Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a383030303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a383030303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          k1064uPInHUvT7AK/ononpIFjY3CT1YqdDTCq8SbMz0=
Subject key identifier:   D4:9C:EB:DF:39:21:F8:87:D7:B1:E3:F6:21:CA:AF:F1:36:84:32:C1
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       51EA9318668C835369747F6540865E14B719BADB
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a383030303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Fri 31 May 2024 22:40:38 +0000
ROA not before:           Fri 31 May 2024 22:35:38 +0000
ROA not after:            Fri 30 May 2025 22:40:38 +0000
asID:                     270764
IP address blocks:        2804:7110:8000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ea:93:18:66:8c:83:53:69:74:7f:65:40:86:5e:14:b7:19:ba:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: May 31 22:35:38 2024 GMT
            Not After : May 30 22:40:38 2025 GMT
        Subject: CN=D49CEBDF3921F887D7B1E3F621CAAFF1368432C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cd:12:0d:32:5a:4e:63:63:b9:b9:8f:1f:f4:
                    b3:75:ff:39:27:1f:ab:a0:e3:99:e8:15:b0:6a:b2:
                    b1:d6:e6:4e:1c:6c:06:5b:66:7d:5c:01:7e:32:e7:
                    82:dd:c0:d4:b6:2a:3b:03:e3:72:f6:6d:b9:08:62:
                    ba:26:69:0d:79:20:db:a3:43:14:d8:dc:3a:59:28:
                    b5:84:3e:d5:fc:2f:d2:fe:3c:6f:4b:32:66:8a:a5:
                    bb:51:04:d1:db:41:5f:8d:a7:98:6b:c9:d6:79:ab:
                    3f:af:b9:f2:ff:c1:c8:da:4e:3c:96:e1:37:49:5e:
                    cf:fb:9f:a9:e1:85:86:9e:6d:3c:29:50:ed:91:00:
                    c1:bb:4d:cc:51:40:df:db:3d:9d:c2:fe:a9:bf:50:
                    0f:fc:13:09:ee:5f:81:ab:64:ec:f4:71:ea:49:6c:
                    26:78:2b:93:c3:64:80:7c:ff:56:61:58:a1:e4:2c:
                    7e:49:70:1a:14:1f:b6:cb:11:44:ac:08:fc:88:12:
                    de:53:d2:0f:51:c2:2f:40:33:99:09:38:2d:ea:ce:
                    3c:b0:72:b1:f3:31:75:5e:d7:dc:7d:31:e8:74:27:
                    e1:f7:6a:b9:be:f3:09:90:a3:e6:2f:44:ef:a3:cd:
                    94:f1:bb:a8:ab:d6:f8:89:52:bf:0e:16:9c:76:5b:
                    3a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9C:EB:DF:39:21:F8:87:D7:B1:E3:F6:21:CA:AF:F1:36:84:32:C1
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a383030303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:ed:5f:71:63:90:32:38:2d:e7:60:23:a9:cd:e3:8e:73:bb:
         20:97:0b:7b:a6:fb:3c:16:d7:28:50:0e:09:8b:69:b0:db:53:
         95:39:25:ff:fa:21:c0:89:18:d3:0a:09:6f:32:a7:07:58:3f:
         93:51:ae:af:d6:e6:5f:6f:e7:1d:fd:36:8e:b2:64:7f:b1:9a:
         0d:d2:1e:68:83:26:68:fa:ff:47:c6:be:f1:d1:3b:ed:08:54:
         bd:92:7a:9c:8c:ce:e1:fc:ab:02:d0:01:76:f1:ef:ef:5c:cc:
         68:4e:aa:4b:09:c3:2c:ef:ba:fa:1f:3d:ae:93:30:bf:c4:ac:
         87:66:38:91:c8:11:31:17:d2:31:45:43:03:9f:d8:3e:e1:33:
         9f:2e:d4:fe:01:6a:b6:9c:af:97:95:b7:52:b8:5e:10:a3:3d:
         3e:a5:73:53:5c:30:b9:1c:05:ce:73:1e:09:77:1b:26:4a:1e:
         37:76:26:c4:4f:aa:7f:a6:69:21:72:96:8d:30:53:ba:05:fa:
         26:04:08:15:89:57:9c:65:35:3c:ef:fa:44:29:e8:17:92:9c:
         68:08:ea:b5:ab:a8:33:c0:3d:82:ba:1c:9f:f7:1a:69:6d:69:
         7f:a6:ad:5b:af:f0:ad:60:d8:5c:06:67:b1:9c:02:cc:f3:1d:
         71:f9:e9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:14 2024 by rpki-client on console-fra.rpki-client.org