Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/323830343a373933633a3a2f33322d3336203d3e20323731323933.roa
File:                     323830343a373933633a3a2f33322d3336203d3e20323731323933.roa (raw, json)
Hash identifier:          le9jFfWsvznW06Dz9m8I9HTafWXdN8yZ7S6aqeDgXtk=
Subject key identifier:   24:57:13:B4:9C:74:0C:7F:B7:75:95:18:45:79:85:FE:5A:85:B0:E5
Certificate issuer:       /CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
Certificate serial:       6D735BA900D27E2B0E31E1EF4F32C2DBFEEECF31
Authority key identifier: D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/323830343a373933633a3a2f33322d3336203d3e20323731323933.roa
Signing time:             Thu 13 Jun 2024 13:12:50 +0000
ROA not before:           Thu 13 Jun 2024 13:07:50 +0000
ROA not after:            Thu 12 Jun 2025 13:12:50 +0000
asID:                     271293
IP address blocks:        2804:793c::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl
                          rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:73:5b:a9:00:d2:7e:2b:0e:31:e1:ef:4f:32:c2:db:fe:ee:cf:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
        Validity
            Not Before: Jun 13 13:07:50 2024 GMT
            Not After : Jun 12 13:12:50 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:ed:25:f2:e7:7a:e2:21:b2:d8:53:80:40:
                    56:b5:63:ab:43:6a:cd:fc:42:91:c8:a0:09:8c:c4:
                    69:77:ac:be:1f:f6:e6:3e:d9:cb:c9:83:eb:cf:b1:
                    f3:6e:59:bb:7e:5b:d4:72:44:9c:78:f3:f8:0c:0f:
                    91:1b:3e:1f:74:fb:30:69:50:fa:72:c0:92:6a:b6:
                    81:50:a1:8c:2c:75:0e:0f:a6:31:2a:59:85:61:60:
                    7b:d3:02:88:fc:d3:59:35:b8:72:4d:e0:b4:5e:5f:
                    d6:e1:36:c4:4e:05:7f:c7:8b:c3:fe:bf:70:e7:06:
                    f4:ce:27:84:18:cc:6f:a6:16:9b:ed:56:ea:98:94:
                    2b:fa:6d:0b:eb:50:36:ab:b3:a6:ff:2b:f2:09:45:
                    86:4d:64:fb:0d:f5:e1:fa:26:f2:d0:0a:1c:2a:20:
                    21:62:3a:7f:e9:f7:cd:9c:26:ce:33:1a:03:b8:e7:
                    01:f2:7d:e2:a9:2c:b7:65:85:8d:5b:f4:ac:36:e0:
                    49:be:39:50:74:e2:01:00:92:a0:ea:25:b6:e0:e2:
                    cd:34:4e:89:b6:b5:93:53:95:cb:9c:3d:0a:47:b8:
                    b5:53:b6:d5:bd:0d:56:7a:b6:37:ce:ec:7e:6e:eb:
                    d6:20:bc:1a:2e:f1:d0:20:43:f5:73:c5:b8:90:1a:
                    6b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:57:13:B4:9C:74:0C:7F:B7:75:95:18:45:79:85:FE:5A:85:B0:E5
            X509v3 Authority Key Identifier:
                keyid:D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/323830343a373933633a3a2f33322d3336203d3e20323731323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:793c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:6d:ed:c7:fc:88:43:67:34:55:a9:d9:9c:e6:71:6e:1b:12:
         64:9d:2f:91:22:a4:72:b9:c5:55:ce:ca:c8:d7:f2:e1:12:5c:
         02:0b:af:69:d8:ba:e0:5e:ab:5d:b0:78:4a:d8:a2:93:14:4d:
         95:e0:6a:ee:54:a4:b1:4f:d1:e7:e7:64:5a:20:f3:fc:fd:0e:
         80:8c:f2:38:68:30:7c:b7:19:f1:03:fc:29:56:32:14:08:cc:
         c9:63:d2:b4:61:06:a5:80:c4:da:c8:3f:18:2a:51:51:c7:69:
         4c:3f:12:07:5b:02:d1:d0:ab:78:e4:11:db:00:6c:90:c3:da:
         89:74:44:0b:65:ec:9d:f9:c8:71:d4:72:77:39:5c:50:02:15:
         34:94:2d:96:a1:1c:99:12:25:b7:4d:51:3a:5b:a2:8f:23:de:
         e2:cc:57:17:35:a9:43:73:0a:52:3f:f3:6e:72:b7:45:8e:a7:
         0f:ce:51:bd:17:a0:70:41:31:d4:0d:78:a2:38:61:cd:d3:34:
         3b:5a:d0:bd:9e:8c:91:fb:d6:ec:19:60:c5:97:0a:ca:97:e7:
         0e:f0:c1:12:44:fe:a2:ca:ee:7c:48:91:57:f9:70:e5:f1:56:
         ac:d3:da:3a:8c:d7:6d:e9:8e:00:98:dc:55:2b:fb:a8:12:d3:
         3f:63:bf:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:44 2024 by rpki-client on console-fra.rpki-client.org