Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/323830343a376131383a3a2f33322d313238203d3e20323731333437.roa
File:                     323830343a376131383a3a2f33322d313238203d3e20323731333437.roa (raw, json)
Hash identifier:          +h5e7bftntD5M8u1Qj1g6vUd8RXWggfM/0P6+mJC4BM=
Subject key identifier:   F7:11:CB:DF:DD:B8:29:9F:68:25:2C:AD:D5:5D:70:97:1B:AD:8D:6F
Certificate issuer:       /CN=6D89E1C030716E144F50190CE17968635D5EC758
Certificate serial:       46FD2D1C4BFE42774E2BDAF16B6B27DC4A64B7FD
Authority key identifier: 6D:89:E1:C0:30:71:6E:14:4F:50:19:0C:E1:79:68:63:5D:5E:C7:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D89E1C030716E144F50190CE17968635D5EC758.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/323830343a376131383a3a2f33322d313238203d3e20323731333437.roa
Signing time:             Wed 05 Jun 2024 01:27:55 +0000
ROA not before:           Wed 05 Jun 2024 01:22:55 +0000
ROA not after:            Wed 04 Jun 2025 01:27:55 +0000
asID:                     271347
IP address blocks:        2804:7a18::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/6D89E1C030716E144F50190CE17968635D5EC758.crl
                          rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/6D89E1C030716E144F50190CE17968635D5EC758.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D89E1C030716E144F50190CE17968635D5EC758.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fd:2d:1c:4b:fe:42:77:4e:2b:da:f1:6b:6b:27:dc:4a:64:b7:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D89E1C030716E144F50190CE17968635D5EC758
        Validity
            Not Before: Jun  5 01:22:55 2024 GMT
            Not After : Jun  4 01:27:55 2025 GMT
        Subject: CN=F711CBDFDDB8299F68252CADD55D70971BAD8D6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7b:5a:8b:26:6f:ba:86:f8:ca:de:8c:bf:6d:
                    98:df:6d:72:78:3b:e5:03:90:f3:5e:5c:9d:b6:e4:
                    54:c2:ac:a5:92:c4:37:17:42:5c:04:a6:96:10:a1:
                    6f:b6:e2:e0:57:dd:da:68:f6:11:27:46:6c:06:dd:
                    06:3c:61:bd:de:a7:c9:f6:e2:7e:74:08:71:cd:fd:
                    67:19:c9:8d:e9:48:1b:b4:07:34:0e:4c:62:72:24:
                    3d:bf:6d:af:d7:74:91:21:ee:cf:71:0e:26:76:b6:
                    8a:1e:16:3b:95:49:8c:1e:30:89:23:cb:a3:b3:24:
                    4b:38:21:9c:15:07:5a:39:74:2f:c5:75:a9:6d:7f:
                    69:2b:28:e5:a2:bf:2a:45:02:b5:ba:cb:71:f5:ad:
                    e5:66:66:66:97:ef:e2:4c:f0:98:da:f8:7d:d0:ac:
                    6f:ad:5d:05:37:85:b6:65:5b:60:df:08:ba:18:8d:
                    bc:89:9b:37:8e:16:49:b5:09:1e:e1:86:b9:a9:d4:
                    56:05:06:c5:f2:83:44:02:b5:de:70:76:fa:2c:c4:
                    63:d0:57:0c:de:5f:77:80:77:42:d4:ee:69:3c:29:
                    7b:5e:6b:bd:88:77:e1:e0:81:6a:22:4c:c8:d8:3b:
                    e2:53:9f:bb:66:99:52:7f:a4:90:6e:62:d2:3b:00:
                    0f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:11:CB:DF:DD:B8:29:9F:68:25:2C:AD:D5:5D:70:97:1B:AD:8D:6F
            X509v3 Authority Key Identifier:
                keyid:6D:89:E1:C0:30:71:6E:14:4F:50:19:0C:E1:79:68:63:5D:5E:C7:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/6D89E1C030716E144F50190CE17968635D5EC758.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D89E1C030716E144F50190CE17968635D5EC758.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/323830343a376131383a3a2f33322d313238203d3e20323731333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a18::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:d3:12:f5:88:60:d8:be:0c:a7:84:13:95:14:fd:05:0f:2a:
         e1:f8:5e:0b:4b:00:81:f9:ce:8e:e0:06:31:b3:f7:dc:35:67:
         eb:8c:f9:36:30:80:02:c3:5d:08:05:30:5a:bf:19:51:8f:84:
         0c:7e:50:f2:4c:14:a5:43:f9:70:8c:f8:62:90:9f:16:f6:c0:
         93:fb:28:61:50:f5:ec:c9:7e:fd:8b:9a:e7:56:81:38:06:a0:
         ba:41:7d:7a:9d:1f:b9:89:e9:1b:8c:b0:4d:f8:9c:65:65:fd:
         81:44:c6:8c:93:fd:4d:95:da:39:7e:cb:aa:2e:1f:f9:b6:08:
         a9:4c:0e:ba:de:28:37:63:f2:da:45:0e:4a:9f:4c:69:6a:9b:
         45:b6:fd:9a:49:97:2d:cd:ee:33:78:60:e9:4b:96:3f:12:e9:
         37:c8:fc:e7:05:02:a7:cc:55:78:58:b6:b6:d7:8e:cc:24:b3:
         f0:38:aa:9b:1f:67:7c:c8:85:4d:47:81:88:55:8a:8e:27:d9:
         d6:c9:35:b3:7f:f4:e3:90:a7:75:ef:b0:3b:70:75:4c:a9:e9:
         3c:c3:fc:aa:c8:90:a5:8d:f3:06:9e:78:86:71:f2:12:cb:34:
         4a:a9:10:0f:30:9d:4f:4a:44:d3:69:91:5e:b3:33:11:ff:1d:
         52:5c:95:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:06 2024 by rpki-client on console-fra.rpki-client.org