Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/323830343a373530383a383030303a3a2f33332d3333203d3e20323731303139.roa
File:                     323830343a373530383a383030303a3a2f33332d3333203d3e20323731303139.roa (raw, json)
Hash identifier:          ainJpvoIYVsdZpupqMNNefX3W/oHv1go0QzIsKVRVPc=
Subject key identifier:   6A:83:62:76:B6:05:B4:9E:29:11:47:B3:7D:90:FC:E7:0B:18:F7:10
Certificate issuer:       /CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
Certificate serial:       1947FDF8C242DD33D68DC0FE472092C0ED62A7F8
Authority key identifier: 6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/323830343a373530383a383030303a3a2f33332d3333203d3e20323731303139.roa
Signing time:             Tue 23 Apr 2024 19:24:45 +0000
ROA not before:           Tue 23 Apr 2024 19:19:45 +0000
ROA not after:            Tue 22 Apr 2025 19:24:45 +0000
asID:                     271019
IP address blocks:        2804:7508:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl
                          rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:47:fd:f8:c2:42:dd:33:d6:8d:c0:fe:47:20:92:c0:ed:62:a7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
        Validity
            Not Before: Apr 23 19:19:45 2024 GMT
            Not After : Apr 22 19:24:45 2025 GMT
        Subject: CN=6A836276B605B49E291147B37D90FCE70B18F710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:45:49:3f:09:d0:23:fd:9d:ab:2c:26:d2:ba:
                    1c:23:ae:73:3e:24:14:3e:ff:85:41:1c:f6:0d:40:
                    6f:bd:48:93:67:1b:2b:f8:35:85:b2:88:ac:bd:a3:
                    07:23:0e:11:b9:a0:59:e5:8e:f8:90:eb:2d:e4:10:
                    ec:cf:c9:d0:99:1c:c6:f9:95:55:4a:5f:09:88:b1:
                    82:8b:6b:07:51:a8:a4:9b:b0:2b:18:00:dc:0b:91:
                    97:3e:67:15:46:35:16:36:c9:00:5b:dd:a5:61:00:
                    ee:88:e9:57:c1:96:ab:19:80:dd:b4:17:00:43:21:
                    d8:d7:32:3b:f1:7f:55:aa:93:71:4c:bf:b8:3c:a1:
                    7b:7d:5e:9d:34:bc:2d:ae:c5:c4:de:25:e8:70:14:
                    87:34:50:81:28:67:dd:0f:0a:9a:0d:70:24:7c:69:
                    cd:55:86:8f:0c:dc:e9:cd:49:1b:d1:c5:24:3d:53:
                    9c:7e:e7:ff:52:f1:78:6b:9c:b3:ec:10:ec:32:bb:
                    1b:dd:e7:55:5d:43:c6:2c:e2:aa:72:de:17:94:9d:
                    22:e1:73:03:ba:3d:e3:8f:82:4e:6a:12:38:b7:d9:
                    e9:da:ea:e8:15:15:85:80:f1:fc:cd:17:ef:2c:c0:
                    8d:f0:3e:97:92:ac:87:65:84:7a:7c:f4:61:be:53:
                    f3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:83:62:76:B6:05:B4:9E:29:11:47:B3:7D:90:FC:E7:0B:18:F7:10
            X509v3 Authority Key Identifier:
                keyid:6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/323830343a373530383a383030303a3a2f33332d3333203d3e20323731303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7508:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         cd:44:6e:8b:89:89:99:b2:50:aa:ab:69:1f:e3:be:a6:96:05:
         de:05:34:ed:22:c0:01:53:4f:a3:5d:30:1c:68:71:69:e9:66:
         61:5d:c6:d2:bf:a0:42:05:e3:cc:fe:ee:c0:97:7f:34:8e:f7:
         06:b0:df:6a:53:8f:cf:07:8c:dc:ec:64:2a:23:b5:1c:c5:64:
         c1:46:c3:98:09:a9:e8:59:cd:f7:e1:c5:68:f3:55:bc:8c:48:
         57:62:c9:ac:f7:b8:9f:2a:0a:62:d0:bc:3b:9a:7a:4e:8f:32:
         69:94:2a:cb:05:ed:7d:90:1a:9a:3b:a7:99:88:13:21:8f:e4:
         9a:60:ea:21:1f:d5:a6:7d:0a:5e:40:73:e3:a5:31:2b:8b:ab:
         ae:b1:14:8e:8c:6b:b8:a6:f2:9a:a2:2d:64:6b:be:47:b5:bf:
         c7:55:0d:1b:c3:77:77:d8:2c:4d:59:45:44:03:bf:7a:23:31:
         68:ea:9f:34:2a:47:3b:60:3e:4b:8e:dd:05:cd:1d:33:9d:dc:
         b9:87:eb:3a:79:74:74:5c:04:a4:f1:8b:90:bc:4e:33:31:5e:
         04:84:10:67:09:47:62:36:61:5b:31:78:08:07:6c:97:e1:7e:
         47:c9:e8:02:4b:1a:98:b7:58:b0:b4:e1:84:71:76:ee:1a:e6:
         83:3f:04:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:07 2024 by rpki-client on console-ams.rpki-client.org