Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a3a2f33322d313238203d3e20323635343931.roa
File:                     323830343a333466343a3a2f33322d313238203d3e20323635343931.roa (raw, json)
Hash identifier:          onqCwRj/c2P3HJ0pGQo+ONtKKIK4yKgONVKEmvm9Fuc=
Subject key identifier:   BE:18:28:5D:2D:7A:34:74:3A:97:CE:03:71:B6:15:3F:15:29:FE:D0
Certificate issuer:       /CN=C7C6B78C5511FBE3CD82900F0C9ABDE6A9E43C61
Certificate serial:       67EE6FD9DDD3F26A8E3E8A10D01BC2B249670235
Authority key identifier: C7:C6:B7:8C:55:11:FB:E3:CD:82:90:0F:0C:9A:BD:E6:A9:E4:3C:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C6B78C5511FBE3CD82900F0C9ABDE6A9E43C61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a3a2f33322d313238203d3e20323635343931.roa
Signing time:             Wed 11 Sep 2024 13:38:34 +0000
ROA not before:           Wed 11 Sep 2024 13:33:34 +0000
ROA not after:            Wed 10 Sep 2025 13:38:34 +0000
asID:                     265491
IP address blocks:        2804:34f4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/C7C6B78C5511FBE3CD82900F0C9ABDE6A9E43C61.crl
                          rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/C7C6B78C5511FBE3CD82900F0C9ABDE6A9E43C61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C6B78C5511FBE3CD82900F0C9ABDE6A9E43C61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:42:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ee:6f:d9:dd:d3:f2:6a:8e:3e:8a:10:d0:1b:c2:b2:49:67:02:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7C6B78C5511FBE3CD82900F0C9ABDE6A9E43C61
        Validity
            Not Before: Sep 11 13:33:34 2024 GMT
            Not After : Sep 10 13:38:34 2025 GMT
        Subject: CN=BE18285D2D7A34743A97CE0371B6153F1529FED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d4:8a:df:f6:07:87:1a:a3:b2:69:5a:39:ed:
                    72:68:c4:c1:a6:b9:5c:a6:a7:4c:44:48:e9:e3:11:
                    a7:e2:da:47:8b:ec:12:dd:d4:c1:c5:82:b7:8d:63:
                    cf:63:12:8c:71:4d:8e:0b:4a:f7:d0:7b:3b:66:bf:
                    0b:4e:28:0f:ca:2b:d2:93:c3:08:34:69:1f:f2:f1:
                    6a:ca:b4:fd:3e:a1:a2:64:c0:e9:43:68:53:95:6e:
                    cc:48:88:47:ec:ef:d5:2d:9c:21:00:de:47:83:87:
                    37:4d:19:bc:7f:db:4e:48:a2:82:c4:39:8b:77:d9:
                    d8:ea:31:b3:e7:57:a0:ab:ee:53:ee:16:d3:63:be:
                    d4:0d:d0:35:82:80:cc:04:e2:c2:79:ad:d1:c8:04:
                    f5:26:d7:3f:71:ec:5b:dd:d8:ab:64:5b:94:22:6a:
                    01:cf:e6:35:cc:21:36:b1:a9:f3:15:44:8a:c6:92:
                    68:ca:87:b9:d0:03:84:ad:a0:49:55:a7:68:ad:13:
                    53:7c:28:7a:f8:1e:b7:2f:53:55:5a:f2:09:ca:db:
                    fe:07:a9:1d:23:33:de:9e:7f:e2:b2:be:a8:99:ce:
                    85:a5:d7:c2:a5:cc:51:51:3e:fa:e8:1f:aa:21:74:
                    cf:d5:b0:38:5f:0c:b3:ba:80:a2:be:d6:99:1d:f3:
                    a7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:18:28:5D:2D:7A:34:74:3A:97:CE:03:71:B6:15:3F:15:29:FE:D0
            X509v3 Authority Key Identifier:
                keyid:C7:C6:B7:8C:55:11:FB:E3:CD:82:90:0F:0C:9A:BD:E6:A9:E4:3C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/C7C6B78C5511FBE3CD82900F0C9ABDE6A9E43C61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C6B78C5511FBE3CD82900F0C9ABDE6A9E43C61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a3a2f33322d313238203d3e20323635343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:f2:d4:73:73:ea:9e:f9:d3:d0:87:bc:20:fa:36:4f:58:7b:
         be:e8:91:fd:82:09:b9:c5:7a:0c:d7:73:59:0e:ce:99:44:09:
         85:32:60:22:23:6f:8d:c4:e2:fc:22:c0:76:86:8a:34:5b:e1:
         9f:7f:9f:af:a5:29:5e:93:b5:67:99:4e:d6:92:c2:b9:53:f1:
         df:cd:2c:7d:ec:af:db:df:e4:7c:1e:67:74:99:7b:71:50:88:
         3c:a4:c8:4b:a0:8c:32:86:a7:f3:1b:07:14:58:58:3c:8d:a7:
         4a:26:90:a0:df:2f:69:bb:3f:86:9e:bf:75:ac:46:a1:ce:49:
         00:04:77:7c:a4:e2:d3:2b:37:67:24:cb:90:d7:7a:01:4d:d6:
         00:5c:f0:70:6f:08:c5:d7:c0:34:40:f6:00:b5:f5:88:85:f0:
         34:91:b2:ad:54:1d:b2:c2:1e:7f:85:8d:8a:5a:e3:35:c6:9f:
         1c:38:ba:68:2e:65:56:32:4b:41:7b:a4:59:63:40:27:3c:9c:
         6b:d4:05:f3:2d:2a:67:a5:8e:d0:fb:70:c4:d6:e3:6d:a3:b0:
         03:43:56:c5:39:68:78:c4:91:a8:c8:36:1e:19:66:c1:48:29:
         fc:17:b2:b3:b5:d0:b3:11:80:74:6f:2d:73:f7:61:85:04:ea:
         83:78:5d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:11 2024 by rpki-client on console-ams.rpki-client.org