Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/323830343a373530383a3a2f33332d3333203d3e20323731303139.roa
File:                     323830343a373530383a3a2f33332d3333203d3e20323731303139.roa (raw, json)
Hash identifier:          hwJX4AG/Lky8YmkaURadR7fqqwtHu88WRLVhwkuykj0=
Subject key identifier:   02:5E:95:2B:3F:8C:B2:00:46:CD:C7:35:97:F8:55:BF:E7:AF:92:2D
Certificate issuer:       /CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
Certificate serial:       60FA480843C5B620AE6258FDC4730DCD9356858C
Authority key identifier: 6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/323830343a373530383a3a2f33332d3333203d3e20323731303139.roa
Signing time:             Tue 23 Apr 2024 19:24:45 +0000
ROA not before:           Tue 23 Apr 2024 19:19:45 +0000
ROA not after:            Tue 22 Apr 2025 19:24:45 +0000
asID:                     271019
IP address blocks:        2804:7508::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl
                          rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fa:48:08:43:c5:b6:20:ae:62:58:fd:c4:73:0d:cd:93:56:85:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
        Validity
            Not Before: Apr 23 19:19:45 2024 GMT
            Not After : Apr 22 19:24:45 2025 GMT
        Subject: CN=025E952B3F8CB20046CDC73597F855BFE7AF922D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:30:50:24:3b:a3:e5:28:3d:47:a2:e1:41:b9:
                    3a:75:8a:e9:88:1b:25:21:13:c0:4a:72:81:20:16:
                    b6:09:c2:ea:87:eb:3f:7e:9b:7e:53:2f:2a:a4:6d:
                    e6:d5:2c:6d:1a:1c:2f:27:3c:d9:36:0c:c8:e3:88:
                    1a:22:61:7f:8b:68:6a:cf:1e:6a:a7:aa:0f:b7:a5:
                    89:a8:a6:99:fb:37:97:63:23:58:39:3c:e4:be:fd:
                    ee:e4:9b:87:21:23:33:67:4e:08:6e:d5:78:79:10:
                    97:6a:45:16:9a:2b:c7:d9:85:c3:d8:e3:a4:4b:c6:
                    fa:81:f6:73:48:c6:58:9a:e8:04:4d:e5:a0:bc:36:
                    ab:02:70:c7:61:a8:d9:9c:94:c2:b0:4e:50:ea:68:
                    f8:b7:2f:b1:10:af:2f:08:82:f4:b6:de:7e:9a:7e:
                    ec:2f:88:9b:f5:51:d9:fb:e8:0f:74:04:21:15:28:
                    93:8c:f0:72:29:6c:c9:c9:bb:e9:03:c3:38:1b:24:
                    44:c7:28:e5:ed:2b:1a:79:95:d8:30:2a:89:16:c6:
                    4a:ef:a5:97:d7:09:26:b5:e7:d0:1f:2f:49:a9:93:
                    b8:fa:e8:1d:73:ea:54:63:f3:96:22:a1:75:f8:38:
                    e0:b7:db:5f:9a:d4:cb:1f:8d:fd:91:79:cb:eb:ac:
                    b8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5E:95:2B:3F:8C:B2:00:46:CD:C7:35:97:F8:55:BF:E7:AF:92:2D
            X509v3 Authority Key Identifier:
                keyid:6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/323830343a373530383a3a2f33332d3333203d3e20323731303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7508::/33

    Signature Algorithm: sha256WithRSAEncryption
         5f:d7:23:f7:4d:58:b7:d5:da:81:5d:13:a8:73:06:28:0c:0b:
         b7:47:74:8a:35:fb:f7:0a:4f:86:a3:7f:6a:62:4f:6d:ce:12:
         76:db:42:d7:d6:33:4d:22:9e:6f:ae:f0:35:d3:93:67:93:e8:
         6a:de:6f:51:00:29:19:19:34:e1:b9:fd:06:c5:fb:71:42:63:
         a3:a0:84:2a:88:0c:5a:1a:b5:5a:08:d7:9d:b5:68:71:38:0a:
         af:37:58:79:3b:f4:2d:17:4f:74:f1:a3:54:7a:ac:8e:4f:f4:
         a8:11:e7:91:d6:7e:03:d5:7e:96:e0:00:e5:88:2b:57:49:9a:
         a7:f5:03:e9:32:8f:2e:59:50:54:d3:9c:a2:59:8d:40:1c:2e:
         2b:93:73:13:c8:bf:b4:fc:64:99:3f:ac:e8:0b:65:6e:a5:84:
         3b:08:73:31:3c:3a:e4:b8:34:68:79:02:82:6e:28:57:0c:3f:
         05:82:e6:c1:41:cf:b7:bc:b0:82:4d:b5:7e:de:3f:26:74:d5:
         77:93:ed:ec:a5:60:20:f7:c3:50:0b:2a:fd:1f:6f:8e:0f:e1:
         e4:56:9b:c3:68:04:2e:f7:4a:18:31:fb:b3:1f:ae:df:2f:c3:
         5e:81:b4:b5:40:eb:71:4d:96:b7:01:9a:c6:84:a8:48:17:90:
         d6:80:50:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:43:51 2024 by rpki-client on console-ams.rpki-client.org