Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/323830343a336262343a3a2f33322d3332203d3e20323636313636.roa
File:                     323830343a336262343a3a2f33322d3332203d3e20323636313636.roa (raw, json)
Hash identifier:          /Ry9pBxbb87Oc8v475WN+3t3iBvaria9QsdM/gC4CIY=
Subject key identifier:   29:1D:7B:B9:BC:86:0A:C2:55:2E:57:A0:9B:AB:99:10:47:6A:13:0C
Certificate issuer:       /CN=A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63
Certificate serial:       2ACA8635D921630963738EF1186F9960792AACE3
Authority key identifier: A0:E7:81:7C:46:BA:B0:14:CC:0A:8E:B2:B6:DC:C3:C0:D7:2C:6E:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/323830343a336262343a3a2f33322d3332203d3e20323636313636.roa
Signing time:             Thu 27 Jun 2024 17:02:01 +0000
ROA not before:           Thu 27 Jun 2024 16:57:01 +0000
ROA not after:            Thu 26 Jun 2025 17:02:01 +0000
asID:                     266166
IP address blocks:        2804:3bb4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.crl
                          rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 19:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ca:86:35:d9:21:63:09:63:73:8e:f1:18:6f:99:60:79:2a:ac:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63
        Validity
            Not Before: Jun 27 16:57:01 2024 GMT
            Not After : Jun 26 17:02:01 2025 GMT
        Subject: CN=291D7BB9BC860AC2552E57A09BAB9910476A130C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:17:60:37:b6:e8:02:7c:74:50:b0:3f:c8:f8:
                    fd:7d:6e:de:2b:59:30:ab:ef:13:d1:2f:dc:5f:f6:
                    83:d2:6a:20:86:19:60:eb:bb:9b:3a:e2:92:19:a6:
                    03:83:c5:8e:ad:16:69:32:31:65:f5:71:4f:4a:cc:
                    80:88:c1:a0:30:5f:41:62:1a:8f:ff:6f:fb:2d:e5:
                    93:d4:f2:af:fd:16:e3:74:85:f5:3a:97:30:e2:82:
                    78:e2:ba:a8:6d:a6:00:80:f2:c0:a4:e6:f7:7e:86:
                    7e:13:a6:9c:30:e5:b8:b4:bb:34:3b:18:b9:8e:b0:
                    04:62:23:46:43:0a:93:14:d3:04:78:33:78:be:7f:
                    85:cb:f9:ab:c6:9e:f1:b1:94:f5:40:9a:14:cf:78:
                    b6:54:10:10:f9:e7:73:7d:0d:c5:df:95:bf:d4:b6:
                    c1:94:e0:fb:51:ed:bf:68:de:17:02:b8:c3:5a:f9:
                    a8:5b:45:6b:6f:f0:42:f7:4c:a6:67:0a:cc:39:fd:
                    4b:3e:e3:9f:81:27:e2:5e:d4:5e:e7:9e:44:dc:fb:
                    1f:40:59:06:94:bd:74:9c:ec:f8:62:29:81:96:cb:
                    66:e8:3c:e9:6e:cd:ac:a8:f2:80:a4:14:31:a7:eb:
                    c5:9b:e0:37:39:d9:e1:f4:ca:d4:54:71:73:e7:d3:
                    bf:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1D:7B:B9:BC:86:0A:C2:55:2E:57:A0:9B:AB:99:10:47:6A:13:0C
            X509v3 Authority Key Identifier:
                keyid:A0:E7:81:7C:46:BA:B0:14:CC:0A:8E:B2:B6:DC:C3:C0:D7:2C:6E:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/323830343a336262343a3a2f33322d3332203d3e20323636313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:00:7c:89:44:94:af:a5:90:ac:65:3d:a5:72:1e:bb:7f:44:
         8c:8f:36:03:7c:53:9f:ba:9e:57:c4:0e:ac:74:a7:ab:0b:27:
         83:02:c0:b9:36:12:ea:d0:03:e2:09:86:1c:ae:e2:b9:f9:71:
         ca:29:f6:dc:92:b2:94:c8:8e:b3:48:8d:38:c1:32:a5:91:ee:
         c0:fe:cf:4c:f2:5c:75:30:12:a8:6b:8b:05:8d:83:2f:fa:54:
         5f:98:39:b3:ff:a4:31:41:0e:26:81:00:b7:93:4e:eb:7e:28:
         c8:e6:51:a0:9c:b4:b3:53:81:10:b4:61:12:9e:38:5b:d9:7f:
         e4:a3:be:aa:85:8f:89:21:ad:87:71:c7:be:91:4b:53:c6:af:
         e5:a4:99:bf:ea:55:14:a4:94:b3:a2:3f:92:32:f0:45:28:c1:
         de:bb:48:44:b9:1c:ff:84:ac:30:2f:a2:0b:13:e7:c8:23:12:
         f1:06:14:e3:e9:08:bb:17:b1:20:e2:2c:75:fd:a3:20:6d:f0:
         6b:46:1f:f0:e1:ef:99:c8:dd:11:b4:af:ac:fb:4f:cc:e8:af:
         c2:05:07:7a:39:b1:73:d6:23:49:21:fa:c0:3f:f4:5e:b9:0d:
         3b:ff:de:6a:74:b7:79:a6:dc:83:6c:f3:b9:49:54:0f:1c:d1:
         d6:66:54:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:05:44 2024 by rpki-client on console-fra.rpki-client.org