Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/1/323830343a363364383a3a2f33322d3334203d3e20323639333837.roa
File:                     323830343a363364383a3a2f33322d3334203d3e20323639333837.roa (raw, json)
Hash identifier:          UxwLtQXfv50ubWYuaE/m89Rm464qsgBMPc686aiiUjs=
Subject key identifier:   EB:87:4E:AB:BE:56:B8:DD:5C:4D:97:7B:44:23:7A:CA:9B:51:02:FB
Certificate issuer:       /CN=C7B317212DB90FCD08BA0577C6C41F8E21F91280
Certificate serial:       6E0263C3D8D3246FFEB057C291784D8ABB161C02
Authority key identifier: C7:B3:17:21:2D:B9:0F:CD:08:BA:05:77:C6:C4:1F:8E:21:F9:12:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7B317212DB90FCD08BA0577C6C41F8E21F91280.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/1/323830343a363364383a3a2f33322d3334203d3e20323639333837.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     269387
IP address blocks:        2804:63d8::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/1/C7B317212DB90FCD08BA0577C6C41F8E21F91280.crl
                          rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/1/C7B317212DB90FCD08BA0577C6C41F8E21F91280.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7B317212DB90FCD08BA0577C6C41F8E21F91280.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:02:63:c3:d8:d3:24:6f:fe:b0:57:c2:91:78:4d:8a:bb:16:1c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7B317212DB90FCD08BA0577C6C41F8E21F91280
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:af:e2:c7:a6:dd:de:d3:c0:78:d3:d2:69:d8:
                    08:4e:5e:0c:61:e5:cd:1e:54:a2:8d:16:93:ac:71:
                    be:48:96:6b:29:18:2b:c7:d1:00:46:3a:a5:bb:b6:
                    a0:ef:c6:85:bc:df:78:8f:e6:37:3f:95:48:2a:0a:
                    30:f9:ac:54:cc:9d:26:df:d7:e7:c9:d7:f7:e2:eb:
                    ba:16:73:08:07:1e:79:c6:3f:f0:26:8b:67:07:96:
                    14:ce:a6:5f:0d:0c:8d:61:81:92:74:a1:70:d5:d3:
                    04:1c:2d:ee:23:5b:ff:3b:c2:d1:9e:d2:0b:61:42:
                    1f:02:2b:e3:06:21:6e:45:a1:6d:a4:45:00:a3:49:
                    0c:78:f7:74:b6:45:00:1b:2a:55:54:21:1f:0b:3f:
                    81:64:e3:e7:7f:d9:f7:99:21:5e:7b:c9:0a:03:45:
                    c6:ef:2f:9b:fd:2b:29:c7:73:ad:10:67:42:cd:59:
                    6d:f7:d9:60:f3:62:b8:05:25:89:17:1b:ea:d9:ac:
                    60:b8:99:54:3f:fb:69:ba:8b:7d:9d:db:eb:40:ee:
                    6e:c1:fb:c5:ed:04:bc:e9:2a:98:44:41:59:21:aa:
                    6a:eb:e5:3a:60:93:5c:64:20:ec:5c:04:84:5f:fc:
                    e3:b1:9a:de:be:55:61:46:8f:e2:7e:4c:31:11:42:
                    46:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:87:4E:AB:BE:56:B8:DD:5C:4D:97:7B:44:23:7A:CA:9B:51:02:FB
            X509v3 Authority Key Identifier:
                keyid:C7:B3:17:21:2D:B9:0F:CD:08:BA:05:77:C6:C4:1F:8E:21:F9:12:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/1/C7B317212DB90FCD08BA0577C6C41F8E21F91280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7B317212DB90FCD08BA0577C6C41F8E21F91280.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/1/323830343a363364383a3a2f33322d3334203d3e20323639333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:6e:ed:ac:2c:dc:2d:43:3f:e8:bd:6a:73:58:93:6c:38:40:
         40:8a:be:aa:5b:59:11:c6:94:ce:89:ad:6d:eb:07:38:52:4e:
         49:c0:41:27:38:52:21:cd:fa:37:b4:f3:25:93:25:30:c4:1f:
         9e:74:bf:12:e4:d5:f2:f4:7b:9b:77:9e:58:35:7e:cf:da:f1:
         fd:b0:5d:6a:31:46:90:1f:c2:df:cb:69:2e:e9:ee:69:13:c5:
         b6:9f:38:68:5c:10:86:8e:33:3a:50:51:ec:2d:c9:09:ac:ff:
         b3:b7:c6:ff:e7:a1:5a:21:db:b6:ab:2f:97:b4:46:e0:82:3d:
         cb:ce:65:1d:f2:0d:c7:cd:08:20:de:b1:27:c1:d0:e2:b5:9c:
         19:2b:5f:a6:f1:b3:44:3d:88:e1:4e:16:3c:07:c5:65:df:b8:
         38:8b:0a:17:fa:32:4a:ca:07:40:cc:79:9b:10:b4:4d:9f:c3:
         01:9c:d5:6c:fa:b6:f0:64:cc:a0:6c:b3:0f:61:86:ee:06:1f:
         0b:e0:00:c8:73:2c:45:13:8d:da:cf:19:a6:cb:25:de:58:9b:
         0d:fa:dd:a8:ac:9e:bc:bd:ed:96:af:d6:d0:8a:0a:b1:13:bb:
         65:c3:ad:ec:35:ec:c1:3f:e4:24:e4:0b:cc:19:cb:2a:61:99:
         6f:cf:f9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:18 2024 by rpki-client on console-fra.rpki-client.org