Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/323830343a326537303a3a2f33322d313238203d3e20323635333436.roa
File:                     323830343a326537303a3a2f33322d313238203d3e20323635333436.roa (raw, json)
Hash identifier:          p9xFLmDo3iAyNI40BI0nuCoCeDXQJv+o+Ysy6rgixVo=
Subject key identifier:   AF:2B:8C:5C:03:C8:B1:E5:03:91:32:44:4B:A4:75:3C:18:1A:81:C9
Certificate issuer:       /CN=61355836BCE7745F7FD887251FDA3AE8CDED35FD
Certificate serial:       07EA26FC52FC96970BA512D6B93F63F504C5563A
Authority key identifier: 61:35:58:36:BC:E7:74:5F:7F:D8:87:25:1F:DA:3A:E8:CD:ED:35:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61355836BCE7745F7FD887251FDA3AE8CDED35FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/323830343a326537303a3a2f33322d313238203d3e20323635333436.roa
Signing time:             Fri 30 Aug 2024 16:39:35 +0000
ROA not before:           Fri 30 Aug 2024 16:34:35 +0000
ROA not after:            Fri 29 Aug 2025 16:39:35 +0000
asID:                     265346
IP address blocks:        2804:2e70::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/61355836BCE7745F7FD887251FDA3AE8CDED35FD.crl
                          rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/61355836BCE7745F7FD887251FDA3AE8CDED35FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61355836BCE7745F7FD887251FDA3AE8CDED35FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ea:26:fc:52:fc:96:97:0b:a5:12:d6:b9:3f:63:f5:04:c5:56:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61355836BCE7745F7FD887251FDA3AE8CDED35FD
        Validity
            Not Before: Aug 30 16:34:35 2024 GMT
            Not After : Aug 29 16:39:35 2025 GMT
        Subject: CN=AF2B8C5C03C8B1E5039132444BA4753C181A81C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b4:04:6c:36:e1:7f:8f:e2:55:f2:50:c7:d1:
                    de:f5:5c:05:b8:2d:e3:12:88:ce:4b:3f:38:b4:d1:
                    71:54:1d:3e:f8:06:16:42:41:95:a2:54:3d:04:89:
                    c2:5e:0c:62:f7:34:92:e5:7e:7c:49:55:e6:3d:77:
                    3c:ff:24:1d:d4:9e:52:a6:55:c1:58:dd:f6:84:48:
                    a8:c7:2d:89:a2:06:25:42:be:51:f4:85:16:64:74:
                    a1:b8:a0:b9:9d:95:6a:20:83:2f:54:36:ed:f3:c1:
                    5c:b5:76:77:09:5a:22:51:d7:b6:d1:24:61:e2:2f:
                    66:f9:fd:38:6b:09:e8:5b:53:31:6c:dd:74:c4:42:
                    41:80:46:06:f0:88:f5:4f:81:d8:e5:be:d7:20:dd:
                    70:93:4e:2d:f5:f4:82:a1:99:44:f1:e9:08:b7:11:
                    2a:29:35:ae:a7:cf:29:79:b9:ae:ff:de:60:e3:97:
                    0d:78:1d:15:51:d4:e0:83:d2:5c:3c:fa:3d:8a:fe:
                    b3:7d:73:19:4c:b8:d2:59:98:ac:f3:bf:81:46:bc:
                    4b:9f:06:04:9b:1c:21:5d:c4:4f:6c:65:ab:08:2c:
                    a8:51:9b:ec:43:c6:c0:a8:dc:9d:1e:40:5c:9b:ce:
                    56:0d:4a:0e:5e:75:36:bf:f6:da:22:88:9b:00:37:
                    39:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2B:8C:5C:03:C8:B1:E5:03:91:32:44:4B:A4:75:3C:18:1A:81:C9
            X509v3 Authority Key Identifier:
                keyid:61:35:58:36:BC:E7:74:5F:7F:D8:87:25:1F:DA:3A:E8:CD:ED:35:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/61355836BCE7745F7FD887251FDA3AE8CDED35FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61355836BCE7745F7FD887251FDA3AE8CDED35FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/323830343a326537303a3a2f33322d313238203d3e20323635333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e70::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:fc:f0:35:a7:bd:dd:70:4b:21:f6:63:20:ca:b8:11:89:38:
         5c:ad:e5:03:11:da:db:db:02:9d:a7:39:90:eb:b9:05:1e:6c:
         0c:55:d5:02:ea:87:db:d5:1d:82:9e:2f:36:d2:33:7d:bb:cc:
         b9:ab:19:d0:7f:52:ff:99:78:45:ca:87:8c:1e:58:6b:19:e0:
         14:77:fd:ce:40:0e:9b:9f:d6:3c:e0:5e:03:e7:10:97:23:c2:
         8b:4d:11:bb:49:00:ed:94:c4:72:72:f5:f6:4e:b9:1f:db:76:
         68:22:da:22:3c:58:6f:91:9b:45:a9:c4:ce:74:19:44:8b:f9:
         c5:6e:7a:c9:e3:f8:50:6c:f1:33:74:5b:b7:06:53:4a:01:59:
         24:22:b9:3f:21:d9:1f:ca:41:8d:27:77:eb:b2:49:6d:0f:8e:
         6c:80:fb:b6:04:39:9a:55:60:f9:84:ae:6e:3a:7f:1d:e6:12:
         31:ff:27:60:30:ec:e6:d6:e8:05:e4:1a:c1:83:ee:77:6d:d7:
         a3:e2:e6:0c:e7:a0:b2:33:ec:37:c4:61:3c:f9:6b:8a:93:77:
         f4:94:15:c9:1c:bb:7b:ec:06:f7:70:ba:8b:3d:fb:3d:24:33:
         ad:3c:c8:d7:06:1f:60:5f:1c:3e:18:fd:ce:cd:86:18:ba:ec:
         a6:0b:94:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:57 2024 by rpki-client on console-fra.rpki-client.org