Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/323830343a373135343a383030303a3a2f33332d3333203d3e20323730373832.roa
File:                     323830343a373135343a383030303a3a2f33332d3333203d3e20323730373832.roa (raw, json)
Hash identifier:          EI4jBT39ovXeeZRvxcNQZKOu4NRNxF0kqyrBBjBAuGE=
Subject key identifier:   8D:4D:99:B0:BA:EE:EA:EC:D1:E2:6F:34:7A:D6:13:A6:B7:0D:25:B0
Certificate issuer:       /CN=B1E2CC63C140B29130D3460184B7314D3BC134C9
Certificate serial:       0D8C7FBD23060D3FEB9079F2DBE13785D90FE303
Authority key identifier: B1:E2:CC:63:C1:40:B2:91:30:D3:46:01:84:B7:31:4D:3B:C1:34:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/323830343a373135343a383030303a3a2f33332d3333203d3e20323730373832.roa
Signing time:             Tue 24 Sep 2024 18:02:05 +0000
ROA not before:           Tue 24 Sep 2024 17:57:05 +0000
ROA not after:            Tue 23 Sep 2025 18:02:05 +0000
asID:                     270782
IP address blocks:        2804:7154:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.crl
                          rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8c:7f:bd:23:06:0d:3f:eb:90:79:f2:db:e1:37:85:d9:0f:e3:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1E2CC63C140B29130D3460184B7314D3BC134C9
        Validity
            Not Before: Sep 24 17:57:05 2024 GMT
            Not After : Sep 23 18:02:05 2025 GMT
        Subject: CN=8D4D99B0BAEEEAECD1E26F347AD613A6B70D25B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:8a:33:28:c5:e5:60:d7:60:61:31:1c:21:48:
                    2e:63:dd:7f:56:ad:3a:43:67:d2:fa:8a:7c:e4:d5:
                    50:d9:f9:1f:5e:dd:0d:f6:eb:dc:01:7a:a8:dc:9f:
                    74:c1:ff:53:b5:c3:88:3d:d7:41:5c:24:d5:ca:f8:
                    8d:36:92:80:31:28:8a:ac:5f:68:cb:2f:79:84:7c:
                    51:35:0f:2e:13:ef:8a:c0:77:bd:76:87:35:37:d1:
                    cb:42:41:60:bd:d2:cb:ad:90:21:80:b6:75:e6:9f:
                    f0:43:33:ac:b9:bd:d0:fe:6f:aa:85:f4:56:f5:64:
                    5b:02:1f:fc:87:c5:c0:c5:2a:a3:e9:a9:19:01:82:
                    55:74:b8:15:0b:6c:8c:a6:cd:a5:99:35:9e:80:d4:
                    28:7a:fd:df:0f:a0:d1:ab:6b:8f:8e:3f:ae:c4:aa:
                    74:98:e0:8f:64:18:56:f3:b5:e4:1b:37:5f:21:9e:
                    be:d8:0d:81:73:40:d6:0c:55:60:60:2a:64:0a:ad:
                    8e:bf:2e:a5:2a:a8:ef:8c:ae:6b:a5:0c:2b:5c:fa:
                    b4:ae:86:64:1b:ad:70:dd:8e:f3:7a:3c:fd:0a:2f:
                    cd:c8:09:38:51:9f:29:12:e2:45:0d:12:36:88:38:
                    95:b3:31:0b:3d:35:a9:7f:c9:1c:83:d3:61:d1:3b:
                    0b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4D:99:B0:BA:EE:EA:EC:D1:E2:6F:34:7A:D6:13:A6:B7:0D:25:B0
            X509v3 Authority Key Identifier:
                keyid:B1:E2:CC:63:C1:40:B2:91:30:D3:46:01:84:B7:31:4D:3B:C1:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/323830343a373135343a383030303a3a2f33332d3333203d3e20323730373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7154:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         42:a3:ff:79:eb:2e:e7:92:18:5c:43:b6:a0:1d:9c:fd:a8:b7:
         71:00:99:e3:41:e7:85:46:e2:cf:f1:0b:bc:7e:6b:38:7b:cb:
         4b:5a:23:c3:a3:59:a2:6c:96:9e:11:90:fa:f4:52:eb:f0:ab:
         ed:da:06:38:1e:97:f5:3e:cb:a2:e5:47:a8:2b:64:35:dc:2e:
         1c:57:33:2c:cc:6e:06:f7:79:e0:d4:67:7c:87:c5:bb:74:8b:
         ff:31:91:5d:ce:e4:f4:a3:2a:e0:2a:5c:c2:ba:db:81:52:06:
         03:7e:b3:bd:ac:bd:6b:e8:94:a9:92:30:55:dd:0a:cd:70:b9:
         62:99:1a:92:ac:68:d5:e7:da:be:d6:88:e0:ca:d2:5f:72:ff:
         63:1c:89:b4:59:03:81:d1:68:e4:6c:83:33:97:6e:75:b8:09:
         6d:3e:95:de:ba:0f:3d:32:88:24:13:f9:54:04:88:4c:40:8e:
         28:90:c4:44:5b:04:ff:b9:75:9e:c3:cc:25:62:90:f9:c7:fa:
         fb:b5:5d:1c:66:f5:fd:dd:81:81:4c:7e:ba:86:8d:4c:35:69:
         db:54:81:72:02:22:89:d1:1f:08:92:50:f4:34:ba:7d:fd:2b:
         67:03:69:83:37:99:17:5d:c6:eb:16:f3:26:28:bf:c8:0a:3e:
         e8:07:1b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:40 2024 by rpki-client on console-ams.rpki-client.org