Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/323830343a313762303a3a2f33322d313238203d3e20323633313635.roa
File:                     323830343a313762303a3a2f33322d313238203d3e20323633313635.roa (raw, json)
Hash identifier:          ajTvj7p1yBkhSFjFNlIPvv8fg8LenFwY3z1h/yZ/mRM=
Subject key identifier:   BF:D2:E3:7A:FC:0B:4E:A7:7E:20:7D:9F:F9:0B:0F:EF:13:C2:9F:13
Certificate issuer:       /CN=CCC1598968804633B2A44FA3F4900D700A0BCC47
Certificate serial:       3594143D5454762A32604714BC944DB4D4E8302A
Authority key identifier: CC:C1:59:89:68:80:46:33:B2:A4:4F:A3:F4:90:0D:70:0A:0B:CC:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCC1598968804633B2A44FA3F4900D700A0BCC47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/323830343a313762303a3a2f33322d313238203d3e20323633313635.roa
Signing time:             Thu 21 Nov 2024 12:23:42 +0000
ROA not before:           Thu 21 Nov 2024 12:18:42 +0000
ROA not after:            Thu 20 Nov 2025 12:23:42 +0000
asID:                     263165
IP address blocks:        2804:17b0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/CCC1598968804633B2A44FA3F4900D700A0BCC47.crl
                          rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/CCC1598968804633B2A44FA3F4900D700A0BCC47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCC1598968804633B2A44FA3F4900D700A0BCC47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:94:14:3d:54:54:76:2a:32:60:47:14:bc:94:4d:b4:d4:e8:30:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC1598968804633B2A44FA3F4900D700A0BCC47
        Validity
            Not Before: Nov 21 12:18:42 2024 GMT
            Not After : Nov 20 12:23:42 2025 GMT
        Subject: CN=BFD2E37AFC0B4EA77E207D9FF90B0FEF13C29F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ad:d0:6f:1b:e1:fe:82:86:e9:0f:55:b6:8a:
                    21:3a:9f:2f:c5:82:a1:c7:29:dc:cc:92:56:46:4e:
                    a6:70:14:c0:4b:c2:0f:3b:5a:c3:15:b0:2b:ec:3a:
                    34:44:72:59:62:66:f0:4f:3a:3a:98:8e:e1:53:fc:
                    b1:4e:54:13:bc:2b:d1:e9:df:bb:2e:5d:e9:c0:41:
                    eb:ba:0b:0c:11:4f:2b:95:b8:cb:ec:d1:ae:7a:59:
                    0a:8e:96:df:f5:19:58:be:31:b4:60:05:f8:89:04:
                    7e:4a:e2:1a:a2:43:c4:68:96:64:1f:32:db:ed:02:
                    6d:a9:ef:47:c6:0b:d5:3b:b6:fa:e6:b2:a6:f2:f4:
                    34:cf:f1:79:20:cc:7a:fd:dd:e0:a4:95:ba:b6:58:
                    87:77:b2:99:dc:46:6c:34:93:ef:32:62:a3:65:c8:
                    29:69:19:78:71:a1:90:b0:ad:15:de:b4:8d:78:f2:
                    05:bd:c2:e1:27:74:b8:b1:44:43:17:4f:0c:06:67:
                    07:93:53:54:aa:fc:fc:93:b3:aa:0b:c0:b7:78:b3:
                    63:3d:95:2b:30:8d:ab:24:55:79:94:bf:0f:2f:e9:
                    86:62:88:0f:75:3c:0c:4d:2c:99:22:3b:cb:b8:75:
                    b1:1c:6f:65:e8:d3:eb:87:e3:ad:30:fc:c2:23:d3:
                    2b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D2:E3:7A:FC:0B:4E:A7:7E:20:7D:9F:F9:0B:0F:EF:13:C2:9F:13
            X509v3 Authority Key Identifier:
                keyid:CC:C1:59:89:68:80:46:33:B2:A4:4F:A3:F4:90:0D:70:0A:0B:CC:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/CCC1598968804633B2A44FA3F4900D700A0BCC47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCC1598968804633B2A44FA3F4900D700A0BCC47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/323830343a313762303a3a2f33322d313238203d3e20323633313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:90:f3:ba:5d:b7:e9:cb:7b:fa:79:2f:e7:04:cc:88:79:a9:
         d1:9a:0f:93:26:16:80:ba:7f:eb:a0:56:e1:a7:24:60:50:bf:
         77:96:2d:23:58:89:bd:a6:9e:26:d5:16:ae:25:6c:65:92:a1:
         31:aa:d4:4b:99:e5:6d:64:34:e9:b5:97:9a:16:65:91:72:74:
         79:bb:93:18:7d:e3:6a:e6:85:c4:e0:60:18:85:3b:04:0f:4e:
         4c:f4:e3:19:db:c6:c7:39:ee:5c:66:2a:47:d0:09:ae:a3:e2:
         89:c7:4e:f9:70:c0:ff:2d:dc:be:cb:d4:35:f2:73:45:9d:9b:
         88:61:88:dc:05:cd:d8:cd:d0:2f:c0:cb:96:a4:a0:78:b7:ee:
         4a:39:2e:3f:5d:89:be:d7:44:23:4e:d6:b8:c3:ba:a9:5b:08:
         f0:07:a9:d7:eb:22:fe:3e:cc:c5:9c:86:a7:b1:65:68:98:04:
         35:48:fd:50:a4:99:8e:0d:3e:b7:5f:13:d7:b7:7b:9a:e9:e0:
         8f:b6:48:8d:a7:db:7e:0f:b2:a9:0a:0c:d7:27:ab:98:ec:d9:
         5a:e9:6f:11:ea:8e:8f:7a:47:85:9a:19:22:1e:d2:d2:ae:97:
         e2:1b:20:d3:ed:41:a9:d6:aa:1f:8a:01:b8:25:07:c9:12:77:
         ab:3d:d8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:07 2024 by rpki-client on console-fra.rpki-client.org