Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/323830343a346336303a3a2f33322d3438203d3e20323637333637.roa
File:                     323830343a346336303a3a2f33322d3438203d3e20323637333637.roa (raw, json)
Hash identifier:          zioBokSVna4jMZsrbRDg1rZ5F0AkKoURfqZJsLWHQjU=
Subject key identifier:   8F:F0:A8:2F:21:96:F7:EE:36:84:BE:DF:24:22:57:21:E7:B2:6D:32
Certificate issuer:       /CN=7FB3814CCA1CED6546BF9C29096693EF4970D786
Certificate serial:       3AFC636BCC950531AE128B4B576AF54247264330
Authority key identifier: 7F:B3:81:4C:CA:1C:ED:65:46:BF:9C:29:09:66:93:EF:49:70:D7:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FB3814CCA1CED6546BF9C29096693EF4970D786.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/323830343a346336303a3a2f33322d3438203d3e20323637333637.roa
Signing time:             Mon 05 Aug 2024 20:16:43 +0000
ROA not before:           Mon 05 Aug 2024 20:11:43 +0000
ROA not after:            Mon 04 Aug 2025 20:16:43 +0000
asID:                     267367
IP address blocks:        2804:4c60::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/7FB3814CCA1CED6546BF9C29096693EF4970D786.crl
                          rsync://rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/7FB3814CCA1CED6546BF9C29096693EF4970D786.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FB3814CCA1CED6546BF9C29096693EF4970D786.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:fc:63:6b:cc:95:05:31:ae:12:8b:4b:57:6a:f5:42:47:26:43:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FB3814CCA1CED6546BF9C29096693EF4970D786
        Validity
            Not Before: Aug  5 20:11:43 2024 GMT
            Not After : Aug  4 20:16:43 2025 GMT
        Subject: CN=8FF0A82F2196F7EE3684BEDF24225721E7B26D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:35:7a:a6:73:63:fd:d9:64:bc:2c:f4:f7:a9:
                    00:96:38:19:93:c7:23:98:3d:04:9a:1e:df:1c:00:
                    d5:96:71:3d:bb:f9:38:62:9a:16:75:e4:a1:83:f8:
                    65:1e:fa:68:34:8e:9d:60:4c:59:05:ff:0e:f0:66:
                    9e:a9:00:c1:73:38:61:8c:3a:cd:a4:c1:69:38:58:
                    eb:0a:db:f7:ca:aa:d3:fb:e1:b1:ea:ff:e5:4a:29:
                    e1:d0:04:4e:3b:cd:28:a8:2d:97:6d:9a:3d:1f:35:
                    d4:1f:bd:d2:52:15:51:59:76:e6:23:a2:2a:f6:5f:
                    fa:05:bb:39:4c:fe:14:6d:bb:65:ac:19:c1:ce:8c:
                    28:68:ae:98:c3:ed:f7:68:01:88:ef:88:cf:0c:b5:
                    1a:fd:60:e6:cd:25:c0:4f:49:b1:6c:d1:f0:0f:45:
                    ed:58:1d:3b:36:87:41:4a:ae:ec:0b:26:1c:9d:a9:
                    7e:6b:d8:47:79:f5:97:32:fb:60:2b:e2:9a:34:54:
                    0e:77:7e:d7:c6:73:5f:24:50:59:e9:17:b7:42:bc:
                    22:36:72:6c:b9:4b:e7:55:1f:dd:cd:f3:a3:22:33:
                    b9:0b:1c:68:ec:63:c0:24:42:03:51:45:bb:52:65:
                    d6:37:12:dc:18:d7:96:70:d9:e5:ed:a2:09:62:b2:
                    8d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F0:A8:2F:21:96:F7:EE:36:84:BE:DF:24:22:57:21:E7:B2:6D:32
            X509v3 Authority Key Identifier:
                keyid:7F:B3:81:4C:CA:1C:ED:65:46:BF:9C:29:09:66:93:EF:49:70:D7:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/7FB3814CCA1CED6546BF9C29096693EF4970D786.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FB3814CCA1CED6546BF9C29096693EF4970D786.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/323830343a346336303a3a2f33322d3438203d3e20323637333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c60::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:46:79:cb:0b:ae:22:d5:ec:04:16:be:5d:46:d0:04:4a:7a:
         bc:eb:c8:43:3e:1f:98:ab:4c:8d:70:e6:c1:ce:b0:fb:25:6e:
         84:df:99:ea:64:1a:be:42:d7:b9:82:e0:fc:51:16:86:1d:d5:
         9f:aa:fd:43:71:a3:b7:4d:10:ef:a7:8f:c2:2b:a1:87:ba:3f:
         1d:3e:b3:92:47:36:02:4f:97:fe:da:8c:96:b9:37:9c:17:7e:
         73:1e:76:c0:9d:1d:00:4f:fa:97:3f:32:75:56:88:ed:3c:99:
         70:be:be:ff:e6:57:d4:6f:15:b7:44:65:0c:e6:3d:bf:21:e9:
         cb:c4:f1:43:d6:59:ef:37:4d:49:a3:3e:22:97:88:1c:0c:87:
         6f:3e:66:a9:b9:c7:90:92:6e:19:db:b2:ac:53:1d:99:e8:4a:
         c7:1b:c7:8c:81:4a:a9:65:20:d4:c8:04:13:db:d1:f1:ef:37:
         26:23:42:54:79:20:bb:51:c3:77:4c:7c:38:7e:7f:05:86:5a:
         d2:ca:6b:de:ff:91:b5:4c:b4:0e:6a:d6:2f:e2:87:c4:1b:d3:
         fa:2a:b9:84:43:ad:48:98:56:96:84:63:0f:e4:f6:bb:30:17:
         08:81:af:f0:8a:ae:e9:c9:10:7d:c1:9e:72:6d:ba:1a:6a:14:
         78:ba:01:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:53 2024 by rpki-client on console-fra.rpki-client.org