Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a353030323a3a2f34382d3438203d3e20323730323636.roa
File:                     323830343a363936303a353030323a3a2f34382d3438203d3e20323730323636.roa (raw, json)
Hash identifier:          DzxiMyuttNUZAfDgIXORb6HKnpuCETfb9ipkIF1cqt4=
Subject key identifier:   66:02:C2:37:65:3F:90:DA:BD:32:09:26:2D:B2:09:82:C5:F6:93:4B
Certificate issuer:       /CN=B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4
Certificate serial:       2279590A68E6536A8FEC36B4CBBF6C05F11F0D56
Authority key identifier: B2:BE:02:10:DA:61:E2:A7:7E:B0:44:5E:58:A5:0E:7D:B6:4F:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a353030323a3a2f34382d3438203d3e20323730323636.roa
Signing time:             Tue 06 Aug 2024 13:39:57 +0000
ROA not before:           Tue 06 Aug 2024 13:34:57 +0000
ROA not after:            Tue 05 Aug 2025 13:39:57 +0000
asID:                     270266
IP address blocks:        2804:6960:5002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.crl
                          rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:79:59:0a:68:e6:53:6a:8f:ec:36:b4:cb:bf:6c:05:f1:1f:0d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4
        Validity
            Not Before: Aug  6 13:34:57 2024 GMT
            Not After : Aug  5 13:39:57 2025 GMT
        Subject: CN=6602C237653F90DABD3209262DB20982C5F6934B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2a:fb:2f:38:69:ff:7c:b1:bd:65:10:f2:70:
                    dd:f4:4d:68:8c:6d:c9:f1:d1:88:6e:32:34:6c:db:
                    0f:66:e8:8f:b3:5e:17:ef:08:77:e7:f2:23:8b:78:
                    21:01:e1:d6:d3:ce:b0:4e:92:09:b3:ec:62:7c:11:
                    6c:e3:23:9a:c7:30:b5:c4:67:2d:d0:06:0a:a5:f6:
                    e1:15:25:9b:12:47:c7:9f:bc:bf:32:33:dd:a3:6a:
                    0e:e6:cb:b0:33:07:41:2e:4c:2d:51:87:01:d5:58:
                    0f:78:df:7a:32:da:c6:40:57:ed:87:f9:32:4f:41:
                    0e:3e:fe:bd:11:7c:88:95:b8:48:ef:1c:a3:68:57:
                    50:87:5d:8e:5b:e5:cf:8c:ec:6e:df:7f:4a:41:67:
                    21:f2:fc:6a:01:56:b8:47:42:d3:36:d6:5b:2a:4c:
                    91:72:5b:65:38:d0:41:5f:9e:90:8f:2f:15:dc:10:
                    11:3c:99:9d:ff:63:69:ad:01:4f:8e:f6:c1:5d:9f:
                    fc:10:74:d0:7c:f5:aa:82:44:f9:f2:88:a0:9d:8d:
                    69:fb:b2:42:fa:4e:7d:c2:42:e9:f0:3e:f2:ad:17:
                    13:cd:40:c8:04:8d:90:9a:9d:5e:2c:7d:6a:0a:c6:
                    4d:4e:be:5c:14:5d:7f:30:92:8a:37:56:a2:df:0d:
                    df:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:02:C2:37:65:3F:90:DA:BD:32:09:26:2D:B2:09:82:C5:F6:93:4B
            X509v3 Authority Key Identifier:
                keyid:B2:BE:02:10:DA:61:E2:A7:7E:B0:44:5E:58:A5:0E:7D:B6:4F:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a353030323a3a2f34382d3438203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:5002::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:a2:ce:0a:4b:22:e5:6c:08:57:43:2f:1d:54:eb:c6:66:5b:
         db:30:8c:59:35:b8:c1:84:a9:f1:ef:75:f1:cc:f9:52:ad:9a:
         3f:96:f4:e3:c5:3b:86:6e:73:c0:3a:c0:d8:bd:d2:f8:af:79:
         60:23:6a:3a:a9:8b:0c:36:1d:f1:bd:71:21:5e:ba:fb:9a:55:
         f8:01:cc:da:fa:93:f1:20:ce:0d:5e:d2:09:21:fb:b1:1f:50:
         92:0a:49:c8:5e:6e:86:35:a3:dd:80:a8:e4:33:5a:bd:86:dd:
         38:6a:a9:3c:39:b9:a7:f2:03:05:26:a9:93:e4:fb:e5:f4:ee:
         87:a4:bd:b1:1c:3e:41:09:53:a8:88:55:6e:f6:ed:7b:c8:3c:
         18:f9:59:9a:eb:6e:61:32:3b:83:71:f9:2c:46:6a:f4:4d:92:
         5f:dc:34:ca:37:f7:c9:ea:24:8d:84:60:21:df:ce:db:60:29:
         ad:c3:27:dd:26:fe:13:c9:c0:e8:d5:92:84:f9:f3:54:ab:27:
         12:95:71:30:03:b1:23:ad:57:80:4d:3d:36:36:8b:83:28:97:
         50:e5:2d:bf:10:46:b4:8a:0a:85:21:01:90:8a:77:ac:c2:b3:
         11:25:5d:2a:ca:74:22:ad:59:91:c2:9e:fa:77:8e:a9:6c:00:
         f5:92:70:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:18 2024 by rpki-client on console-fra.rpki-client.org