Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/323830343a373762633a3a2f33322d313238203d3e20323731313936.roa
File:                     323830343a373762633a3a2f33322d313238203d3e20323731313936.roa (raw, json)
Hash identifier:          YDLU2R2TYfKK6mIWw1mqMSamOpyCufjbxSrdQcWV+nA=
Subject key identifier:   DF:96:4A:26:FC:34:BA:DE:AD:45:E6:77:F9:1A:72:27:98:35:49:18
Certificate issuer:       /CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
Certificate serial:       13D5EF4BBCB4C323CE101F6DED18818B2BA344C7
Authority key identifier: 8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/323830343a373762633a3a2f33322d313238203d3e20323731313936.roa
Signing time:             Thu 27 Jun 2024 22:11:12 +0000
ROA not before:           Thu 27 Jun 2024 22:06:12 +0000
ROA not after:            Thu 26 Jun 2025 22:11:12 +0000
asID:                     271196
IP address blocks:        2804:77bc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl
                          rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 11:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d5:ef:4b:bc:b4:c3:23:ce:10:1f:6d:ed:18:81:8b:2b:a3:44:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
        Validity
            Not Before: Jun 27 22:06:12 2024 GMT
            Not After : Jun 26 22:11:12 2025 GMT
        Subject: CN=DF964A26FC34BADEAD45E677F91A722798354918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b5:24:0b:36:f0:55:ec:2a:5c:19:50:d8:3f:
                    6b:42:9f:a2:2e:2c:e2:bd:f6:fb:28:48:79:4c:f4:
                    f8:6e:67:af:26:24:4c:39:6c:2a:31:0d:01:44:02:
                    b4:83:fb:89:1c:9f:56:eb:fd:33:c3:e1:f1:a7:38:
                    23:9c:22:84:2c:1e:e9:4a:ed:21:ea:98:e3:3f:80:
                    93:cf:02:4a:7a:0a:8e:ad:13:9c:38:55:5e:b1:f7:
                    8e:00:5b:c5:9d:26:32:2d:48:e6:60:5f:19:31:8a:
                    da:29:c0:c3:4a:1b:37:5b:25:7d:98:08:40:9e:a6:
                    bf:5b:d8:67:02:3f:37:83:3b:bd:10:4b:25:98:9e:
                    77:9b:35:8a:dc:11:3b:2c:1a:ec:cb:8c:67:92:b2:
                    2e:9f:5b:9f:20:09:b9:80:d4:a9:e0:af:9f:4c:eb:
                    b3:40:cf:aa:2d:ee:e6:ec:31:5c:ae:ad:9c:c2:ca:
                    f5:dc:a3:48:5b:54:cd:7d:88:59:e0:f6:1f:e0:23:
                    8d:aa:ef:7d:ba:5d:9e:f0:0a:1b:3a:d3:64:e1:2c:
                    fe:92:04:91:da:d5:ee:1d:06:3b:f8:24:2f:9b:b2:
                    34:67:39:f0:68:3f:3c:3e:d5:b1:c3:69:28:46:3a:
                    01:5e:94:84:40:62:51:53:6a:1c:c6:28:72:09:36:
                    e7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:96:4A:26:FC:34:BA:DE:AD:45:E6:77:F9:1A:72:27:98:35:49:18
            X509v3 Authority Key Identifier:
                keyid:8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/323830343a373762633a3a2f33322d313238203d3e20323731313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:b6:de:fb:5c:70:bf:72:92:d8:c4:14:ce:5b:18:7f:53:6e:
         ef:b8:73:01:5c:f4:38:27:cd:8b:83:d2:65:d4:31:15:6f:44:
         d0:59:7b:bc:82:7e:86:17:56:ca:4b:3a:e2:1c:85:8f:4a:81:
         bc:c3:cc:37:cd:4c:da:13:45:e3:fb:6c:6e:ef:b7:4d:22:8d:
         d6:05:60:47:92:3f:98:96:61:10:12:95:7e:78:8a:3d:60:8e:
         d3:22:a1:87:b1:5d:42:34:4a:e7:8e:dd:e9:e9:6d:56:5b:9d:
         cd:8b:f0:5f:60:58:99:35:e0:26:1b:16:e4:48:96:d3:07:2c:
         eb:26:10:bb:a9:08:e9:7e:78:4c:17:09:0d:4b:e4:b4:a9:ea:
         00:81:d9:a6:b2:5b:5c:ab:75:6b:e8:59:98:eb:23:bf:2b:91:
         f8:86:27:97:1b:1e:13:0c:91:fd:c8:95:32:98:8a:80:d7:34:
         c0:89:d3:22:ad:a8:b8:a4:22:bd:b1:5f:25:00:a6:04:b3:4f:
         62:e5:7f:f1:22:d9:60:99:80:75:fd:d9:13:a0:93:f7:7f:95:
         68:52:64:4c:dc:c0:cf:47:92:82:62:67:73:4b:c5:a3:eb:f8:
         5b:2b:46:d7:89:c5:2a:97:ae:35:22:63:ad:bd:d8:c1:a7:4a:
         67:0e:31:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:21:49 2025 by rpki-client