Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcwtmnceTAHP9UPnnvuvPZYPok6J4xz6R9ss7fZhuSfi/0/323830343a386534633a3a2f33322d3332203d3e20323733343136.roa
File:                     323830343a386534633a3a2f33322d3332203d3e20323733343136.roa (raw, json)
Hash identifier:          mQfWy6pBedpMehhMCz6K3XVr60vIIYntMLBrdVeJItg=
Subject key identifier:   31:0C:13:88:47:E1:DD:E2:52:DB:75:E0:BA:96:10:CA:0C:D7:0F:EB
Certificate issuer:       /CN=6E37DAE4C07E1D4AA91D9E359DCD8A23C17E8D60
Certificate serial:       75DC162E5F7D08BDCAD58F3C4EB824B3789AD8A0
Authority key identifier: 6E:37:DA:E4:C0:7E:1D:4A:A9:1D:9E:35:9D:CD:8A:23:C1:7E:8D:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E37DAE4C07E1D4AA91D9E359DCD8A23C17E8D60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcwtmnceTAHP9UPnnvuvPZYPok6J4xz6R9ss7fZhuSfi/0/323830343a386534633a3a2f33322d3332203d3e20323733343136.roa
Signing time:             Wed 21 Aug 2024 18:51:30 +0000
ROA not before:           Wed 21 Aug 2024 18:46:30 +0000
ROA not after:            Wed 20 Aug 2025 18:51:30 +0000
asID:                     273416
IP address blocks:        2804:8e4c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcwtmnceTAHP9UPnnvuvPZYPok6J4xz6R9ss7fZhuSfi/0/6E37DAE4C07E1D4AA91D9E359DCD8A23C17E8D60.crl
                          rsync://rpki-repo.registro.br/repo/CcwtmnceTAHP9UPnnvuvPZYPok6J4xz6R9ss7fZhuSfi/0/6E37DAE4C07E1D4AA91D9E359DCD8A23C17E8D60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E37DAE4C07E1D4AA91D9E359DCD8A23C17E8D60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:dc:16:2e:5f:7d:08:bd:ca:d5:8f:3c:4e:b8:24:b3:78:9a:d8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E37DAE4C07E1D4AA91D9E359DCD8A23C17E8D60
        Validity
            Not Before: Aug 21 18:46:30 2024 GMT
            Not After : Aug 20 18:51:30 2025 GMT
        Subject: CN=310C138847E1DDE252DB75E0BA9610CA0CD70FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:75:5b:54:36:a9:2e:c5:3f:19:07:8b:65:0b:
                    44:19:89:de:e7:49:dc:eb:4c:96:6f:53:9e:4a:98:
                    2e:e3:75:e7:08:79:ed:d7:17:b6:11:e2:9e:bd:5f:
                    57:f1:9e:d8:1e:16:ea:9b:d7:8d:4b:f9:bf:df:0c:
                    59:77:b7:15:2e:8b:7b:fe:4f:fb:17:98:ed:d4:99:
                    9c:59:b6:1f:6d:62:6a:14:67:cb:76:29:36:bf:0f:
                    7c:03:68:bc:94:42:a0:08:ec:82:34:16:27:fd:3d:
                    96:89:b8:af:d1:3f:fb:bb:96:5a:24:42:ed:c3:34:
                    e5:72:68:34:ff:a6:e7:dc:28:04:7e:7f:06:cf:b2:
                    0a:1c:20:c2:e3:a7:40:9a:02:39:c1:3e:f9:85:e5:
                    00:2c:02:8c:54:6e:e6:92:0b:13:8d:a0:56:04:d9:
                    48:1e:cf:4b:b2:ac:f6:fd:b6:27:ba:92:a1:8d:bf:
                    53:77:a7:fe:89:9b:b6:4b:5e:54:60:3e:79:ee:c4:
                    8c:1f:13:af:e0:9a:00:d3:37:e7:c1:51:c3:79:81:
                    b7:d4:64:5a:87:9b:f3:34:f2:65:ac:c2:51:15:a7:
                    63:7e:f2:d2:a3:39:e0:7a:8e:cb:45:de:ed:81:92:
                    78:c7:22:3b:eb:ed:87:69:75:fe:0a:20:82:c8:a4:
                    87:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0C:13:88:47:E1:DD:E2:52:DB:75:E0:BA:96:10:CA:0C:D7:0F:EB
            X509v3 Authority Key Identifier:
                keyid:6E:37:DA:E4:C0:7E:1D:4A:A9:1D:9E:35:9D:CD:8A:23:C1:7E:8D:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcwtmnceTAHP9UPnnvuvPZYPok6J4xz6R9ss7fZhuSfi/0/6E37DAE4C07E1D4AA91D9E359DCD8A23C17E8D60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E37DAE4C07E1D4AA91D9E359DCD8A23C17E8D60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcwtmnceTAHP9UPnnvuvPZYPok6J4xz6R9ss7fZhuSfi/0/323830343a386534633a3a2f33322d3332203d3e20323733343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:6a:ed:06:8c:b0:8d:ed:c6:3a:4c:b2:53:ea:3b:fc:bb:10:
         64:d3:5a:2c:c0:fc:13:f9:99:c1:11:4b:16:c1:68:55:42:d0:
         b7:27:16:ed:e8:92:0a:0e:dc:3d:24:a2:4c:26:a3:f1:40:c8:
         6c:e5:5d:f9:dd:70:79:e7:bf:7b:23:4d:0e:45:cd:55:d7:6a:
         f1:49:9e:84:fd:fc:2b:1d:ff:0e:a7:4e:67:24:bf:14:14:ab:
         97:b2:24:7c:44:b7:e7:cd:d6:dc:d3:a9:87:d4:a4:bf:83:05:
         91:91:65:51:78:fc:ba:6a:e0:eb:59:c4:d1:df:3c:5c:8a:2c:
         f4:00:da:72:da:e0:51:42:73:5e:d4:2f:49:c4:1a:2d:ae:6e:
         e0:db:7f:7f:3e:94:e7:ed:ea:31:4d:dc:d0:d5:cf:e0:d4:28:
         1c:86:d4:71:92:4a:91:55:22:1a:a2:50:26:db:2b:ed:49:65:
         98:aa:6e:a6:76:93:9a:5a:10:17:e3:a7:04:41:df:95:9e:82:
         ce:d7:15:99:b1:75:aa:4a:c3:77:5f:63:a2:46:b9:75:b9:ab:
         7d:d0:01:52:62:95:14:27:b5:56:06:de:8e:5e:d9:fb:84:ae:
         c4:1e:10:26:0b:02:2b:a2:b9:b2:e2:39:ff:8d:c0:31:67:2f:
         ee:bf:87:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:20:14 2025 by rpki-client