Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a353030333a3a2f34382d3438203d3e20323730323636.roa
File:                     323830343a363936303a353030333a3a2f34382d3438203d3e20323730323636.roa (raw, json)
Hash identifier:          xVZs7LY3sQas5DYOFc0LLjO9WcsB6Kfucw6kxoZHD9w=
Subject key identifier:   57:7C:CA:A3:C7:D2:F7:A1:B4:FD:CC:63:75:27:2B:07:EE:F7:56:0A
Certificate issuer:       /CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
Certificate serial:       6256EC9736DB586C53EAEE21DC5F3AB12E634045
Authority key identifier: 87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a353030333a3a2f34382d3438203d3e20323730323636.roa
Signing time:             Thu 04 Apr 2024 23:09:41 +0000
ROA not before:           Thu 04 Apr 2024 23:04:41 +0000
ROA not after:            Thu 03 Apr 2025 23:09:41 +0000
asID:                     270266
IP address blocks:        2804:6960:5003::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.crl
                          rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:56:ec:97:36:db:58:6c:53:ea:ee:21:dc:5f:3a:b1:2e:63:40:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
        Validity
            Not Before: Apr  4 23:04:41 2024 GMT
            Not After : Apr  3 23:09:41 2025 GMT
        Subject: CN=577CCAA3C7D2F7A1B4FDCC6375272B07EEF7560A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:66:28:41:6a:ec:8d:9d:85:b4:c8:33:fa:2a:
                    e9:bc:97:ee:f8:8b:68:2f:6d:e3:83:08:79:2c:65:
                    0d:df:c2:21:e4:5a:af:71:70:c1:6a:14:c7:f4:e3:
                    0c:07:8a:0a:03:0b:ed:d7:be:e4:5a:d2:d6:6c:5d:
                    c7:5e:65:e2:9a:ca:9e:9a:80:1d:91:d8:9d:3c:18:
                    2a:91:31:bd:59:18:88:a5:f5:f9:6b:45:de:84:c5:
                    d8:33:e4:72:f7:0b:f2:b7:9d:cb:5d:c1:0e:92:10:
                    c4:f5:db:6a:e9:67:0d:90:10:b5:c7:f6:d1:aa:5a:
                    af:c4:0f:f4:db:7c:e0:11:2b:c8:f5:2b:bd:2c:9c:
                    fc:ff:23:50:d1:bf:06:ac:b1:17:69:49:60:35:a7:
                    c1:36:76:25:f3:6b:73:76:af:03:7a:0c:2d:13:99:
                    38:73:7c:3a:61:64:40:07:46:9b:e1:e3:52:88:6b:
                    6c:b9:a9:4f:f2:4e:27:1d:c1:d1:69:e6:78:4b:3a:
                    d7:3d:53:16:82:fb:f0:9f:93:eb:32:50:dd:cc:0b:
                    3f:12:0a:dc:86:3a:13:be:17:e9:40:12:85:0e:61:
                    c0:9f:da:de:05:64:0b:02:15:dc:f3:3f:82:db:94:
                    d5:34:5a:8b:97:34:b6:9a:89:d3:48:95:9b:28:44:
                    b4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7C:CA:A3:C7:D2:F7:A1:B4:FD:CC:63:75:27:2B:07:EE:F7:56:0A
            X509v3 Authority Key Identifier:
                keyid:87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a353030333a3a2f34382d3438203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:5003::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:66:0a:9e:ea:c9:8a:b8:c6:58:a4:63:e9:95:c0:7b:10:93:
         8d:f6:f3:9b:7a:26:4b:48:ab:d2:cd:9a:d3:21:fa:ed:a7:44:
         e0:27:85:8e:e3:68:43:a6:23:12:58:b0:eb:53:8c:a4:78:05:
         df:71:00:22:53:8d:48:b0:9e:08:f2:6c:9e:68:7e:d4:dc:c5:
         7d:cf:94:82:a7:0e:35:f7:d3:13:ee:8b:9b:ad:f1:b2:a7:a2:
         79:b3:94:92:53:1b:d1:bf:c1:79:a9:13:5b:55:36:0e:1c:02:
         76:10:e9:a0:8a:14:bd:0b:57:b2:34:93:30:f2:b3:c5:af:eb:
         9d:2d:1c:bf:5e:eb:9e:e1:d6:47:43:ab:c7:96:ef:b6:9a:1a:
         0e:52:de:4a:72:91:69:a6:cb:b1:19:50:2d:b1:d1:9a:f5:3e:
         ff:ad:51:9d:4b:b8:a0:8f:e4:fb:ee:9f:b1:ef:20:6c:61:bf:
         46:53:5a:06:65:44:e7:aa:e0:d1:eb:82:1e:f9:c4:62:8b:06:
         4f:bc:e1:78:c0:a2:6e:27:23:32:43:fb:c4:1b:65:6e:41:4b:
         a5:c8:38:9c:f2:24:9e:3a:e8:9e:60:f5:12:f5:57:2e:29:b4:
         2b:c6:00:3e:fa:3d:37:0d:90:5a:c9:dd:61:37:9c:de:ae:e7:
         f2:fc:0e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:57 2024 by rpki-client on console-fra.rpki-client.org