Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/323830343a336262343a63303a3a2f34322d3432203d3e20323636313636.roa
File:                     323830343a336262343a63303a3a2f34322d3432203d3e20323636313636.roa (raw, json)
Hash identifier:          jNaQW2xVSpTIdrTv/l1xkEsAneYffmPys/xa1wRFM54=
Subject key identifier:   47:BA:CA:59:9C:E3:AD:05:9B:8D:5E:C2:26:65:5D:D0:E4:FC:DA:EE
Certificate issuer:       /CN=A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63
Certificate serial:       7BAE62CF7D1E194777827BC7410D7E279A41929B
Authority key identifier: A0:E7:81:7C:46:BA:B0:14:CC:0A:8E:B2:B6:DC:C3:C0:D7:2C:6E:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/323830343a336262343a63303a3a2f34322d3432203d3e20323636313636.roa
Signing time:             Thu 27 Jun 2024 17:02:09 +0000
ROA not before:           Thu 27 Jun 2024 16:57:09 +0000
ROA not after:            Thu 26 Jun 2025 17:02:09 +0000
asID:                     266166
IP address blocks:        2804:3bb4:c0::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.crl
                          rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ae:62:cf:7d:1e:19:47:77:82:7b:c7:41:0d:7e:27:9a:41:92:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63
        Validity
            Not Before: Jun 27 16:57:09 2024 GMT
            Not After : Jun 26 17:02:09 2025 GMT
        Subject: CN=47BACA599CE3AD059B8D5EC226655DD0E4FCDAEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:69:b7:45:5b:92:1f:2e:c5:e7:5f:4f:7c:de:
                    e1:e7:21:1b:b1:06:57:3c:58:18:1b:46:c4:76:19:
                    53:12:ad:8c:8f:96:81:8a:e4:c3:17:d6:a6:98:16:
                    d5:fc:86:17:42:44:2b:0f:a5:2c:61:81:0e:20:94:
                    29:2f:ac:2c:22:da:9e:ae:e4:6c:0b:f2:48:ce:89:
                    29:dc:b4:77:98:e8:d6:59:2e:43:4b:30:6d:54:6a:
                    e3:df:00:45:97:e9:a1:d7:f3:98:c1:26:05:3f:6f:
                    98:67:23:eb:f7:62:4f:2d:5c:f5:af:d0:f0:10:45:
                    ad:a8:23:8e:89:bd:da:ed:3e:0a:67:dc:d9:7e:e4:
                    88:fd:b9:7f:77:b7:fb:c1:e5:e1:a5:79:f7:19:b7:
                    94:3c:0b:30:48:6f:b5:f3:51:1f:dd:a6:6d:5c:b8:
                    de:65:aa:5c:bb:40:c6:b7:e9:70:9e:9a:c0:fb:93:
                    08:fe:f4:e6:4c:0c:ff:eb:7f:8e:91:c3:c5:ee:d0:
                    51:e8:3c:98:62:9a:34:8e:f6:14:e1:83:3c:85:b4:
                    f1:87:8f:0a:e3:a0:65:b2:05:2f:c7:90:ff:c9:ab:
                    31:80:15:7c:b5:93:e7:41:ab:54:ff:3f:57:fd:bf:
                    51:e3:c3:ac:b9:d7:ab:64:82:c2:a6:62:29:9d:8e:
                    c5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BA:CA:59:9C:E3:AD:05:9B:8D:5E:C2:26:65:5D:D0:E4:FC:DA:EE
            X509v3 Authority Key Identifier:
                keyid:A0:E7:81:7C:46:BA:B0:14:CC:0A:8E:B2:B6:DC:C3:C0:D7:2C:6E:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/323830343a336262343a63303a3a2f34322d3432203d3e20323636313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bb4:c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         b7:e2:87:c6:b2:70:96:a2:1f:11:2e:21:c1:57:2f:86:81:29:
         ae:55:fb:26:8e:c1:b3:78:dc:79:c0:6d:38:1c:3b:ad:65:18:
         f2:8d:95:e3:88:a3:95:aa:16:e4:e0:7c:b4:eb:1f:40:6d:3d:
         4e:a5:68:b7:09:2b:e0:0a:83:31:9d:16:45:dd:f1:f1:c1:a1:
         2a:43:6e:96:9a:be:0b:16:2c:2f:e9:95:f0:48:59:d9:45:29:
         51:96:97:bb:6e:98:b2:c4:b4:ac:99:66:dc:3e:cb:59:40:4c:
         05:81:9a:d4:26:a1:4f:db:a3:65:be:08:29:fc:cf:1c:fc:38:
         4c:06:d9:75:17:d1:53:06:f1:b6:7b:17:20:f4:14:40:a2:5b:
         34:b2:9d:c6:8f:7e:b2:c1:8b:29:53:2e:b6:85:81:7c:63:da:
         6f:00:1d:00:88:2b:5f:6a:3f:4a:c4:3f:64:ea:58:2d:64:50:
         c3:2c:fb:20:e0:ec:b0:c9:95:e2:69:3c:79:d5:b7:06:31:23:
         66:0f:36:a6:00:d8:44:c2:73:45:f2:fe:50:bf:5c:f5:9a:ff:
         df:15:ee:f6:9c:40:62:70:80:61:dd:ed:f0:ec:ef:0c:32:a9:
         cd:29:96:19:4c:e3:e2:f4:9d:ac:bd:90:87:18:fe:40:cb:c6:
         5f:96:3f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:55 2024 by rpki-client on console-fra.rpki-client.org