Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/323830343a373436633a3a2f33342d3334203d3e20323730393830.roa
File:                     323830343a373436633a3a2f33342d3334203d3e20323730393830.roa (raw, json)
Hash identifier:          +syTGvphMkuKvMYmmqzO0mUrIO/oxoV/YRF1yqdaj4U=
Subject key identifier:   51:3E:D2:6A:D5:B0:69:3D:D9:EF:10:E5:0F:60:6D:35:D0:8E:A8:54
Certificate issuer:       /CN=EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA
Certificate serial:       652BD0AC3F2E2674AC91984D7B8EA7527178B1C3
Authority key identifier: EF:CB:4B:27:22:33:BF:7E:BE:0F:34:40:0E:C6:06:EA:1B:FA:E6:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/323830343a373436633a3a2f33342d3334203d3e20323730393830.roa
Signing time:             Mon 28 Oct 2024 19:43:12 +0000
ROA not before:           Mon 28 Oct 2024 19:38:12 +0000
ROA not after:            Mon 27 Oct 2025 19:43:12 +0000
asID:                     270980
IP address blocks:        2804:746c::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.crl
                          rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:2b:d0:ac:3f:2e:26:74:ac:91:98:4d:7b:8e:a7:52:71:78:b1:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA
        Validity
            Not Before: Oct 28 19:38:12 2024 GMT
            Not After : Oct 27 19:43:12 2025 GMT
        Subject: CN=513ED26AD5B0693DD9EF10E50F606D35D08EA854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:57:03:b0:f6:e8:2f:f0:90:d3:ae:f8:c7:33:
                    6b:eb:0c:c3:cf:7d:4e:85:c5:dc:f3:ae:54:c7:8a:
                    d9:53:87:bc:07:b4:ed:94:d2:c9:12:9c:d7:88:95:
                    26:74:ac:60:38:f5:fb:c8:72:b9:e6:52:c2:d2:cf:
                    b3:c4:79:3c:f3:f0:35:8d:92:ed:b0:ba:15:b9:0e:
                    82:43:fa:3e:76:31:71:92:59:da:8b:5b:b8:f0:5f:
                    8e:54:3d:87:ae:f1:59:92:5f:f3:31:b1:0d:29:13:
                    d7:ab:8f:22:a9:2e:f8:a4:f2:d4:c2:80:84:0c:be:
                    8b:1d:bb:3d:b4:9a:a1:be:3c:35:05:fb:22:9f:7b:
                    64:35:a4:75:ed:29:73:73:20:26:fb:3f:e0:c5:a1:
                    e7:d0:2f:d0:13:77:3a:59:47:4b:ba:65:f0:2d:20:
                    6c:be:4c:e7:ac:c7:5f:60:75:f6:a1:0e:54:ea:61:
                    ec:39:0a:4e:b2:11:49:f1:c4:2c:2b:f2:f1:9d:a0:
                    b0:d1:c9:98:2a:8c:e1:c9:12:e5:be:83:97:50:ee:
                    8e:70:9d:f2:e9:42:a6:94:c5:a9:4b:bb:d7:6b:c8:
                    f3:58:83:74:4e:eb:3e:e9:6f:07:9f:9c:f7:37:42:
                    b0:80:4e:c0:33:98:ff:80:26:94:97:b4:74:cf:fc:
                    68:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3E:D2:6A:D5:B0:69:3D:D9:EF:10:E5:0F:60:6D:35:D0:8E:A8:54
            X509v3 Authority Key Identifier:
                keyid:EF:CB:4B:27:22:33:BF:7E:BE:0F:34:40:0E:C6:06:EA:1B:FA:E6:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/323830343a373436633a3a2f33342d3334203d3e20323730393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:746c::/34

    Signature Algorithm: sha256WithRSAEncryption
         c7:10:87:28:df:f6:0e:8b:5e:58:4f:9d:2c:11:e5:0a:80:b4:
         5c:0b:41:4f:3f:38:49:a1:49:29:4c:64:f6:ae:75:eb:8d:4a:
         53:7a:8d:9b:dc:75:f3:5c:28:1e:46:b5:1b:f5:9c:de:dd:64:
         df:7a:a2:9d:3f:56:a6:7c:d8:12:05:7f:68:76:55:a0:43:1f:
         8d:d4:c4:ac:c1:7e:6b:fc:d8:2a:f8:ac:52:b4:33:aa:e1:47:
         f4:75:75:f3:2f:2c:a0:64:86:2c:4c:53:53:98:73:e5:f5:0f:
         aa:b2:fc:6a:9b:56:3a:d2:5b:2e:ac:1b:44:f3:f2:08:51:d5:
         6c:ec:71:f4:50:6d:4c:7d:8c:69:66:7d:b4:ad:0e:7d:f5:4a:
         36:d2:c7:7f:c6:5d:ab:e7:1c:89:64:b5:27:da:ed:14:55:61:
         e6:ee:b9:5f:a5:39:e6:24:14:19:ac:29:26:a0:12:aa:92:d4:
         d5:e1:92:d1:ac:b2:dd:08:5f:92:36:da:13:fa:a1:51:da:80:
         1f:b9:a7:d1:28:fc:a0:f1:68:de:90:42:bd:da:73:76:d2:eb:
         0c:96:c5:2d:c1:56:ad:67:21:9e:e6:9f:25:f2:8c:f5:8a:df:
         88:cf:b5:07:e7:a7:b2:3e:11:45:5b:d3:f4:fe:5a:4d:ef:f0:
         20:a7:f7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:21 2024 by rpki-client on console-fra.rpki-client.org