Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a353030303a3a2f34362d3436203d3e20323730323636.roa
File:                     323830343a363936303a353030303a3a2f34362d3436203d3e20323730323636.roa (raw, json)
Hash identifier:          mPiMk6mPlFoMai5ln9ky5w4AboFkjpoQD39UNlisbyE=
Subject key identifier:   B4:7F:97:83:C3:EC:00:26:7A:DF:BD:EA:9B:68:41:74:4D:E1:FB:A4
Certificate issuer:       /CN=B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4
Certificate serial:       5972A29CFF23676BE8703EBA286DE95FB5264AC7
Authority key identifier: B2:BE:02:10:DA:61:E2:A7:7E:B0:44:5E:58:A5:0E:7D:B6:4F:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a353030303a3a2f34362d3436203d3e20323730323636.roa
Signing time:             Tue 06 Aug 2024 13:39:52 +0000
ROA not before:           Tue 06 Aug 2024 13:34:52 +0000
ROA not after:            Tue 05 Aug 2025 13:39:52 +0000
asID:                     270266
IP address blocks:        2804:6960:5000::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.crl
                          rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:72:a2:9c:ff:23:67:6b:e8:70:3e:ba:28:6d:e9:5f:b5:26:4a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4
        Validity
            Not Before: Aug  6 13:34:52 2024 GMT
            Not After : Aug  5 13:39:52 2025 GMT
        Subject: CN=B47F9783C3EC00267ADFBDEA9B6841744DE1FBA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3d:20:af:e8:15:ee:fa:76:22:1e:6b:91:08:
                    06:f5:a5:ae:f6:a2:31:b3:d8:6f:c0:3d:2c:73:ae:
                    db:91:3f:e8:f8:5f:1c:20:57:eb:6d:22:c9:cb:e3:
                    42:ba:ef:5f:8f:6c:40:2c:6d:96:f8:7b:5b:eb:3a:
                    4e:c4:f1:e1:fd:64:db:bb:49:72:bc:07:8f:df:08:
                    6e:2f:1c:c6:58:43:a8:5a:78:8a:2c:ad:93:24:e6:
                    a5:07:b6:17:e8:f6:c4:1b:65:67:64:1d:b8:84:03:
                    95:2a:a5:f6:94:93:80:37:10:b2:04:67:e7:28:9f:
                    4f:2f:c5:33:48:45:a3:6d:f9:b7:ac:83:1b:9c:a5:
                    b7:2a:d1:80:71:1b:53:cf:b3:12:02:7c:87:1a:2f:
                    92:88:5c:e6:53:0f:40:f4:f0:8e:41:1d:09:08:00:
                    6f:65:b6:32:36:20:46:12:a4:37:52:11:0c:71:0c:
                    3d:9f:24:4f:c9:a4:f0:d8:f2:0b:aa:81:04:cc:d2:
                    0c:b8:7a:ee:42:7e:aa:f7:cc:15:26:3e:39:c3:e5:
                    63:31:a4:36:b8:73:90:9f:06:b0:60:a7:b7:7d:cb:
                    f7:72:ee:3a:c2:df:59:57:02:e3:73:da:f0:fd:7b:
                    2c:f6:db:0f:4c:6e:00:a9:a0:3e:00:3b:50:4a:76:
                    ea:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7F:97:83:C3:EC:00:26:7A:DF:BD:EA:9B:68:41:74:4D:E1:FB:A4
            X509v3 Authority Key Identifier:
                keyid:B2:BE:02:10:DA:61:E2:A7:7E:B0:44:5E:58:A5:0E:7D:B6:4F:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a353030303a3a2f34362d3436203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:5000::/46

    Signature Algorithm: sha256WithRSAEncryption
         cc:ec:73:71:2a:c8:b5:ed:3c:75:06:77:e9:4f:6a:bb:6a:c9:
         c3:d1:4b:f6:af:e3:fd:99:7e:47:fc:37:6a:c5:18:e0:bc:54:
         5d:c8:b3:4a:70:b4:6f:7b:1d:9f:e4:06:20:1b:0e:8f:33:b8:
         49:e0:11:dc:3f:db:da:27:25:a7:64:e0:eb:c1:52:ff:a3:b9:
         5f:6c:ba:57:ca:a8:26:b8:c1:ca:5f:88:b4:ba:bc:b3:c2:d5:
         ad:95:dd:ac:4a:bb:ac:fc:9c:7a:d7:21:a6:98:c0:4c:34:b5:
         ce:d7:57:51:32:05:bc:75:82:fb:8b:b4:6f:53:f6:8c:8c:23:
         92:64:98:a9:f8:d9:19:eb:ed:db:ec:9f:8e:6d:2d:db:54:15:
         32:dc:48:8b:55:40:28:56:f5:56:e9:f9:a2:d9:e7:e2:59:fe:
         f7:35:3e:07:f1:29:13:69:7b:a9:72:a8:75:61:df:7b:c9:9b:
         1f:ea:0e:d4:5f:28:58:96:65:91:63:83:16:09:90:96:5d:45:
         c5:7f:a8:aa:fb:6c:69:4e:24:c3:c8:49:56:b5:58:75:7b:93:
         77:d9:9c:7d:d8:54:a6:98:74:97:cf:7c:fc:ed:fd:d6:07:57:
         12:de:9c:28:4e:78:d7:c8:37:d5:72:01:1c:5f:21:d0:14:e1:
         79:9c:f0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:21 2024 by rpki-client on console-ams.rpki-client.org