Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/323830343a353963633a383030303a3a2f33342d3334203d3e20323638373236.roa
File:                     323830343a353963633a383030303a3a2f33342d3334203d3e20323638373236.roa (raw, json)
Hash identifier:          NwC9vvTK4s0edKR+JDJwNEmgke1cvvJLi8BJE7ezNPQ=
Subject key identifier:   27:B5:55:60:19:61:8E:11:47:23:FE:4B:8E:B3:8D:9B:DF:07:75:DA
Certificate issuer:       /CN=1673CB8E8029AB9119773FC6F638B9264FDF3364
Certificate serial:       6B936B6E5C8FDF3D7F1F544B678777FE2FD5D385
Authority key identifier: 16:73:CB:8E:80:29:AB:91:19:77:3F:C6:F6:38:B9:26:4F:DF:33:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/323830343a353963633a383030303a3a2f33342d3334203d3e20323638373236.roa
Signing time:             Thu 04 Apr 2024 16:01:57 +0000
ROA not before:           Thu 04 Apr 2024 15:56:57 +0000
ROA not after:            Thu 03 Apr 2025 16:01:57 +0000
asID:                     268726
IP address blocks:        2804:59cc:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.crl
                          rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:93:6b:6e:5c:8f:df:3d:7f:1f:54:4b:67:87:77:fe:2f:d5:d3:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1673CB8E8029AB9119773FC6F638B9264FDF3364
        Validity
            Not Before: Apr  4 15:56:57 2024 GMT
            Not After : Apr  3 16:01:57 2025 GMT
        Subject: CN=27B5556019618E114723FE4B8EB38D9BDF0775DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c6:98:b0:75:a6:a7:20:e6:22:27:a8:75:20:
                    de:2f:3c:15:df:aa:b7:af:f0:55:cd:26:25:91:2c:
                    fd:11:a1:62:3a:53:d7:d4:77:05:78:c1:d9:6a:cb:
                    65:e2:7b:fa:33:5e:c8:c5:6e:af:1a:83:da:9e:71:
                    5f:3a:72:20:4b:2e:1a:24:1f:e2:03:3a:42:ee:1f:
                    c6:c6:fb:5a:c7:d6:e0:0a:38:93:fe:a8:02:1d:82:
                    87:ca:b4:b6:77:75:7c:de:12:4e:a7:80:f9:e8:db:
                    78:3d:35:d4:37:5b:9c:bb:a1:56:9c:9b:0e:81:80:
                    6f:65:cb:cc:74:67:2b:22:26:8e:22:e8:98:52:5c:
                    22:dc:1e:24:29:8e:c6:77:d1:93:0e:1d:3a:ad:17:
                    d9:ef:ec:8b:3d:e9:57:2b:4a:4a:6e:7e:81:f4:f6:
                    88:83:35:a2:fe:e3:41:d8:1b:7b:c7:2e:4c:2c:2d:
                    db:0f:09:cf:95:b0:05:22:f7:31:5f:e8:ce:71:3b:
                    c6:92:70:5e:91:42:14:cb:56:64:60:36:2c:32:11:
                    bc:72:10:c5:2f:1b:51:d6:ba:b1:65:09:39:52:11:
                    ba:3b:4d:29:94:7d:16:8f:12:8b:87:07:cb:ea:63:
                    9f:d6:9d:c9:b7:0b:ac:0f:dd:24:f8:bb:51:04:0c:
                    ff:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B5:55:60:19:61:8E:11:47:23:FE:4B:8E:B3:8D:9B:DF:07:75:DA
            X509v3 Authority Key Identifier:
                keyid:16:73:CB:8E:80:29:AB:91:19:77:3F:C6:F6:38:B9:26:4F:DF:33:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/323830343a353963633a383030303a3a2f33342d3334203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59cc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6f:07:e0:cb:4a:19:4a:27:f3:35:74:7c:d9:37:af:9a:a9:2c:
         0b:a6:df:39:63:0d:cc:73:de:23:30:23:e4:95:76:91:af:03:
         9c:9b:d4:7a:18:54:da:f3:6c:84:41:99:82:46:14:60:5b:ef:
         0e:f3:63:b5:6e:03:cc:cc:b9:e9:83:96:74:fb:69:14:e0:57:
         88:7a:d5:05:19:14:7c:44:bb:cd:0c:e9:ea:f9:0a:2f:7b:33:
         8b:63:ae:39:86:29:98:b0:97:55:52:5f:8e:62:b3:0d:44:3a:
         4e:3f:97:29:c5:05:f5:ec:09:8d:f8:c1:ab:70:15:8a:32:19:
         99:92:12:d4:3b:65:b7:84:a3:62:cc:aa:dd:87:b8:7e:64:7f:
         db:70:d5:47:3f:e9:c3:13:64:6f:7a:f9:1b:fb:5d:aa:44:5b:
         fe:4e:b3:66:1f:54:85:42:0e:7a:d0:5c:45:27:6e:17:fe:ca:
         78:45:96:e6:d4:a6:ce:8c:e3:76:f5:b2:8d:ff:62:d6:18:be:
         71:87:c0:b0:47:3b:a7:8e:dc:3a:56:d8:f2:a9:ce:61:6b:25:
         65:e5:a7:74:53:ee:ac:d0:b1:b8:d3:0b:02:e1:75:77:07:20:
         39:80:bc:dc:82:5a:6e:eb:ac:9f:0c:b1:b3:ba:38:d8:80:0b:
         f3:b1:2b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:46 2024 by rpki-client on console-ams.rpki-client.org