Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/323830343a336634633a383030303a3a2f33342d3334203d3e20323636363531.roa
File:                     323830343a336634633a383030303a3a2f33342d3334203d3e20323636363531.roa (raw, json)
Hash identifier:          o3G81nEmkLHuKtQ8VRYzUPACtQYJz7PZvXxgSkzMHuE=
Subject key identifier:   F7:55:4F:A8:A0:CF:0F:69:D0:B0:CF:ED:60:EB:A4:71:D8:21:28:42
Certificate issuer:       /CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
Certificate serial:       618331D7308029B475DE695ED32916768DA4C6A3
Authority key identifier: 65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/323830343a336634633a383030303a3a2f33342d3334203d3e20323636363531.roa
Signing time:             Thu 25 Jul 2024 17:48:25 +0000
ROA not before:           Thu 25 Jul 2024 17:43:25 +0000
ROA not after:            Thu 24 Jul 2025 17:48:25 +0000
asID:                     266651
IP address blocks:        2804:3f4c:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl
                          rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:83:31:d7:30:80:29:b4:75:de:69:5e:d3:29:16:76:8d:a4:c6:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
        Validity
            Not Before: Jul 25 17:43:25 2024 GMT
            Not After : Jul 24 17:48:25 2025 GMT
        Subject: CN=F7554FA8A0CF0F69D0B0CFED60EBA471D8212842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:77:d3:51:db:2d:85:c8:c8:15:c6:b0:b0:b6:
                    37:1b:18:60:9b:dd:c7:f6:a6:ba:13:68:e7:a8:d1:
                    f1:ed:00:c6:99:2b:e1:e6:10:a0:2f:a1:87:31:c0:
                    9b:f0:e3:4a:46:eb:a2:01:d0:03:7a:37:70:e1:7b:
                    97:6f:ad:84:10:dd:40:f8:72:1d:7d:c5:d4:64:de:
                    a3:65:2e:26:27:7d:86:a0:de:46:3f:06:dd:df:9a:
                    c7:19:5b:3e:40:5d:0f:f1:c9:3c:04:4d:e0:c5:15:
                    fd:1d:fc:87:43:49:a6:6c:3a:1c:a4:8e:cd:8d:00:
                    be:ff:91:22:24:60:ac:37:3e:f9:c2:57:81:25:8b:
                    37:4a:21:8e:2c:e1:46:a0:46:84:ce:dc:20:1b:63:
                    be:33:e9:e8:1f:c4:bd:6f:cc:ee:84:fa:4b:4c:a0:
                    00:3d:78:59:9e:f0:19:85:60:50:9a:78:3a:b3:79:
                    ee:44:a8:9c:31:bf:41:1d:3b:31:81:ae:b3:53:77:
                    2c:37:4f:6c:d8:bf:35:83:68:3c:eb:07:4a:9f:ee:
                    58:67:e8:f5:17:bb:45:db:d7:73:1e:4b:23:7f:77:
                    ea:24:e6:e6:5b:ee:e9:ae:ea:df:a0:db:8f:3a:6c:
                    57:2a:86:f8:ee:3d:a9:aa:45:9d:dc:bd:6d:f1:5a:
                    59:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:55:4F:A8:A0:CF:0F:69:D0:B0:CF:ED:60:EB:A4:71:D8:21:28:42
            X509v3 Authority Key Identifier:
                keyid:65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/323830343a336634633a383030303a3a2f33342d3334203d3e20323636363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f4c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         77:5e:d1:f9:da:1a:bb:d4:48:e8:2c:f4:09:fb:6c:47:e7:b4:
         e4:b5:f0:34:42:fe:e5:24:a6:94:ba:e7:2f:07:a0:79:e3:f4:
         4b:b4:64:03:b9:60:41:8f:ae:1c:ba:08:40:1c:9a:45:10:5d:
         c8:38:9e:70:c2:0e:74:94:48:5c:81:2b:14:b3:a5:f6:fa:8b:
         df:f0:cf:65:2d:57:07:e0:ad:ad:f5:b5:d0:7e:49:b6:de:7b:
         92:89:4f:62:01:3c:b5:42:84:ea:aa:04:b3:a1:60:fe:fa:1b:
         87:d5:e1:c7:69:b9:d7:c8:7c:a8:e4:54:2c:f4:4b:f8:7a:13:
         f5:02:f7:6a:ef:13:24:84:9a:9a:4a:90:52:19:9d:98:dc:9f:
         ee:cb:67:3c:37:1f:b3:fd:8d:e8:b4:37:6b:de:5a:0f:4b:d0:
         b8:f2:51:6c:f2:1a:07:77:1f:35:c6:f3:ad:0e:f9:70:6c:4a:
         98:61:7f:66:29:b0:01:f2:c0:f9:c2:14:38:2a:9a:48:ec:59:
         47:1d:16:d9:c6:1b:9a:89:ee:fb:58:c2:d5:e7:e1:a2:ea:8f:
         13:e9:3c:fa:b2:e8:b3:76:16:99:37:19:e0:82:69:57:71:c8:
         f2:4b:bb:88:47:55:35:14:f2:a3:8d:eb:eb:ab:d1:ab:a9:b8:
         8d:c1:6e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:07 2024 by rpki-client on console-fra.rpki-client.org