6:e1:ea:f8:27:27:43:7e:b4:62:bd:9e:
                    84:c7:af:71:ba:78:10:bf:ef:11:78:04:15:86:7a:
                    9a:e9:c1:c6:3f:4a:4a:d3:58:1b:6c:90:69:25:3b:
                    ac:12:82:16:23:bc:3e:6f:58:d8:15:16:2f:4a:05:
                    b1:3d:c2:98:84:57:45:a5:fd:69:78:ee:96:00:a9:
                    24:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:12:B6:E6:EF:18:39:72:1B:4D:A6:6E:F4:70:FB:12:7E:29:51:01
            X509v3 Authority Key Identifier:
                keyid:D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/323830343a376562303a3a2f33322d313238203d3e20323731363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7eb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:ce:e0:4f:7f:d5:0f:a5:e7:45:c2:da:57:a5:c0:73:64:e2:
         2c:eb:7c:1d:e6:02:28:8d:76:6c:ff:be:3f:38:cc:a3:13:90:
         47:0c:26:90:a5:c9:d6:ab:24:95:ad:fd:2e:98:1d:64:62:74:
         f3:26:13:5f:dd:5f:1a:69:86:f6:e2:c5:c9:bc:76:6d:3d:a1:
         ce:f2:d5:86:95:72:cf:50:71:e0:cf:77:2d:1f:96:27:4e:3b:
         53:54:97:4f:d8:a6:50:51:de:0c:52:eb:5d:e0:98:13:8d:8a:
         20:7a:f5:1a:ae:77:f6:d8:51:bd:a2:ff:f4:a4:da:c4:99:6e:
         dd:dd:d8:e5:6f:c6:7a:a9:4a:6a:d8:a0:74:3d:c7:92:c7:fd:
         d6:1f:5d:df:c7:8b:3b:77:ae:1b:51:2b:9b:12:d7:b7:6a:62:
         71:67:aa:35:cb:49:4e:95:ee:d7:ba:f1:19:67:6c:c3:15:4c:
         03:84:56:30:9f:48:6d:a3:f1:4a:7c:f6:ee:cb:39:12:76:8a:
         ea:1c:d0:73:8a:42:8f:d9:68:a0:38:3d:b9:ea:a1:a2:0a:6a:
         2e:ed:2a:ef:fe:2b:d5:be:06:e4:f5:8b:ab:c0:c6:d7:44:69:
         70:b0:85:8c:a1:f2:33:0f:d7:5d:8a:3a:be:2c:de:0a:98:a8:
         ca:e1:02:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:39 2024 by rpki-client on console-fra.rpki-client.org