Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/323830343a376366343a3a2f33342d3334203d3e20323731353239.roa
File:                     323830343a376366343a3a2f33342d3334203d3e20323731353239.roa (raw, json)
Hash identifier:          LLSrLmg43vQHyC2jp/aPnszXUundLjxql7r4AzfABLc=
Subject key identifier:   C2:72:31:DA:16:0C:0D:AC:6F:16:73:71:54:EE:69:5F:66:D8:25:D7
Certificate issuer:       /CN=D6E6294D1D9502F3C7F5F894B597837779B8D3E0
Certificate serial:       3E7852F5B357F73AC948CC9D4F7A9E11D13947CE
Authority key identifier: D6:E6:29:4D:1D:95:02:F3:C7:F5:F8:94:B5:97:83:77:79:B8:D3:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/323830343a376366343a3a2f33342d3334203d3e20323731353239.roa
Signing time:             Thu 15 Aug 2024 20:01:32 +0000
ROA not before:           Thu 15 Aug 2024 19:56:32 +0000
ROA not after:            Thu 14 Aug 2025 20:01:32 +0000
asID:                     271529
IP address blocks:        2804:7cf4::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.crl
                          rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:78:52:f5:b3:57:f7:3a:c9:48:cc:9d:4f:7a:9e:11:d1:39:47:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6E6294D1D9502F3C7F5F894B597837779B8D3E0
        Validity
            Not Before: Aug 15 19:56:32 2024 GMT
            Not After : Aug 14 20:01:32 2025 GMT
        Subject: CN=C27231DA160C0DAC6F16737154EE695F66D825D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:21:d7:c7:60:e1:18:03:85:42:95:65:14:6a:
                    4b:ab:0b:d1:48:eb:87:1f:33:ee:3a:dc:34:67:1e:
                    56:ab:dc:aa:86:4c:46:18:4e:f7:a8:58:b1:ca:2a:
                    c1:d5:4f:54:46:a2:a6:74:47:fc:03:17:08:f9:57:
                    1c:a2:14:f3:0e:3e:dd:7b:c7:dc:d9:aa:88:8c:e7:
                    1f:23:31:34:78:2a:cf:cd:cf:bf:c0:a4:06:91:70:
                    f6:1f:26:3f:03:77:49:ba:63:cc:fd:30:7e:ac:2f:
                    67:4c:53:d4:7d:b4:fa:b2:e4:c0:94:e5:59:48:0c:
                    b7:26:0d:e6:62:54:b2:77:a2:75:2e:e5:38:0b:8b:
                    93:6a:61:e4:54:91:54:6b:0f:c2:6b:55:42:40:31:
                    14:97:12:e8:5c:f8:b6:d7:75:ac:a9:f2:c5:e7:35:
                    d7:52:3f:b2:d5:ff:4e:9e:6c:8d:92:f9:f1:6c:8b:
                    49:69:3d:21:d5:c4:09:2c:b4:2f:ca:14:7d:67:75:
                    24:e0:aa:b5:87:40:48:05:c7:ba:40:95:e0:41:52:
                    a3:9c:be:8b:ec:f7:ec:65:36:30:47:79:46:a7:f2:
                    c1:89:c3:24:ae:f8:c3:a8:42:15:66:1b:52:30:fe:
                    d1:28:73:71:4a:a1:af:31:f3:62:e2:46:f0:f3:4e:
                    03:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:72:31:DA:16:0C:0D:AC:6F:16:73:71:54:EE:69:5F:66:D8:25:D7
            X509v3 Authority Key Identifier:
                keyid:D6:E6:29:4D:1D:95:02:F3:C7:F5:F8:94:B5:97:83:77:79:B8:D3:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/323830343a376366343a3a2f33342d3334203d3e20323731353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7cf4::/34

    Signature Algorithm: sha256WithRSAEncryption
         19:5a:c6:07:23:39:11:49:96:ab:e1:cb:da:7c:5a:6c:8e:a3:
         bf:cc:4d:2a:9c:55:87:33:6b:1e:34:67:5d:0b:f1:43:03:32:
         aa:25:bf:7a:23:62:28:11:5f:a3:fb:4a:8b:96:4b:42:89:a6:
         ea:ae:2a:33:fa:ce:b7:cb:f0:db:4a:a0:67:ba:1b:77:4a:bd:
         87:8e:dd:11:55:03:42:dc:98:43:c6:b7:de:c6:de:44:52:27:
         23:83:e9:df:33:3f:59:19:df:dc:a9:81:7b:9c:81:83:ca:06:
         18:f2:a5:76:da:80:7d:9b:27:83:63:c9:38:3b:3b:3c:0c:04:
         6c:ab:81:e8:c8:ad:3f:38:cb:e7:36:22:0e:00:73:6b:f3:53:
         72:02:fa:18:24:75:36:05:c3:24:9e:f9:12:f6:ef:42:9d:6b:
         8c:08:e1:a5:f1:53:b5:64:da:2a:6d:f5:73:f0:17:66:42:0b:
         8b:28:af:46:b3:21:0f:4d:39:e2:0e:e0:a7:5d:54:6e:1b:d4:
         9d:20:4e:f1:ab:84:0d:8c:3c:94:be:e8:68:ee:7b:16:28:35:
         80:92:5c:3f:4e:01:9e:5b:79:75:9a:6c:d3:56:3a:7e:80:61:
         ea:91:90:b2:9f:63:bd:67:5f:ff:25:3c:a5:7d:4c:65:67:29:
         cc:2c:c4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:52 2024 by rpki-client on console-fra.rpki-client.org