Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a366330303a3a2f34382d3438203d3e2032373136.roa
File:                     323830343a303a366330303a3a2f34382d3438203d3e2032373136.roa (raw, json)
Hash identifier:          yMGRBOtkK0ekJyV2jLDQFzKkoEx9MvbgIXDpXPVlOu4=
Subject key identifier:   A9:64:6F:36:F3:84:4C:EA:47:C2:8E:D0:82:3E:CA:ED:C0:DC:25:A3
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       0DFE426B9FDF01F0810AD74B1D3A313D9E280D91
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a366330303a3a2f34382d3438203d3e2032373136.roa
Signing time:             Wed 03 Apr 2024 18:30:30 +0000
ROA not before:           Wed 03 Apr 2024 18:25:30 +0000
ROA not after:            Wed 02 Apr 2025 18:30:30 +0000
asID:                     2716
IP address blocks:        2804:0:6c00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:fe:42:6b:9f:df:01:f0:81:0a:d7:4b:1d:3a:31:3d:9e:28:0d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Apr  3 18:25:30 2024 GMT
            Not After : Apr  2 18:30:30 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:26:32:cb:8a:e4:c4:e8:2b:ff:66:49:94:17:
                    38:a6:fa:0e:fa:17:b1:6f:c0:62:ac:ac:f8:7b:cf:
                    59:af:9f:78:0e:29:58:4e:1b:61:73:63:5e:90:ef:
                    06:67:5b:11:58:42:07:32:f3:82:b6:74:9d:ca:d8:
                    c1:2a:44:6d:6e:a3:d9:6f:e1:61:ca:27:55:09:6c:
                    61:28:4a:5d:7b:60:b7:14:ff:2f:e2:b4:da:64:fa:
                    3a:29:d7:e6:81:bf:f8:59:26:68:97:79:5f:15:1d:
                    da:92:70:f5:82:42:5b:10:e6:d6:97:e4:5f:58:7e:
                    79:93:f4:16:02:8e:e5:92:8b:fa:d6:e1:3a:41:37:
                    7b:29:ab:5b:4f:8d:1b:3b:cd:be:38:a8:c9:28:ec:
                    a5:7b:01:b0:2c:6a:d8:c8:94:45:ba:1e:68:ad:93:
                    31:44:6c:5a:b5:5e:ca:3b:06:96:2c:c1:34:55:02:
                    9e:6e:52:70:a7:6c:90:3c:f3:0a:20:d1:2c:92:53:
                    84:56:13:02:c1:b8:8c:f3:d2:ea:7d:5a:81:11:f7:
                    d1:f1:57:3b:00:a2:56:c6:5d:65:92:81:24:69:85:
                    f0:d1:46:1f:d2:39:62:d1:e6:b3:ad:03:83:87:60:
                    e0:3a:97:2f:ae:97:79:41:86:7d:ac:e5:d0:c0:e8:
                    9a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:64:6F:36:F3:84:4C:EA:47:C2:8E:D0:82:3E:CA:ED:C0:DC:25:A3
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a366330303a3a2f34382d3438203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:0:6c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:9b:5c:c9:af:71:12:7f:ce:7d:a8:a2:ae:0e:7c:47:ee:00:
         45:be:2a:1b:c8:76:1f:5f:0c:a6:75:95:26:b6:b2:fb:52:d1:
         9c:24:5a:82:16:df:76:97:27:ac:26:f2:9f:b8:7a:0e:bb:1a:
         cb:42:2f:dd:e2:a3:b4:ca:6d:58:92:52:0b:f2:9c:fb:5a:24:
         be:c9:6c:35:39:2d:21:f9:76:a0:80:17:28:22:b6:c5:d8:38:
         a9:73:54:28:87:73:26:66:0b:0b:33:b2:98:6e:ba:6a:b0:40:
         dc:43:28:a9:c4:4c:c4:92:14:b8:6a:6a:4e:4e:e6:d0:2f:6a:
         a3:43:54:04:5c:a9:1c:fb:2a:be:f0:b2:14:80:8a:44:20:82:
         80:33:aa:64:19:54:84:46:85:bc:f0:f7:ce:9b:5f:e3:e6:d1:
         97:7e:6a:85:ed:b5:5f:c0:1c:a5:62:23:ef:39:60:70:d0:bd:
         33:85:50:a8:a4:9b:88:03:fa:08:d1:1d:0f:dd:b5:a6:ad:55:
         fc:42:1d:ee:71:60:0d:37:1c:a6:27:66:b9:9d:ba:37:07:b4:
         eb:56:b8:28:38:0c:47:8d:6b:e8:ae:31:3c:c0:fb:21:89:25:
         48:46:85:37:a9:34:26:fd:86:68:de:52:f1:5c:75:25:c6:b6:
         47:ab:d0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:33 2024 by rpki-client on console-fra.rpki-client.org