Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/323830343a333231303a3a2f33322d313238203d3e20323632373739.roa
File:                     323830343a333231303a3a2f33322d313238203d3e20323632373739.roa (raw, json)
Hash identifier:          HBgH6zxrbmrCsLjc8s5qy5tv0PyOCyRAKbqxJx46M0I=
Subject key identifier:   79:34:FF:74:25:E7:89:24:AB:F7:77:FB:3B:40:FB:7B:29:22:9E:86
Certificate issuer:       /CN=E069EE1BA9C7A36827171560AD990CCC81000EA7
Certificate serial:       0FCF1FCBB2949F9D605F1705E65701376BE3DDA1
Authority key identifier: E0:69:EE:1B:A9:C7:A3:68:27:17:15:60:AD:99:0C:CC:81:00:0E:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E069EE1BA9C7A36827171560AD990CCC81000EA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/323830343a333231303a3a2f33322d313238203d3e20323632373739.roa
Signing time:             Wed 18 Sep 2024 17:46:59 +0000
ROA not before:           Wed 18 Sep 2024 17:41:59 +0000
ROA not after:            Wed 17 Sep 2025 17:46:59 +0000
asID:                     262779
IP address blocks:        2804:3210::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E069EE1BA9C7A36827171560AD990CCC81000EA7.crl
                          rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E069EE1BA9C7A36827171560AD990CCC81000EA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E069EE1BA9C7A36827171560AD990CCC81000EA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:09:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:cf:1f:cb:b2:94:9f:9d:60:5f:17:05:e6:57:01:37:6b:e3:dd:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E069EE1BA9C7A36827171560AD990CCC81000EA7
        Validity
            Not Before: Sep 18 17:41:59 2024 GMT
            Not After : Sep 17 17:46:59 2025 GMT
        Subject: CN=7934FF7425E78924ABF777FB3B40FB7B29229E86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8d:2e:b7:4b:4a:1c:60:e3:34:dd:c5:ac:c6:
                    ea:ca:39:4d:08:8a:93:cb:fa:5a:79:43:0a:1f:0b:
                    d1:50:56:8e:91:b2:57:3f:96:cb:94:22:0a:90:dd:
                    38:9a:20:61:8a:e4:d8:83:28:94:d7:35:56:2c:b6:
                    53:65:4b:62:68:4b:05:fe:f4:fe:85:a5:ec:46:5d:
                    b5:f1:1e:37:80:92:33:ab:ac:cf:f9:f5:ca:3a:7d:
                    2d:59:42:74:a7:cb:34:be:bd:00:7b:22:d2:cb:6e:
                    92:57:b1:fc:ad:67:ca:9b:ea:be:5e:00:b7:78:e5:
                    f0:8b:4d:ed:f5:33:ca:3c:a9:97:10:90:df:6f:37:
                    73:b3:e4:99:9e:a8:0b:f0:86:38:45:d4:a5:45:0f:
                    e6:e3:6c:45:b9:bb:fd:f9:16:b3:99:61:f7:91:7f:
                    fb:b2:7f:1a:26:1d:61:87:1d:bf:fb:93:60:4f:7a:
                    ed:ee:68:0e:33:92:d6:00:60:e8:36:29:50:79:44:
                    4f:64:2f:3c:9f:54:70:aa:ba:93:5b:32:53:bf:84:
                    e4:24:e4:01:1f:03:cd:55:a9:4e:fc:31:fb:ab:f3:
                    c2:69:99:64:b7:72:6e:17:89:bd:e5:24:cd:d1:2e:
                    0c:54:9d:5d:f1:0c:35:73:b3:6b:c3:b6:c5:d2:a6:
                    56:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:34:FF:74:25:E7:89:24:AB:F7:77:FB:3B:40:FB:7B:29:22:9E:86
            X509v3 Authority Key Identifier:
                keyid:E0:69:EE:1B:A9:C7:A3:68:27:17:15:60:AD:99:0C:CC:81:00:0E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E069EE1BA9C7A36827171560AD990CCC81000EA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E069EE1BA9C7A36827171560AD990CCC81000EA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/323830343a333231303a3a2f33322d313238203d3e20323632373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3210::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:ec:40:e4:bb:2a:2f:18:7d:36:42:e9:db:2a:e9:47:2c:e2:
         91:35:97:bc:01:d9:8c:61:b4:c6:61:c7:97:88:6d:fe:a5:29:
         89:9f:3a:01:59:2a:ac:ca:84:3d:e6:03:93:4b:5c:02:1c:39:
         05:6d:ea:2a:61:e7:c8:8d:98:b2:e4:8c:05:fa:34:af:1b:02:
         f6:e5:61:33:3c:b4:78:e8:aa:82:29:cb:7d:99:00:c0:8b:b2:
         9e:43:58:d1:c5:8d:ae:57:e3:45:cf:a6:ba:2a:ce:0a:24:33:
         52:0a:f0:12:1a:ef:e9:25:72:b9:65:27:e7:9e:cc:40:bd:8f:
         12:90:78:ae:8d:05:11:ba:62:05:86:2d:34:6c:ba:53:21:92:
         62:e6:e1:64:e8:82:d3:70:a7:0d:ab:94:41:22:0a:70:fe:bc:
         71:78:21:da:e3:5a:85:e5:4c:12:ec:02:04:23:95:ba:29:d1:
         f3:30:5e:5a:40:c6:1e:94:99:2c:a7:c9:87:4d:50:4e:19:5d:
         d4:76:62:7a:0d:47:ed:21:51:37:fd:d4:a7:f4:31:b1:52:06:
         66:a3:49:4f:3f:ba:f1:c1:ec:a7:e4:32:a9:97:3a:ba:f0:a2:
         99:2d:c1:1e:ec:c2:19:05:50:4f:bf:3c:4e:ec:2e:d4:19:5c:
         5e:5a:49:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:52 2024 by rpki-client on console-ams.rpki-client.org