Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/1/323830343a323731303a3a2f33322d3332203d3e20323637313032.roa
File:                     323830343a323731303a3a2f33322d3332203d3e20323637313032.roa (raw, json)
Hash identifier:          8YxZYG0xK9qX/tHPdRm7ipwa1zELfOVFPIxIFhd5Bo0=
Subject key identifier:   9C:86:C7:1E:1C:99:BD:86:4C:E4:96:52:77:07:FA:7D:EE:53:89:C6
Certificate issuer:       /CN=184AC896B5572D83192F860B4C6AB497566468B5
Certificate serial:       3CCE5E0F5F744AD904E8E06911C666D0D18CE4C7
Authority key identifier: 18:4A:C8:96:B5:57:2D:83:19:2F:86:0B:4C:6A:B4:97:56:64:68:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/184AC896B5572D83192F860B4C6AB497566468B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/1/323830343a323731303a3a2f33322d3332203d3e20323637313032.roa
Signing time:             Tue 19 Nov 2024 14:03:41 +0000
ROA not before:           Tue 19 Nov 2024 13:58:41 +0000
ROA not after:            Tue 18 Nov 2025 14:03:41 +0000
asID:                     267102
IP address blocks:        2804:2710::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/1/184AC896B5572D83192F860B4C6AB497566468B5.crl
                          rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/1/184AC896B5572D83192F860B4C6AB497566468B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/184AC896B5572D83192F860B4C6AB497566468B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ce:5e:0f:5f:74:4a:d9:04:e8:e0:69:11:c6:66:d0:d1:8c:e4:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184AC896B5572D83192F860B4C6AB497566468B5
        Validity
            Not Before: Nov 19 13:58:41 2024 GMT
            Not After : Nov 18 14:03:41 2025 GMT
        Subject: CN=9C86C71E1C99BD864CE496527707FA7DEE5389C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ef:71:e3:db:b7:6c:32:b6:ec:8c:9a:03:4e:
                    86:07:6f:e1:8b:ed:60:91:e9:db:a3:63:58:f8:e6:
                    81:09:96:7e:eb:a5:c0:af:a9:20:42:f9:8f:4e:60:
                    98:c4:3f:08:05:2d:a2:68:21:cd:ed:77:27:e9:02:
                    95:90:96:ca:7b:2b:95:41:5a:2f:cc:f7:2b:b7:24:
                    69:06:b4:8a:1d:c2:1b:68:d5:da:e2:3d:b5:72:5a:
                    0f:bc:05:b2:2d:ce:8f:fc:59:0d:10:df:84:d4:fb:
                    e4:b3:06:02:93:37:88:24:16:9d:43:9b:41:c7:f7:
                    56:6c:95:92:28:9a:54:11:e1:11:21:17:42:c0:10:
                    6f:9a:93:43:b3:fc:d8:67:1a:d4:b5:35:a1:f3:00:
                    51:f7:86:f9:6c:0e:9d:fb:60:87:45:f6:cf:9c:8e:
                    30:19:06:d7:ac:a0:ac:43:ae:f9:0d:0d:e3:d7:34:
                    1b:cc:ed:5b:fe:b5:c6:5f:0d:5f:10:8b:8f:08:a2:
                    08:cc:82:55:3b:ce:62:1e:83:9d:a8:b8:1e:af:87:
                    f7:c8:dd:42:34:32:f0:11:02:9a:23:4a:40:56:30:
                    00:de:62:12:51:89:f1:8d:20:d6:e7:75:24:d7:95:
                    1d:3a:61:1d:14:6a:5c:39:c3:7b:28:bc:31:a9:ea:
                    83:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:86:C7:1E:1C:99:BD:86:4C:E4:96:52:77:07:FA:7D:EE:53:89:C6
            X509v3 Authority Key Identifier:
                keyid:18:4A:C8:96:B5:57:2D:83:19:2F:86:0B:4C:6A:B4:97:56:64:68:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/1/184AC896B5572D83192F860B4C6AB497566468B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/184AC896B5572D83192F860B4C6AB497566468B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/1/323830343a323731303a3a2f33322d3332203d3e20323637313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2710::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:27:bb:ff:88:94:96:af:d6:de:04:ae:06:a9:c0:22:f9:b0:
         b6:7f:64:81:24:f8:39:2c:2a:dc:d5:28:78:09:79:d4:aa:c6:
         f0:a7:f3:5c:b8:19:f6:76:c0:1e:33:df:38:6b:f0:4a:19:c9:
         e0:ee:0c:30:d3:7e:d3:c4:a6:a2:49:8a:14:b1:b7:87:b5:aa:
         1c:91:a7:ea:df:34:ee:ae:bf:ff:6a:2a:e5:f3:bb:51:69:24:
         c8:ab:89:11:b8:89:ab:6a:f3:a4:82:9d:73:95:38:f9:cc:54:
         02:7c:52:34:f5:b7:7a:3f:51:b6:7a:19:a4:5b:b2:43:86:e9:
         ed:57:dc:cc:97:e7:65:d0:5d:6f:48:32:ee:6a:43:ff:be:10:
         a8:0d:8f:90:7e:91:3f:50:60:e6:21:b5:89:61:99:a3:01:4e:
         37:76:5a:79:0f:b0:0b:96:9f:ce:50:7a:b8:27:41:a3:46:22:
         d6:fd:2f:d6:9c:c7:3c:89:8b:0e:8e:18:0e:39:b6:0c:61:d0:
         42:d3:9b:2c:bd:ac:ce:0b:64:61:8e:f8:0c:79:47:1d:5b:c5:
         f7:1e:fa:59:bc:a2:8f:ec:84:fc:9c:2f:69:99:38:a9:9b:7a:
         de:21:82:55:2d:f9:d9:71:dd:18:50:bd:65:cc:8c:39:fb:d7:
         a6:67:2a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:12 2024 by rpki-client on console-ams.rpki-client.org