Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/323830343a366463633a3a2f33322d3332203d3e20323730353536.roa
File:                     323830343a366463633a3a2f33322d3332203d3e20323730353536.roa (raw, json)
Hash identifier:          FftMmkwBSiE/PE1XLclMYv7qw9dZrrvjS2EnRAadX3Q=
Subject key identifier:   2D:D7:40:1D:8E:A6:93:A1:6A:A7:68:28:22:89:99:39:B0:D5:06:A2
Certificate issuer:       /CN=A768E8071BA41175FFBF0F813FD385B6FA5B1681
Certificate serial:       482325E4BD8212E077F6F943A8D944AEBD74CFFA
Authority key identifier: A7:68:E8:07:1B:A4:11:75:FF:BF:0F:81:3F:D3:85:B6:FA:5B:16:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A768E8071BA41175FFBF0F813FD385B6FA5B1681.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/323830343a366463633a3a2f33322d3332203d3e20323730353536.roa
Signing time:             Wed 14 Aug 2024 15:57:48 +0000
ROA not before:           Wed 14 Aug 2024 15:52:48 +0000
ROA not after:            Wed 13 Aug 2025 15:57:48 +0000
asID:                     270556
IP address blocks:        2804:6dcc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/A768E8071BA41175FFBF0F813FD385B6FA5B1681.crl
                          rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/A768E8071BA41175FFBF0F813FD385B6FA5B1681.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A768E8071BA41175FFBF0F813FD385B6FA5B1681.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:23:25:e4:bd:82:12:e0:77:f6:f9:43:a8:d9:44:ae:bd:74:cf:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A768E8071BA41175FFBF0F813FD385B6FA5B1681
        Validity
            Not Before: Aug 14 15:52:48 2024 GMT
            Not After : Aug 13 15:57:48 2025 GMT
        Subject: CN=2DD7401D8EA693A16AA7682822899939B0D506A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:19:82:57:95:37:73:b9:4a:0e:77:26:f6:
                    b0:dd:f1:85:b1:d4:7e:ca:b3:8d:d5:33:a6:60:f5:
                    57:f4:f5:df:42:01:12:67:cc:f1:55:f3:b7:db:78:
                    03:a2:78:85:de:f8:0a:a5:33:ab:90:0a:22:97:1a:
                    a3:63:16:fc:c7:df:49:64:ee:25:0a:4c:7d:2a:86:
                    7d:04:17:8a:93:18:5d:e9:b1:58:1d:d4:e1:df:b6:
                    85:4f:3c:1b:10:6e:98:76:93:ce:99:e1:21:15:bd:
                    25:be:7a:a8:89:b2:7a:53:5d:bc:55:81:60:6d:1e:
                    84:39:54:cf:cd:ae:fa:2c:cc:94:9a:63:73:72:46:
                    45:9f:7b:bc:58:42:20:56:22:7e:9e:dd:c8:60:eb:
                    0f:44:1a:bf:65:05:6b:63:37:c4:32:26:1d:37:38:
                    b0:2a:96:dd:6c:06:6e:e5:76:fb:93:65:af:9c:f9:
                    45:cc:af:03:24:ca:78:d9:be:e3:68:6a:cc:a0:a5:
                    ab:04:1d:68:66:37:08:b5:56:fe:31:2b:5c:52:51:
                    a6:f5:83:d7:6e:f4:fa:fa:6f:94:70:7b:24:7a:02:
                    6f:1f:87:d2:0e:e0:9b:cd:7f:0d:d6:a9:ba:f8:78:
                    d4:ca:e4:87:21:0f:a8:73:5d:0d:3b:31:c6:c8:c4:
                    d4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D7:40:1D:8E:A6:93:A1:6A:A7:68:28:22:89:99:39:B0:D5:06:A2
            X509v3 Authority Key Identifier:
                keyid:A7:68:E8:07:1B:A4:11:75:FF:BF:0F:81:3F:D3:85:B6:FA:5B:16:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/A768E8071BA41175FFBF0F813FD385B6FA5B1681.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A768E8071BA41175FFBF0F813FD385B6FA5B1681.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/323830343a366463633a3a2f33322d3332203d3e20323730353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6dcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:1a:0d:2b:32:b5:10:08:ca:c6:6b:44:bc:bd:96:9f:f2:50:
         f0:17:de:af:2b:b7:62:c2:b9:72:36:42:24:7c:08:fb:c5:a2:
         3e:9f:2a:be:ed:4b:b1:ed:c0:22:3a:67:37:a1:f4:8f:59:8c:
         fc:06:50:74:5d:d0:eb:19:2f:ac:ba:98:55:f5:20:5a:f6:e6:
         86:3c:88:63:c2:c1:65:f5:a8:d6:2e:f8:f1:81:97:82:d2:57:
         86:1c:c4:8d:d8:d3:35:a3:14:c8:f9:f8:e7:21:fc:47:39:7b:
         e6:66:cc:c8:99:82:f1:9f:23:1d:fa:fa:8f:c3:8a:ab:22:45:
         4f:21:00:dd:05:95:64:53:bb:b8:82:26:aa:2d:e1:db:e1:bf:
         02:2e:e1:75:a5:d9:55:bb:58:f1:67:32:51:15:c7:d6:f2:d4:
         71:d8:db:27:0b:f3:d7:29:ee:94:81:37:0d:eb:56:3b:a8:ce:
         89:73:47:61:6d:0b:0c:11:99:55:df:86:04:f5:69:c9:6e:d8:
         87:6d:e1:da:68:09:9d:f2:28:d8:a5:40:1e:d1:7b:d5:ab:6a:
         54:a3:10:1c:09:f5:59:ba:97:93:8b:80:77:e4:41:52:ed:f9:
         85:2c:98:aa:d6:ee:8a:96:de:e4:cb:96:52:af:26:56:e8:62:
         71:32:53:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:58 2024 by rpki-client on console-ams.rpki-client.org