Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/323830343a376566303a3a2f33322d3438203d3e20323731363536.roa
File:                     323830343a376566303a3a2f33322d3438203d3e20323731363536.roa (raw, json)
Hash identifier:          CumPGpzPt1yECyniI7C7eFaSo4T8K+zhPy6NvSNZrzY=
Subject key identifier:   9C:DF:66:65:A4:27:E5:0C:C8:FF:03:EE:24:99:E4:A6:D7:6B:20:54
Certificate issuer:       /CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
Certificate serial:       61909DD26062BEA394448F9AAFA3CC3439061831
Authority key identifier: 40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/323830343a376566303a3a2f33322d3438203d3e20323731363536.roa
Signing time:             Wed 05 Jun 2024 19:21:56 +0000
ROA not before:           Wed 05 Jun 2024 19:16:56 +0000
ROA not after:            Wed 04 Jun 2025 19:21:56 +0000
asID:                     271656
IP address blocks:        2804:7ef0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl
                          rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:90:9d:d2:60:62:be:a3:94:44:8f:9a:af:a3:cc:34:39:06:18:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
        Validity
            Not Before: Jun  5 19:16:56 2024 GMT
            Not After : Jun  4 19:21:56 2025 GMT
        Subject: CN=9CDF6665A427E50CC8FF03EE2499E4A6D76B2054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:77:8a:52:17:6e:28:3b:a2:6a:c7:b4:b0:23:
                    05:9b:c6:8b:db:b2:8d:e3:ed:2f:f9:20:1c:97:91:
                    80:55:9e:28:04:47:e3:d6:1f:eb:aa:d4:64:e3:4a:
                    df:52:d6:df:07:74:72:52:43:3b:59:00:ba:6a:44:
                    3a:3d:c5:d4:01:74:59:00:b9:49:82:78:3b:3d:5e:
                    e1:c2:5d:85:b4:87:ee:3b:cb:83:e8:21:ee:92:fc:
                    0a:2f:63:60:4d:e7:e3:76:e9:1e:09:d5:b2:34:d5:
                    cb:41:ad:1b:f1:40:1e:4a:6d:e8:f6:09:5b:f1:f2:
                    97:ab:b8:ec:0c:85:82:06:9c:18:bf:b3:d3:d6:b9:
                    a6:f7:5f:b1:4e:b6:e9:09:6e:61:14:08:6b:52:de:
                    4d:df:cf:bc:7f:ac:37:68:60:18:de:63:43:4f:c0:
                    7d:22:f9:01:d4:d0:6c:67:b6:c3:43:67:21:2e:72:
                    6d:6b:84:8f:aa:3f:04:de:4b:2e:b2:50:61:13:2c:
                    05:b9:b9:6d:25:62:7a:68:40:34:89:ba:3f:c4:fb:
                    7a:45:15:16:1a:9f:72:94:3e:7f:d4:46:e1:fc:d8:
                    4e:d1:7b:36:80:b9:c3:43:03:52:5e:07:17:2a:18:
                    26:24:32:13:af:e9:d6:59:f4:c9:e4:62:b0:d7:a4:
                    dc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DF:66:65:A4:27:E5:0C:C8:FF:03:EE:24:99:E4:A6:D7:6B:20:54
            X509v3 Authority Key Identifier:
                keyid:40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/323830343a376566303a3a2f33322d3438203d3e20323731363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ef0::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:d1:4e:97:2a:b5:f6:2c:17:48:ea:95:92:47:b6:d7:e7:fa:
         66:f7:52:69:68:1e:73:42:d3:a6:84:d5:82:15:e0:e4:bb:b8:
         61:ec:b9:dc:f5:82:13:14:b1:76:09:1b:99:54:cc:36:11:b9:
         b8:98:1e:35:2f:ef:7e:f5:5a:1b:50:f0:50:ec:82:7e:ca:cd:
         39:a9:91:30:b2:a4:b7:71:62:35:23:69:da:98:c4:61:7b:df:
         39:5f:68:60:e3:05:bc:66:69:65:00:a1:84:ef:25:53:70:fc:
         bd:e2:da:75:49:9b:41:18:90:ba:39:e0:f6:d4:14:c5:39:91:
         de:b6:e5:5a:ad:b6:0c:07:f0:4b:67:31:2e:e5:3d:d6:36:63:
         fa:27:11:22:8c:a7:68:76:91:5f:ae:d4:50:58:61:cc:8a:8a:
         27:c3:fa:12:4c:1e:d7:b3:27:2d:51:cf:c9:ec:0c:42:b6:34:
         24:fb:41:42:d6:d4:4d:2f:4b:8e:1c:30:e3:fd:45:a6:8e:f4:
         ee:90:2f:db:ba:b8:b5:e1:14:44:4b:99:ef:f2:a9:21:8f:bf:
         e7:5c:1f:41:3f:22:e3:b0:6f:35:68:f0:e4:d7:79:0b:0c:81:
         96:f9:b4:52:86:06:5c:c1:7e:a1:b3:fd:2f:0b:67:26:c8:d0:
         44:94:7f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:13 2024 by rpki-client on console-ams.rpki-client.org