Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a343030303a3a2f33342d3334203d3e20323637333633.roa
File:                     323830343a346335303a343030303a3a2f33342d3334203d3e20323637333633.roa (raw, json)
Hash identifier:          21OTQl4VI3WP27HhQ3zS2hl8Xqx84rwkNnxBJQxcypg=
Subject key identifier:   1E:D7:8A:85:6E:01:48:7E:D5:05:05:83:85:CC:C8:24:4C:63:4C:6B
Certificate issuer:       /CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
Certificate serial:       6047BC20AF00B7F498C994929F5DCB54CB282F10
Authority key identifier: D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a343030303a3a2f33342d3334203d3e20323637333633.roa
Signing time:             Thu 04 Apr 2024 13:53:50 +0000
ROA not before:           Thu 04 Apr 2024 13:48:50 +0000
ROA not after:            Thu 03 Apr 2025 13:53:50 +0000
asID:                     267363
IP address blocks:        2804:4c50:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl
                          rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:47:bc:20:af:00:b7:f4:98:c9:94:92:9f:5d:cb:54:cb:28:2f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
        Validity
            Not Before: Apr  4 13:48:50 2024 GMT
            Not After : Apr  3 13:53:50 2025 GMT
        Subject: CN=1ED78A856E01487ED505058385CCC8244C634C6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5f:86:de:b1:a4:66:49:45:70:d6:ae:cc:bf:
                    c0:41:2e:69:e9:79:12:ab:e3:8b:c2:9e:13:0d:cc:
                    76:e7:7f:43:0e:9b:a1:54:bb:be:c0:77:ac:fd:14:
                    b8:9c:11:20:61:bb:0f:96:19:9e:2f:53:72:44:51:
                    cf:bc:c1:97:92:81:ab:52:87:83:55:b9:19:ee:4f:
                    ff:8f:d5:51:b9:4f:e5:dc:35:ee:51:c0:3d:35:d1:
                    99:80:71:10:49:99:09:ce:4b:94:c7:55:bc:46:0d:
                    6d:db:75:4f:3d:09:e3:2d:e2:3a:c0:c1:ee:dd:1f:
                    2d:32:ca:b5:f1:c7:f7:ad:a0:64:17:e2:5e:e0:ed:
                    e4:b0:1e:49:b9:ef:87:9a:9b:bb:df:8f:6b:61:03:
                    8f:30:db:8d:23:45:5a:c0:1e:1c:b2:fe:da:ce:c8:
                    1e:10:33:04:ce:96:60:ae:9a:94:fb:56:87:eb:35:
                    6a:b4:ea:19:e2:42:fc:57:50:4b:87:ca:bc:80:c1:
                    33:e1:24:f7:10:86:37:20:d3:d8:85:11:60:3c:43:
                    a9:4e:42:87:a7:37:ea:60:78:89:c8:7f:13:23:89:
                    11:4c:08:e3:00:4a:1d:19:40:95:71:c0:2a:14:65:
                    8e:32:1e:52:f4:47:8a:db:18:e5:08:d0:92:ce:59:
                    90:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D7:8A:85:6E:01:48:7E:D5:05:05:83:85:CC:C8:24:4C:63:4C:6B
            X509v3 Authority Key Identifier:
                keyid:D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a343030303a3a2f33342d3334203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c50:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9e:3b:4a:6a:30:76:a2:c0:1f:87:14:b2:a9:9f:89:42:07:b8:
         e8:ee:d4:35:b2:78:06:7a:ac:a6:88:b6:57:59:76:d1:7b:2e:
         48:e8:7c:c8:b8:80:e6:2c:88:09:97:5f:47:37:b0:52:52:f8:
         58:44:88:92:4b:d5:9d:76:52:ad:8b:16:22:e4:ff:85:24:52:
         9b:e4:67:9b:e0:8c:90:fb:fd:3e:0c:59:7d:a7:98:99:da:ab:
         23:91:34:73:21:6f:f5:48:7d:f1:b4:cc:66:92:43:1d:b1:cf:
         a3:ec:4a:d3:2c:1f:e0:8c:4b:2e:25:a6:5b:87:6e:30:4e:30:
         ff:e2:6d:89:1c:a1:ae:6f:d5:15:ec:27:f7:be:fe:a7:07:9a:
         27:ef:ff:6f:8a:96:67:25:cb:da:23:0f:8b:81:06:d5:61:d4:
         09:9b:aa:e6:db:77:b0:06:e2:f5:cb:ca:27:de:34:9e:b8:3f:
         03:6b:08:55:ec:5f:a3:b2:48:09:8d:3e:ab:2b:cc:8f:04:db:
         e2:ec:a4:1e:0a:ab:ad:f0:49:9f:b0:95:e0:ca:44:ce:be:b2:
         11:e5:dc:cc:0d:a8:45:e2:da:4a:88:1c:b6:e3:72:cc:d7:43:
         8d:78:39:1e:81:68:f6:54:59:3c:31:73:2b:34:04:4e:4e:a7:
         8e:a9:1d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:39 2024 by rpki-client on console-fra.rpki-client.org