Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/323830343a336634633a3a2f33322d3332203d3e20323636363531.roa
File:                     323830343a336634633a3a2f33322d3332203d3e20323636363531.roa (raw, json)
Hash identifier:          5/NclTeluHICv2lfRcL8aD1qslxUWl82oqVvZqfJfYM=
Subject key identifier:   6A:7E:AD:5B:07:CB:51:F5:5F:17:AD:43:83:43:72:A9:6A:25:85:DF
Certificate issuer:       /CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
Certificate serial:       23C0F89830CA3F23743AB27FC11D45DF516A0168
Authority key identifier: 65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/323830343a336634633a3a2f33322d3332203d3e20323636363531.roa
Signing time:             Thu 25 Jul 2024 17:48:27 +0000
ROA not before:           Thu 25 Jul 2024 17:43:27 +0000
ROA not after:            Thu 24 Jul 2025 17:48:27 +0000
asID:                     266651
IP address blocks:        2804:3f4c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl
                          rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c0:f8:98:30:ca:3f:23:74:3a:b2:7f:c1:1d:45:df:51:6a:01:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
        Validity
            Not Before: Jul 25 17:43:27 2024 GMT
            Not After : Jul 24 17:48:27 2025 GMT
        Subject: CN=6A7EAD5B07CB51F55F17AD43834372A96A2585DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ee:da:5f:ad:29:06:cf:69:80:e0:b2:84:96:
                    d2:c8:2a:65:b8:c6:ba:e0:0c:80:69:4e:b9:07:7f:
                    1a:ec:82:fa:0c:0b:b2:49:1a:39:16:5b:42:bb:c1:
                    10:09:31:84:f9:50:f7:62:3e:f7:9b:57:9b:39:11:
                    2a:34:38:44:af:d1:3e:f7:ef:d4:80:ee:75:24:1e:
                    b9:41:7b:33:48:6b:85:81:32:3c:b2:df:c2:2c:ed:
                    93:83:71:4f:ac:97:fc:66:a0:01:df:39:30:a0:c0:
                    e1:fa:9f:1f:65:6a:f4:3e:6f:7b:78:b1:d5:dc:24:
                    d3:32:94:62:f7:b8:f3:1c:a0:41:c0:40:0e:6d:cf:
                    67:d9:29:7d:d6:74:40:21:69:9c:67:f3:69:4e:b3:
                    39:d5:95:cd:cd:ec:8e:65:71:e9:3e:2c:2a:5e:19:
                    65:55:3f:2f:68:8f:52:60:6a:82:4b:dc:32:2f:6d:
                    1c:bc:c8:34:65:d0:a8:a0:43:eb:bb:57:0f:30:8c:
                    0c:a3:8b:f1:c8:a0:f5:01:91:3b:cf:03:db:36:34:
                    af:0a:36:b2:b8:4d:16:3e:f0:dc:59:59:fc:cf:87:
                    e9:b0:c9:6d:60:f5:3e:69:61:9a:4a:22:3c:79:b4:
                    34:52:70:a8:27:9e:ff:6e:66:db:62:3c:63:e5:9e:
                    50:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7E:AD:5B:07:CB:51:F5:5F:17:AD:43:83:43:72:A9:6A:25:85:DF
            X509v3 Authority Key Identifier:
                keyid:65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/323830343a336634633a3a2f33322d3332203d3e20323636363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:d6:c4:42:14:06:e4:fb:b5:a1:a1:c6:db:b3:f1:8e:bf:8f:
         ce:a7:c8:c1:ce:5d:b2:01:94:4c:10:ac:6e:8b:e6:97:44:cb:
         33:9e:88:a6:82:01:c6:e0:83:3f:a7:2d:df:fc:b7:ab:53:bc:
         bf:90:3a:6b:8d:90:74:4f:2a:12:c8:74:19:92:e4:0a:25:10:
         49:b5:08:a5:aa:69:63:5d:92:9a:93:62:11:bd:66:02:57:b4:
         75:d3:14:07:e1:53:55:8a:40:d6:9d:ee:00:ae:a5:3a:bc:21:
         07:20:1a:44:2f:62:7c:f0:fa:c5:89:09:bb:7e:26:a3:a9:7a:
         44:aa:b7:70:f3:89:16:81:13:31:c9:2d:b7:08:e4:e7:e2:d1:
         4c:d8:89:4d:ee:ba:0e:b1:44:67:90:80:75:89:6d:a3:9f:d0:
         e3:94:a9:d2:1a:73:57:3c:47:86:f6:ed:d9:f5:0e:d4:f7:20:
         d2:a1:f3:b6:14:e2:d8:54:ed:f6:ca:1c:e3:ec:bb:2f:77:b0:
         ae:33:6a:15:91:29:6b:38:4d:77:cc:61:c0:70:cd:c1:5f:09:
         d1:9c:ba:fc:91:fc:39:4a:44:db:4a:b9:a9:5b:f5:1a:ab:86:
         15:98:84:4f:28:95:fd:89:be:87:9a:b4:62:71:5c:43:3f:89:
         c7:0a:f4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:07 2024 by rpki-client on console-fra.rpki-client.org