Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7uoZxjRFpYCN1ewfL5qj294HjPebhQejiR9dnXb6oe2d/0/323830343a376539383a633030303a3a2f33342d3334203d3e20323731363334.roa
File:                     323830343a376539383a633030303a3a2f33342d3334203d3e20323731363334.roa (raw, json)
Hash identifier:          isnM+nklRCg4tLg51yC+TN74q/FMuWD0cW+RtF59tUY=
Subject key identifier:   78:6E:5F:FC:A8:D9:17:28:28:A2:D5:2C:41:37:83:55:1D:6F:3F:72
Certificate issuer:       /CN=D2568211B5DA60BB77462DB5E1209EE0F6A93089
Certificate serial:       0469ECD86BFAC0C67DB28CACEB8AD2BF9BEB38C8
Authority key identifier: D2:56:82:11:B5:DA:60:BB:77:46:2D:B5:E1:20:9E:E0:F6:A9:30:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2568211B5DA60BB77462DB5E1209EE0F6A93089.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uoZxjRFpYCN1ewfL5qj294HjPebhQejiR9dnXb6oe2d/0/323830343a376539383a633030303a3a2f33342d3334203d3e20323731363334.roa
Signing time:             Tue 25 Jun 2024 18:33:08 +0000
ROA not before:           Tue 25 Jun 2024 18:28:08 +0000
ROA not after:            Tue 24 Jun 2025 18:33:08 +0000
asID:                     271634
IP address blocks:        2804:7e98:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7uoZxjRFpYCN1ewfL5qj294HjPebhQejiR9dnXb6oe2d/0/D2568211B5DA60BB77462DB5E1209EE0F6A93089.crl
                          rsync://rpki-repo.registro.br/repo/7uoZxjRFpYCN1ewfL5qj294HjPebhQejiR9dnXb6oe2d/0/D2568211B5DA60BB77462DB5E1209EE0F6A93089.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2568211B5DA60BB77462DB5E1209EE0F6A93089.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:69:ec:d8:6b:fa:c0:c6:7d:b2:8c:ac:eb:8a:d2:bf:9b:eb:38:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2568211B5DA60BB77462DB5E1209EE0F6A93089
        Validity
            Not Before: Jun 25 18:28:08 2024 GMT
            Not After : Jun 24 18:33:08 2025 GMT
        Subject: CN=786E5FFCA8D9172828A2D52C413783551D6F3F72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:eb:ef:48:24:2e:53:d9:80:6e:5b:bd:c0:3e:
                    34:64:ab:5e:df:a3:29:6c:74:81:4a:44:ca:a3:5b:
                    79:94:98:f9:8a:1b:68:b0:9d:ca:ea:b7:e1:a4:32:
                    7a:03:ce:e2:76:23:60:37:54:c7:77:7f:d6:a3:56:
                    57:cf:d2:e6:72:92:ba:3d:60:3c:f1:75:12:4a:1d:
                    2c:8c:3e:15:7d:87:b2:aa:53:80:0b:c5:93:c6:34:
                    8d:13:3f:13:bd:83:ad:ec:8b:3f:1c:9a:31:db:80:
                    38:f0:22:32:a1:1b:fd:de:ec:2e:8e:7a:aa:4b:08:
                    42:19:e5:dc:d1:59:74:5f:9f:b8:de:f8:a3:83:be:
                    c1:f1:5a:fd:c3:08:64:f6:d1:56:b2:23:ef:71:40:
                    c0:9e:5c:f5:ec:59:13:bf:9b:8e:78:d9:ca:f7:f2:
                    2a:96:e0:d6:10:bd:ea:9a:a9:92:e9:44:20:a8:d1:
                    ba:d8:bb:6c:f0:f2:b4:f0:22:f6:c6:73:57:fc:3f:
                    ae:28:75:a6:57:e0:bb:2b:34:61:32:64:f4:86:56:
                    fa:f5:8d:ae:82:99:58:9f:d0:0a:f9:fd:35:7e:52:
                    d0:3f:ff:96:ba:76:8f:29:e2:fa:16:05:dd:70:a1:
                    72:1e:62:8f:b5:1e:29:f4:a3:18:c4:dc:44:27:d6:
                    30:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6E:5F:FC:A8:D9:17:28:28:A2:D5:2C:41:37:83:55:1D:6F:3F:72
            X509v3 Authority Key Identifier:
                keyid:D2:56:82:11:B5:DA:60:BB:77:46:2D:B5:E1:20:9E:E0:F6:A9:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uoZxjRFpYCN1ewfL5qj294HjPebhQejiR9dnXb6oe2d/0/D2568211B5DA60BB77462DB5E1209EE0F6A93089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2568211B5DA60BB77462DB5E1209EE0F6A93089.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uoZxjRFpYCN1ewfL5qj294HjPebhQejiR9dnXb6oe2d/0/323830343a376539383a633030303a3a2f33342d3334203d3e20323731363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e98:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6c:d1:24:2f:dd:71:56:47:d9:3c:b0:99:a6:28:11:a3:77:d7:
         00:fc:b1:c6:24:ea:b4:17:b9:58:10:26:ae:37:d6:32:c3:04:
         c1:6d:cf:37:ca:fb:53:ee:2d:39:cf:ef:19:28:a8:1f:b5:ab:
         de:69:90:b9:0e:b2:7a:80:d5:bd:8d:69:eb:dc:ca:1d:be:5b:
         0c:99:b4:cd:1c:56:26:47:b3:7f:b2:60:78:df:fb:4e:79:ae:
         99:61:a7:1c:9a:ad:65:3e:63:3e:58:01:54:68:29:a4:c0:ea:
         d6:78:2c:19:2a:6a:e5:a3:19:a4:eb:d0:79:f0:bb:3b:29:bb:
         ea:0f:e7:49:90:49:3b:83:55:95:c6:a7:97:41:4d:43:e6:41:
         c6:f0:29:4d:a7:35:00:df:5f:17:d0:df:c3:10:96:fd:5e:dd:
         de:7f:a2:06:7d:8f:dd:a6:0d:46:0b:23:ec:4f:3c:29:06:29:
         b6:b3:82:44:5f:49:51:8a:89:ef:d4:5b:98:76:58:8e:12:32:
         fe:e4:e2:64:36:f3:85:1a:b4:50:21:67:dd:e9:41:c4:b9:ec:
         c8:e6:81:88:e9:96:2f:44:35:62:39:6f:10:e5:7e:b5:b5:a1:
         ce:1b:b0:76:c3:e9:45:17:d4:84:29:eb:27:03:6c:db:7d:48:
         84:36:ac:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:45 2024 by rpki-client on console-fra.rpki-client.org