Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/323830343a376233633a3a2f33322d313238203d3e20323731343139.roa
File:                     323830343a376233633a3a2f33322d313238203d3e20323731343139.roa (raw, json)
Hash identifier:          I26l5yTR/Tdu5Re7aRrk0Avk4bDOdbGAeMRGGDJOUUM=
Subject key identifier:   99:E2:5C:DF:80:6D:3F:71:2E:B2:9E:24:0B:17:77:A3:E9:97:BE:9F
Certificate issuer:       /CN=6686C98E5028794E9E46723E7D80810F92D9AECF
Certificate serial:       2C81AA1A5D63188CA9D705DD445E49A0EC2C3C0B
Authority key identifier: 66:86:C9:8E:50:28:79:4E:9E:46:72:3E:7D:80:81:0F:92:D9:AE:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6686C98E5028794E9E46723E7D80810F92D9AECF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/323830343a376233633a3a2f33322d313238203d3e20323731343139.roa
Signing time:             Mon 29 Jul 2024 12:46:08 +0000
ROA not before:           Mon 29 Jul 2024 12:41:08 +0000
ROA not after:            Mon 28 Jul 2025 12:46:08 +0000
asID:                     271419
IP address blocks:        2804:7b3c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/6686C98E5028794E9E46723E7D80810F92D9AECF.crl
                          rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/6686C98E5028794E9E46723E7D80810F92D9AECF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6686C98E5028794E9E46723E7D80810F92D9AECF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:81:aa:1a:5d:63:18:8c:a9:d7:05:dd:44:5e:49:a0:ec:2c:3c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6686C98E5028794E9E46723E7D80810F92D9AECF
        Validity
            Not Before: Jul 29 12:41:08 2024 GMT
            Not After : Jul 28 12:46:08 2025 GMT
        Subject: CN=99E25CDF806D3F712EB29E240B1777A3E997BE9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:de:be:e9:13:57:cb:42:c3:2e:57:ab:6f:f8:
                    ab:e1:83:e0:23:35:31:8d:a6:2a:fa:1a:eb:8b:9d:
                    c0:d2:8b:dd:79:0b:f2:2c:57:12:94:da:be:b8:91:
                    ab:0c:9f:d1:a2:ed:10:21:6b:7d:8a:f2:88:cc:cd:
                    68:9c:1d:1f:09:d9:5b:4e:cd:90:05:ad:4b:e6:ee:
                    40:34:c8:cc:c9:af:2e:ce:f7:eb:8d:db:61:41:33:
                    bb:71:73:d0:b5:35:38:a1:03:2b:1c:39:70:de:e6:
                    5e:01:78:52:7f:04:c3:0c:bc:73:6c:07:7d:38:43:
                    61:9a:6b:45:e7:51:ef:74:be:cf:8d:7c:e5:fe:3e:
                    c7:09:cd:9e:ec:79:f0:ef:9c:72:22:0f:26:d3:bf:
                    33:6c:e0:b2:a2:e0:47:48:0c:93:97:a5:e7:1f:9f:
                    5c:ab:9e:00:b8:5a:3b:53:c6:52:95:2c:9b:04:9e:
                    db:ef:b8:75:90:4d:68:db:b9:3c:5e:65:f0:88:2a:
                    a6:a6:25:a4:37:32:ec:98:e3:63:5b:a7:60:41:b0:
                    31:9f:f5:3a:82:4b:a7:16:ad:ec:1c:c4:89:1e:51:
                    71:34:83:5b:6d:9b:12:aa:3e:0f:1c:dd:aa:59:3b:
                    38:2a:7c:75:d9:74:e9:6b:d3:b8:54:25:96:4a:2b:
                    ce:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E2:5C:DF:80:6D:3F:71:2E:B2:9E:24:0B:17:77:A3:E9:97:BE:9F
            X509v3 Authority Key Identifier:
                keyid:66:86:C9:8E:50:28:79:4E:9E:46:72:3E:7D:80:81:0F:92:D9:AE:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/6686C98E5028794E9E46723E7D80810F92D9AECF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6686C98E5028794E9E46723E7D80810F92D9AECF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/323830343a376233633a3a2f33322d313238203d3e20323731343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:dc:c8:fb:b1:47:2f:cf:54:24:79:c8:48:94:5a:e6:7d:1a:
         a6:51:cd:03:f3:f2:05:f0:2c:48:b1:ae:1d:f0:58:a6:11:a8:
         a8:93:29:bd:c4:cf:14:31:81:4b:7e:e4:8b:fc:61:1e:b2:a0:
         ad:b8:fb:69:99:61:d2:5a:ca:da:01:81:f7:4f:84:7b:11:d3:
         ef:35:2a:14:5c:22:ae:26:3d:39:5f:e3:8c:7a:ea:79:b4:00:
         56:30:32:28:97:02:0f:8a:7c:28:44:22:42:d6:fb:09:cc:31:
         a3:c3:e7:ad:d6:6f:13:fc:7e:e9:ca:3f:ac:69:5a:4b:51:29:
         60:3e:3e:62:f2:db:e7:1e:ab:51:99:57:7e:27:b9:f9:c4:8b:
         46:e9:16:18:95:16:a3:24:9e:ca:0d:4f:61:98:30:bd:ae:22:
         a0:38:4b:18:e5:f9:fb:5b:ff:fc:ad:62:33:e3:8c:92:3e:21:
         39:69:de:19:ac:e3:70:8a:d1:48:70:de:9b:51:ab:1f:9d:e0:
         9f:9e:c4:38:47:b7:58:b0:6d:9e:2c:b0:65:ad:4c:6b:56:d4:
         e6:e7:3c:16:1e:3d:99:90:67:4e:21:d8:e2:fb:2c:51:91:ce:
         60:57:dc:d1:e6:c6:23:6e:56:e4:76:f6:b2:e8:ea:11:5c:9d:
         e1:64:92:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:53 2024 by rpki-client on console-fra.rpki-client.org