Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3132313a3a2f34382d3438203d3e20323639353636.roa
File:                     323830343a363638383a3132313a3a2f34382d3438203d3e20323639353636.roa (raw, json)
Hash identifier:          R5dKMkzA4sI1Hm/lhLdYN6iRB1QnjVjZBtNKCGXNUkE=
Subject key identifier:   8C:FF:35:87:F2:3F:04:70:1D:6B:04:C2:17:9A:A1:21:64:83:CA:D4
Certificate issuer:       /CN=1D3FD06C04B646AC6073A692F99CCB5C18448248
Certificate serial:       05F733E495424D8DFC5BDB6003B1E60044581707
Authority key identifier: 1D:3F:D0:6C:04:B6:46:AC:60:73:A6:92:F9:9C:CB:5C:18:44:82:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3FD06C04B646AC6073A692F99CCB5C18448248.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3132313a3a2f34382d3438203d3e20323639353636.roa
Signing time:             Mon 08 Jul 2024 13:07:44 +0000
ROA not before:           Mon 08 Jul 2024 13:02:44 +0000
ROA not after:            Mon 07 Jul 2025 13:07:44 +0000
asID:                     269566
IP address blocks:        2804:6688:121::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1D3FD06C04B646AC6073A692F99CCB5C18448248.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1D3FD06C04B646AC6073A692F99CCB5C18448248.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3FD06C04B646AC6073A692F99CCB5C18448248.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f7:33:e4:95:42:4d:8d:fc:5b:db:60:03:b1:e6:00:44:58:17:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D3FD06C04B646AC6073A692F99CCB5C18448248
        Validity
            Not Before: Jul  8 13:02:44 2024 GMT
            Not After : Jul  7 13:07:44 2025 GMT
        Subject: CN=8CFF3587F23F04701D6B04C2179AA1216483CAD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bd:3d:2f:51:71:50:6a:d8:6a:8d:71:50:25:
                    7f:7d:d0:70:6f:9d:92:85:23:d1:12:d8:45:3b:bd:
                    e1:e5:b3:00:5d:05:bb:34:09:b1:08:3d:e4:ad:71:
                    1c:8f:87:69:6e:33:bd:81:6c:9b:ae:f4:0a:5b:dc:
                    2f:8d:29:61:08:37:00:3e:5f:8b:5b:c8:2a:91:e9:
                    b6:dd:cd:1b:6d:e9:dc:67:e6:d5:b2:15:07:7e:eb:
                    1a:2e:22:10:95:94:82:15:fd:88:b9:51:ff:d0:50:
                    19:81:7d:91:5a:53:bb:db:6a:4d:d2:57:85:50:bf:
                    d5:55:cf:87:82:72:7d:d7:6a:47:92:bf:77:32:11:
                    87:f8:10:2e:40:0b:94:a9:42:cf:13:34:fa:70:87:
                    0e:be:af:8f:07:68:4a:88:77:be:cd:f6:84:dd:1d:
                    69:bb:29:80:ee:ca:01:67:66:95:68:92:48:75:4b:
                    b7:01:9e:39:a5:40:7f:12:28:8b:92:e2:01:91:d6:
                    ea:d8:f1:07:26:1e:2c:20:31:c2:24:cc:53:a9:cb:
                    0d:29:0b:cb:2c:b7:be:47:00:04:9e:fd:b1:25:53:
                    8b:ae:d8:e3:cd:1d:b7:d5:4c:fe:c5:7b:e3:bc:5b:
                    55:d0:83:f3:5c:13:4b:f1:1b:4e:f4:72:a6:99:3d:
                    2f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FF:35:87:F2:3F:04:70:1D:6B:04:C2:17:9A:A1:21:64:83:CA:D4
            X509v3 Authority Key Identifier:
                keyid:1D:3F:D0:6C:04:B6:46:AC:60:73:A6:92:F9:9C:CB:5C:18:44:82:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1D3FD06C04B646AC6073A692F99CCB5C18448248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3FD06C04B646AC6073A692F99CCB5C18448248.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3132313a3a2f34382d3438203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6688:121::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:28:de:85:60:27:f3:5c:d3:20:9e:d9:12:25:0d:e1:06:6c:
         33:7f:ce:a2:89:e1:e4:01:e7:49:0b:d6:f5:25:59:d0:4d:c2:
         62:0e:9a:a9:9f:bb:8b:d4:59:48:87:4c:93:02:6c:0f:30:67:
         fa:e9:90:4f:23:f7:ad:a8:5c:a5:46:34:ab:7e:3b:b3:f0:ab:
         27:35:ca:be:9a:b0:b0:99:05:fe:ac:c6:fc:2e:65:07:9e:cd:
         54:7b:f0:e4:6c:64:28:ec:88:6b:69:34:c7:e7:2b:39:4f:64:
         9a:17:40:45:5e:94:00:52:fb:7f:98:89:d5:51:9d:fc:52:de:
         66:b5:ae:f5:7f:a3:c9:16:ff:2c:66:9e:b7:20:24:58:22:ff:
         32:42:83:af:97:ad:29:36:f5:72:87:09:50:00:83:fd:0b:8d:
         5f:06:df:3e:fb:4e:ea:02:87:36:ab:07:51:88:47:57:25:bb:
         34:b2:2d:49:f8:05:c2:14:b6:4c:2a:b8:69:b4:a7:30:3a:c6:
         8f:59:a2:81:25:44:60:80:a4:03:b1:bf:17:51:d6:2c:8d:16:
         fe:3b:a7:60:59:21:d1:6b:37:2e:0c:b4:fe:5b:3f:f6:5c:7b:
         c9:52:3b:50:f7:12:43:a6:2e:7f:16:94:fb:ec:9d:18:81:6c:
         53:9a:21:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:35 2024 by rpki-client on console-fra.rpki-client.org