Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a353030303a3a2f34382d3438203d3e20323730323636.roa
File:                     323830343a363936303a353030303a3a2f34382d3438203d3e20323730323636.roa (raw, json)
Hash identifier:          cCsI/wzJuNflTV1KtoQSrgsWN0hnQi3x41tPLD1ZRuw=
Subject key identifier:   F3:0A:D3:5C:14:7D:0B:F3:2F:32:7C:40:38:7D:DB:07:B3:C7:67:43
Certificate issuer:       /CN=B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4
Certificate serial:       4E6C716AC77E99336C718D4DA3B6FEE64C27D73B
Authority key identifier: B2:BE:02:10:DA:61:E2:A7:7E:B0:44:5E:58:A5:0E:7D:B6:4F:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a353030303a3a2f34382d3438203d3e20323730323636.roa
Signing time:             Tue 06 Aug 2024 13:40:14 +0000
ROA not before:           Tue 06 Aug 2024 13:35:14 +0000
ROA not after:            Tue 05 Aug 2025 13:40:14 +0000
asID:                     270266
IP address blocks:        2804:6960:5000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.crl
                          rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6c:71:6a:c7:7e:99:33:6c:71:8d:4d:a3:b6:fe:e6:4c:27:d7:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4
        Validity
            Not Before: Aug  6 13:35:14 2024 GMT
            Not After : Aug  5 13:40:14 2025 GMT
        Subject: CN=F30AD35C147D0BF32F327C40387DDB07B3C76743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:aa:e2:48:6c:a7:81:96:82:c8:37:ec:e9:5f:
                    a8:3c:ec:3b:40:f7:c6:bf:59:b9:e3:3b:80:8a:fd:
                    04:46:77:46:76:b4:ab:82:8a:b8:1c:c6:19:68:bb:
                    0a:76:63:04:96:e4:0b:40:99:0c:27:fb:ea:a9:ff:
                    42:f2:8e:ba:37:8f:b5:dc:cb:dd:6a:15:45:57:6a:
                    7c:dc:e0:ee:02:a4:76:03:e0:7e:2e:dd:87:95:5e:
                    dc:14:3e:04:be:73:5d:16:d8:4f:0c:ec:33:eb:09:
                    36:b9:3f:1f:2e:f6:14:26:58:21:7b:c1:dc:cf:7d:
                    ff:bf:5f:d4:25:ba:a7:52:ce:33:c8:87:ef:87:f2:
                    75:c5:95:37:b8:f0:72:32:18:46:f4:18:7d:bb:80:
                    90:10:74:d6:6d:2d:c1:c4:60:e5:e1:76:00:1c:cd:
                    1c:2c:a6:2a:80:28:96:4c:60:94:53:f9:9d:58:75:
                    12:2c:e6:e1:4c:91:d5:39:ac:20:f1:ba:1b:ef:49:
                    44:d9:2f:46:40:84:96:56:d9:e8:54:51:d1:b0:8e:
                    cf:61:aa:e4:c4:c5:38:72:94:95:f1:c0:74:97:a9:
                    fe:32:ae:a0:ba:56:23:6b:ec:fb:14:78:7c:0f:13:
                    48:14:dc:8c:49:9f:c5:5e:4b:9e:23:19:a8:cf:1a:
                    6f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0A:D3:5C:14:7D:0B:F3:2F:32:7C:40:38:7D:DB:07:B3:C7:67:43
            X509v3 Authority Key Identifier:
                keyid:B2:BE:02:10:DA:61:E2:A7:7E:B0:44:5E:58:A5:0E:7D:B6:4F:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a353030303a3a2f34382d3438203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:9f:b6:0d:07:43:03:de:6d:1a:af:7a:5a:b4:0a:8b:9e:cb:
         0e:d4:c4:36:97:c9:03:67:08:d1:cd:37:ee:d4:9f:39:9f:ea:
         18:7a:00:71:03:91:35:6b:16:3a:20:d3:5a:98:bb:47:74:fd:
         3e:bd:4c:ed:61:97:5a:3b:fd:a7:53:f3:ff:ad:5b:fb:06:14:
         c5:e4:a3:63:d6:6f:d7:5e:da:ae:4d:54:73:1d:db:fa:96:cf:
         c6:97:cb:bb:b1:98:3d:9c:7f:ff:3a:30:2f:9f:4b:15:3a:06:
         5a:6d:06:1b:79:62:35:fe:cb:23:ab:6d:6d:05:02:de:03:bd:
         2f:c8:f7:7a:37:fd:de:d9:ff:69:0c:bc:f3:5a:a8:72:9d:ef:
         e6:15:75:19:70:92:76:ce:7f:ca:a5:ae:ac:c3:a8:e0:e3:72:
         df:97:56:73:1e:39:09:ed:de:12:ef:73:c7:3a:7c:2b:02:84:
         6e:09:24:87:cc:39:02:0b:cc:24:fd:1b:67:ca:d9:e8:b4:53:
         db:f3:8a:69:1b:75:b6:a0:73:81:2b:45:60:19:98:95:9c:e8:
         e6:9d:64:31:09:83:fd:00:f4:a3:fc:89:c3:d4:e2:3a:6a:eb:
         80:4b:e9:a0:0a:9c:de:43:5b:8c:a0:85:1d:74:21:c8:27:26:
         a5:68:f7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:02:43 2024 by rpki-client on console-ams.rpki-client.org