Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/323830343a373436633a3a2f33332d3333203d3e20323730393830.roa
File:                     323830343a373436633a3a2f33332d3333203d3e20323730393830.roa (raw, json)
Hash identifier:          oNa08+545r46BilzuCAqI/UVvmi3g62K/LBxrFlzNUI=
Subject key identifier:   FE:A5:32:80:4B:B0:6D:FD:ED:71:0D:86:75:06:02:3C:5E:6D:FF:91
Certificate issuer:       /CN=EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA
Certificate serial:       39736D2A4ACBFF14BD4F86108167F0F1FC3C1F75
Authority key identifier: EF:CB:4B:27:22:33:BF:7E:BE:0F:34:40:0E:C6:06:EA:1B:FA:E6:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/323830343a373436633a3a2f33332d3333203d3e20323730393830.roa
Signing time:             Mon 28 Oct 2024 19:43:12 +0000
ROA not before:           Mon 28 Oct 2024 19:38:12 +0000
ROA not after:            Mon 27 Oct 2025 19:43:12 +0000
asID:                     270980
IP address blocks:        2804:746c::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.crl
                          rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:73:6d:2a:4a:cb:ff:14:bd:4f:86:10:81:67:f0:f1:fc:3c:1f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA
        Validity
            Not Before: Oct 28 19:38:12 2024 GMT
            Not After : Oct 27 19:43:12 2025 GMT
        Subject: CN=FEA532804BB06DFDED710D867506023C5E6DFF91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a9:ea:db:16:22:3c:07:94:7b:c0:6b:92:47:
                    71:af:b7:7b:38:f9:a5:cb:0c:a4:70:72:e8:b8:6b:
                    9e:61:f2:ca:cf:74:22:e5:6f:58:30:1e:2f:a6:d0:
                    96:4a:d1:b2:71:e2:41:e2:82:1e:54:ee:ae:5d:18:
                    8c:c7:bb:2b:f4:2b:ee:c8:a6:c4:d2:bb:be:8b:4b:
                    bb:38:9b:e5:4e:c2:41:ea:46:71:40:7e:06:50:05:
                    30:ac:e9:f2:91:51:e1:9e:01:38:24:6e:6a:cb:16:
                    8a:9a:6f:0f:b9:5b:cb:82:dd:e7:36:44:aa:79:1a:
                    1e:83:b5:be:c9:52:e0:06:3d:7f:5c:a4:23:f7:15:
                    b2:43:d2:b1:ea:cb:0e:aa:eb:12:c1:6d:c3:7b:cf:
                    88:09:27:71:0e:32:ef:2b:16:83:6c:0a:a2:fc:d0:
                    49:d0:95:9f:21:e7:6f:cc:37:4f:68:66:54:a4:ab:
                    14:13:80:eb:84:be:dc:c5:c6:4b:75:96:dd:f8:72:
                    c7:78:44:e2:9e:ee:47:20:ff:68:f0:d3:2b:42:19:
                    b7:6f:db:ac:d0:eb:a3:9f:02:af:83:71:87:58:78:
                    20:62:af:b0:69:e1:2c:0c:b2:65:d3:c9:b9:5b:0d:
                    1a:21:6d:6f:c7:63:29:8c:a3:76:c9:20:a3:ea:b5:
                    d0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A5:32:80:4B:B0:6D:FD:ED:71:0D:86:75:06:02:3C:5E:6D:FF:91
            X509v3 Authority Key Identifier:
                keyid:EF:CB:4B:27:22:33:BF:7E:BE:0F:34:40:0E:C6:06:EA:1B:FA:E6:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/323830343a373436633a3a2f33332d3333203d3e20323730393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:746c::/33

    Signature Algorithm: sha256WithRSAEncryption
         be:f3:96:dd:f2:39:05:18:52:f6:79:26:3a:62:75:97:c5:d1:
         44:77:0b:67:d2:dc:94:d3:e3:90:69:69:7c:ac:b8:12:7c:59:
         09:f2:ca:41:bc:7b:16:ee:17:ed:b9:a9:63:8e:1a:91:c9:7c:
         61:72:23:62:3e:8d:62:73:4e:ea:32:74:be:44:70:d6:e2:16:
         41:1a:50:0e:bd:5e:14:81:49:9b:b0:ad:66:5b:0b:77:e3:e0:
         25:15:60:6a:fa:9c:4f:87:cd:ef:d9:1e:f8:55:eb:f5:54:be:
         15:9d:b6:0a:bd:7b:eb:c4:fa:37:ff:4c:aa:59:4f:54:82:d1:
         c9:17:40:4d:f3:7b:16:5c:7b:13:06:cd:9a:db:15:21:ca:14:
         23:3b:63:6d:2c:ce:20:a3:67:bb:14:4e:8f:e0:cd:9e:88:1a:
         17:f3:47:e5:55:f4:91:49:64:5a:23:9c:29:23:c4:4e:15:dc:
         2e:6d:f0:6c:d8:7a:02:86:d3:7d:52:18:df:1b:2f:80:d4:65:
         37:2f:d7:8f:91:d7:58:bc:4f:66:f0:93:a6:b1:b5:45:fe:c2:
         58:f7:51:41:6b:5c:81:e2:e9:7f:7e:3e:25:8c:c9:6d:f0:c8:
         d2:9a:7e:27:e7:10:77:a9:52:80:ba:5c:3e:67:cb:64:8c:a2:
         da:e4:c5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:58 2024 by rpki-client on console-ams.rpki-client.org