Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/323830343a366665383a3a2f33322d3438203d3e20323730363932.roa
File:                     323830343a366665383a3a2f33322d3438203d3e20323730363932.roa (raw, json)
Hash identifier:          GVNAHjdQrYOdqi4w33WEOJ0pNoA4kFNT2+qD5psjrvw=
Subject key identifier:   68:FF:AD:F4:AC:F5:34:CF:FE:62:E1:3E:8D:43:E5:E3:54:22:51:3A
Certificate issuer:       /CN=B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2
Certificate serial:       06730F22B4BA96B7DF49A1634F8DC34B53CECBFC
Authority key identifier: B5:3B:C7:F8:E9:15:6B:14:E1:1D:55:FD:8D:35:8D:0A:91:FC:E8:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/323830343a366665383a3a2f33322d3438203d3e20323730363932.roa
Signing time:             Fri 08 Nov 2024 18:55:29 +0000
ROA not before:           Fri 08 Nov 2024 18:50:29 +0000
ROA not after:            Fri 07 Nov 2025 18:55:29 +0000
asID:                     270692
IP address blocks:        2804:6fe8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.crl
                          rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:73:0f:22:b4:ba:96:b7:df:49:a1:63:4f:8d:c3:4b:53:ce:cb:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2
        Validity
            Not Before: Nov  8 18:50:29 2024 GMT
            Not After : Nov  7 18:55:29 2025 GMT
        Subject: CN=68FFADF4ACF534CFFE62E13E8D43E5E35422513A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:3d:2a:80:ec:eb:4a:fb:57:b7:1e:de:10:
                    9e:b4:e8:f7:5f:3f:de:e4:6f:13:d3:76:e0:70:eb:
                    70:b3:dc:1f:e7:b0:59:cb:21:43:fe:28:04:24:97:
                    48:5a:6b:af:6c:46:07:7b:5f:ec:a1:03:8b:63:a6:
                    17:07:54:d8:a4:fb:c1:de:df:0f:cf:46:bd:63:74:
                    4a:0a:2f:fb:63:54:15:ed:60:42:dd:c5:e0:e7:b6:
                    fc:16:93:e3:da:1a:5e:1d:c9:3b:51:e7:f9:e6:46:
                    04:ce:91:a0:cd:aa:8d:16:ff:b9:97:0c:19:06:19:
                    f1:cc:06:e0:42:80:5d:e5:52:7b:2e:15:3c:da:cd:
                    e1:88:ec:90:6c:49:11:fc:ac:8f:bc:4a:2f:30:5a:
                    22:c0:35:d2:b2:a0:de:d1:e1:90:cc:49:20:b9:a4:
                    88:12:39:7f:11:49:af:4b:04:a5:d1:50:2b:fc:50:
                    a3:e5:d4:f2:3b:5a:3c:93:b2:ec:22:c3:6e:2c:a5:
                    9b:59:b7:18:aa:24:48:eb:b4:97:3f:8c:59:19:5b:
                    5f:90:ac:bf:ff:14:46:3a:44:01:d8:01:af:de:1b:
                    67:ce:cb:d6:2f:f2:4f:ea:d3:77:03:5c:8b:60:dc:
                    b5:0f:6a:d4:92:4b:da:c3:ef:39:58:fc:55:fe:67:
                    89:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FF:AD:F4:AC:F5:34:CF:FE:62:E1:3E:8D:43:E5:E3:54:22:51:3A
            X509v3 Authority Key Identifier:
                keyid:B5:3B:C7:F8:E9:15:6B:14:E1:1D:55:FD:8D:35:8D:0A:91:FC:E8:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/323830343a366665383a3a2f33322d3438203d3e20323730363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fe8::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:6a:2f:45:4c:00:56:4d:ac:d0:5a:1a:2a:70:2c:e6:10:79:
         27:13:2e:62:e5:44:20:88:23:9d:6b:26:be:ce:a4:6f:f2:bf:
         72:32:e6:77:ab:aa:46:2a:02:07:3d:85:72:84:b0:38:01:a7:
         7e:12:f5:84:4c:35:c8:47:fd:de:87:22:10:cd:ab:17:e9:8e:
         f2:20:14:ff:64:14:f7:fa:c9:da:84:da:20:cb:2c:b8:ab:a2:
         1e:1f:3f:e4:11:a6:75:3f:88:1e:f0:65:b7:6a:bc:6e:e8:bb:
         24:32:70:21:89:da:91:bb:f0:11:e2:14:22:2c:83:d9:80:27:
         7e:b9:68:1c:0d:9f:2c:50:eb:f5:0f:2c:8e:e9:4c:80:de:88:
         38:5e:14:93:01:a6:21:8e:9d:7f:ed:17:fb:c3:b8:5f:a7:b2:
         3c:f8:7b:1a:f6:9f:1d:51:d5:b8:c0:64:6a:c1:3f:66:53:39:
         84:ed:9d:56:dc:50:6a:73:1e:63:50:65:12:40:50:2e:31:d9:
         7a:c6:e2:7c:87:ec:ab:1f:f3:ba:f4:91:3a:be:af:16:b2:a5:
         e2:a4:60:92:40:7e:61:59:9f:1e:b2:0a:c0:d0:b3:85:22:5c:
         47:72:92:4a:1a:b2:21:63:91:de:12:6e:91:f5:b6:e1:49:a2:
         02:69:35:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:18 2024 by rpki-client on console-fra.rpki-client.org