Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/323830343a383735303a383030303a3a2f33332d3333203d3e20323732373031.roa
File:                     323830343a383735303a383030303a3a2f33332d3333203d3e20323732373031.roa (raw, json)
Hash identifier:          jCDuUT4DrQ8TOHv3a6oaakYVXbax3Mb3veV0nf9Ekh4=
Subject key identifier:   9C:A3:1F:73:50:4D:8A:93:19:F1:3F:18:2C:7D:AA:82:78:88:50:C5
Certificate issuer:       /CN=E01C509DBE2A66987F85D9F7040DF42AFECFB53B
Certificate serial:       2A70503DC88E0BE1111A9D8BCD2DDD66B7FD0298
Authority key identifier: E0:1C:50:9D:BE:2A:66:98:7F:85:D9:F7:04:0D:F4:2A:FE:CF:B5:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/323830343a383735303a383030303a3a2f33332d3333203d3e20323732373031.roa
Signing time:             Mon 18 Nov 2024 15:36:46 +0000
ROA not before:           Mon 18 Nov 2024 15:31:46 +0000
ROA not after:            Mon 17 Nov 2025 15:36:46 +0000
asID:                     272701
IP address blocks:        2804:8750:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.crl
                          rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:70:50:3d:c8:8e:0b:e1:11:1a:9d:8b:cd:2d:dd:66:b7:fd:02:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E01C509DBE2A66987F85D9F7040DF42AFECFB53B
        Validity
            Not Before: Nov 18 15:31:46 2024 GMT
            Not After : Nov 17 15:36:46 2025 GMT
        Subject: CN=9CA31F73504D8A9319F13F182C7DAA82788850C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cf:55:15:04:72:33:0b:1c:af:16:36:86:ad:
                    c2:a0:68:40:be:3a:d2:96:45:fe:c3:ce:07:03:0f:
                    2f:2b:33:ba:b6:c1:99:94:1c:29:94:65:fb:07:d9:
                    fc:db:5f:8f:3b:8e:cf:4d:6c:5a:01:1d:72:12:10:
                    fe:38:22:08:db:0f:6a:8f:93:cb:78:45:d8:74:32:
                    82:ac:25:92:e3:20:02:d3:32:60:ae:2f:a4:97:85:
                    4e:0f:db:3f:65:45:ad:5f:5b:8f:fd:7d:42:f5:5d:
                    fd:42:25:d4:e1:a4:70:4a:99:0f:2d:f7:4e:c0:ed:
                    57:45:8d:3b:de:39:08:30:c7:ee:3e:80:bf:4f:39:
                    bc:67:90:ba:af:c0:60:d5:57:70:c7:a3:ef:2a:0d:
                    9e:3c:ec:36:b9:87:3a:7b:e9:6a:f6:2b:99:6c:df:
                    df:c5:fc:d5:bd:7e:be:3d:ed:0b:b8:4a:9c:bb:93:
                    37:0b:b3:2c:a2:f5:9a:af:35:aa:93:18:0a:2a:5c:
                    76:8c:23:54:76:4c:89:65:20:de:10:d1:a9:6a:a0:
                    c7:4f:fd:cd:a8:56:fe:4b:c8:79:21:25:c4:07:2e:
                    c6:45:ce:0e:e4:d4:e0:c5:a2:66:06:4a:fe:25:38:
                    5f:48:65:a4:1c:3a:fe:f9:80:62:44:80:18:7e:f4:
                    69:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A3:1F:73:50:4D:8A:93:19:F1:3F:18:2C:7D:AA:82:78:88:50:C5
            X509v3 Authority Key Identifier:
                keyid:E0:1C:50:9D:BE:2A:66:98:7F:85:D9:F7:04:0D:F4:2A:FE:CF:B5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/323830343a383735303a383030303a3a2f33332d3333203d3e20323732373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8750:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ac:86:72:27:7e:b1:c0:42:a9:92:fc:67:30:cb:bb:a9:ac:09:
         2d:e5:68:d4:8c:fe:70:d5:9e:c2:d9:a8:62:0e:55:39:fd:a3:
         61:8a:ff:be:20:f2:ef:63:aa:ae:1b:9e:16:62:68:29:90:51:
         84:d0:2d:dd:17:84:41:3e:c8:35:f7:01:71:8f:c7:74:41:d6:
         8c:c4:fa:76:2d:d6:59:ef:e3:5d:91:09:18:54:1b:c9:f8:fe:
         18:20:b8:2a:da:22:dc:d8:35:ef:63:58:19:e2:4d:8f:cf:33:
         bf:89:1e:87:08:28:a0:a5:4d:6b:9b:73:a6:c3:00:98:3b:35:
         0a:62:ce:37:af:ae:4f:ef:b2:8f:45:de:e1:da:04:b8:16:fb:
         01:a3:b8:8a:2b:8a:a1:2b:6d:10:9a:d1:8e:6b:c9:4e:b2:21:
         c2:ad:61:26:5c:ee:81:8b:a6:e2:dc:47:3d:e4:71:2e:28:f8:
         3e:e3:c9:12:b8:df:13:52:5e:33:41:9f:37:37:e7:94:ff:0c:
         59:f4:16:3e:f1:1a:94:e7:2f:96:3b:6b:86:22:7f:7f:ef:2d:
         d8:51:8d:fb:13:55:f6:dd:c1:19:cf:0b:34:fd:8d:68:e0:b9:
         d3:5f:9d:9f:13:42:26:eb:67:5e:03:50:86:4b:0d:04:71:c3:
         bd:29:17:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:53 2024 by rpki-client on console-fra.rpki-client.org