Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/323830343a373264343a3a2f33322d3333203d3e20323730383738.roa
File:                     323830343a373264343a3a2f33322d3333203d3e20323730383738.roa (raw, json)
Hash identifier:          wPSZrtRjAsF9dBv/E+7fkDVA0HFCPsXN+bJ5UY2Pt5U=
Subject key identifier:   D2:E6:AB:DB:04:EA:F5:3A:56:73:D2:E1:4F:89:CE:1E:57:33:38:22
Certificate issuer:       /CN=3D0D671BE0C71458EFE3858E85E8A94370EF97F0
Certificate serial:       2C6DB09680FD77DFAF8F97382C873094D988B9E3
Authority key identifier: 3D:0D:67:1B:E0:C7:14:58:EF:E3:85:8E:85:E8:A9:43:70:EF:97:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D0D671BE0C71458EFE3858E85E8A94370EF97F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/323830343a373264343a3a2f33322d3333203d3e20323730383738.roa
Signing time:             Sun 11 Aug 2024 17:22:39 +0000
ROA not before:           Sun 11 Aug 2024 17:17:39 +0000
ROA not after:            Sun 10 Aug 2025 17:22:39 +0000
asID:                     270878
IP address blocks:        2804:72d4::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/3D0D671BE0C71458EFE3858E85E8A94370EF97F0.crl
                          rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/3D0D671BE0C71458EFE3858E85E8A94370EF97F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D0D671BE0C71458EFE3858E85E8A94370EF97F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:6d:b0:96:80:fd:77:df:af:8f:97:38:2c:87:30:94:d9:88:b9:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D0D671BE0C71458EFE3858E85E8A94370EF97F0
        Validity
            Not Before: Aug 11 17:17:39 2024 GMT
            Not After : Aug 10 17:22:39 2025 GMT
        Subject: CN=D2E6ABDB04EAF53A5673D2E14F89CE1E57333822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9f:27:33:7c:80:32:d9:95:fe:34:31:84:90:
                    c4:75:b7:38:66:44:ac:c1:55:7a:6a:b3:92:70:7d:
                    2b:9c:05:ee:36:d0:5a:18:bd:5a:f1:bd:84:dd:71:
                    77:be:79:d6:e1:e4:8e:0f:40:87:be:7e:3c:e2:5a:
                    b7:a5:e6:3d:b2:a0:e5:3e:0f:5e:1d:90:b9:a0:a7:
                    ee:e2:23:8a:f6:06:e9:77:e9:61:02:a6:3c:a1:f9:
                    c0:e7:c0:e0:4a:ce:d2:1f:c2:ca:4b:a5:b3:93:44:
                    47:0f:47:d0:d8:4b:81:68:c5:f5:71:69:78:9d:bf:
                    59:67:bc:ef:39:95:0a:7f:c8:c9:57:94:46:1f:3c:
                    44:4f:da:df:d2:51:37:43:e3:02:01:bf:60:81:f8:
                    bb:ae:cf:6a:f5:e8:6b:08:66:04:4b:c5:fb:0a:ec:
                    18:5c:14:b1:df:2d:14:38:49:9d:ed:26:a0:ec:c9:
                    b1:06:68:ab:1e:00:d6:4c:ba:be:c7:0c:08:c5:e0:
                    0f:7a:6c:03:12:9a:0f:62:2e:57:ab:3f:75:52:84:
                    83:04:c2:28:7f:95:77:cc:69:e9:a5:d0:66:c0:79:
                    92:c7:76:ef:24:16:23:55:78:11:9f:c5:f7:a5:29:
                    ec:2d:d3:c1:20:cb:08:a4:2a:af:76:9e:9f:9c:32:
                    5a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E6:AB:DB:04:EA:F5:3A:56:73:D2:E1:4F:89:CE:1E:57:33:38:22
            X509v3 Authority Key Identifier:
                keyid:3D:0D:67:1B:E0:C7:14:58:EF:E3:85:8E:85:E8:A9:43:70:EF:97:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/3D0D671BE0C71458EFE3858E85E8A94370EF97F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D0D671BE0C71458EFE3858E85E8A94370EF97F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/323830343a373264343a3a2f33322d3333203d3e20323730383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:7f:cb:49:55:98:6f:4f:c7:6f:fb:ec:30:8a:f1:76:a7:58:
         d7:d3:50:3c:a1:1d:7e:24:c9:24:a2:06:8f:52:ce:78:33:58:
         2e:a9:ff:6e:3e:79:af:ba:23:c9:1a:21:12:15:32:99:c8:b2:
         a9:37:52:bb:9b:97:e2:74:d4:6e:0f:f3:6f:78:e8:ee:15:ba:
         f2:23:06:c8:77:a2:8d:c1:90:90:fb:83:24:34:c1:ed:94:24:
         b3:55:b7:73:81:0a:14:08:30:7e:4f:e9:4e:f5:d5:12:f9:e6:
         50:09:75:d4:8e:4d:ab:8d:60:91:be:6f:12:ff:fc:23:be:74:
         60:35:15:73:57:07:93:ca:55:98:ed:a8:0e:1e:77:5d:93:e0:
         fd:28:ff:00:fe:00:41:79:d5:1e:24:dd:11:7d:69:78:7b:73:
         be:e5:5c:46:d8:8b:7f:47:ad:ba:fa:b1:63:d7:36:2c:43:5e:
         f4:f6:68:d6:d7:7c:94:c5:e1:e4:0b:a9:c9:e0:a8:37:00:fd:
         99:c0:bf:59:b4:f4:00:da:8c:60:79:39:44:05:6b:e0:df:2c:
         83:ee:00:0a:cf:f3:73:0c:1d:1f:55:fb:ee:b3:81:08:81:33:
         7d:f2:90:fe:36:f9:06:3e:2e:96:86:3b:8f:a8:b8:26:b2:41:
         e3:c9:89:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:11 2024 by rpki-client on console-fra.rpki-client.org