Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/323830343a376366343a633030303a3a2f33342d3334203d3e20323731353239.roa
File:                     323830343a376366343a633030303a3a2f33342d3334203d3e20323731353239.roa (raw, json)
Hash identifier:          W5L+WDfthE6MLCO2gHpgeXc3IyRu+1HSTwFyWHUOP4I=
Subject key identifier:   82:F7:9A:2B:1B:B3:D7:52:1C:1C:A8:AA:54:76:DA:C5:F0:84:1B:3F
Certificate issuer:       /CN=D6E6294D1D9502F3C7F5F894B597837779B8D3E0
Certificate serial:       607D74A2B7CF641B75970C888C039005054F2641
Authority key identifier: D6:E6:29:4D:1D:95:02:F3:C7:F5:F8:94:B5:97:83:77:79:B8:D3:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/323830343a376366343a633030303a3a2f33342d3334203d3e20323731353239.roa
Signing time:             Thu 15 Aug 2024 20:01:34 +0000
ROA not before:           Thu 15 Aug 2024 19:56:34 +0000
ROA not after:            Thu 14 Aug 2025 20:01:34 +0000
asID:                     271529
IP address blocks:        2804:7cf4:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.crl
                          rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:7d:74:a2:b7:cf:64:1b:75:97:0c:88:8c:03:90:05:05:4f:26:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6E6294D1D9502F3C7F5F894B597837779B8D3E0
        Validity
            Not Before: Aug 15 19:56:34 2024 GMT
            Not After : Aug 14 20:01:34 2025 GMT
        Subject: CN=82F79A2B1BB3D7521C1CA8AA5476DAC5F0841B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c4:ed:39:06:e9:a5:21:de:fa:d5:ba:5d:f7:
                    9c:36:2e:6d:28:85:bc:08:74:dc:67:b8:1a:50:73:
                    b1:6f:2f:e7:d2:37:60:7b:a3:77:a2:6d:ce:b6:81:
                    36:38:9f:83:2e:ef:83:32:24:1f:0b:c8:1b:8d:e4:
                    ca:eb:ec:de:c5:93:49:a6:e1:1c:57:f9:e8:57:d9:
                    08:31:7d:07:4b:4c:4e:d0:90:67:b1:56:ef:79:f8:
                    82:25:03:5a:bf:ed:45:b4:96:9b:c0:0e:0b:a3:db:
                    07:03:43:a0:c4:51:79:cb:90:4f:be:27:73:92:02:
                    96:2b:b4:59:e9:9a:9e:6f:f2:83:cd:89:4f:43:9f:
                    13:17:89:9b:ee:5b:29:88:d8:e6:95:4d:56:88:f6:
                    d6:63:d8:73:0a:09:3c:a0:52:e6:ee:40:25:1c:6d:
                    e8:19:c4:40:85:4e:95:0a:b6:23:95:7c:59:47:9f:
                    71:53:4a:e3:e0:79:97:01:51:55:ea:c4:78:5a:34:
                    e0:5e:83:a8:f7:4d:cb:00:98:dc:3b:2c:33:4e:91:
                    fd:40:b4:f5:69:13:26:a3:f7:a2:3f:c4:e1:0d:f6:
                    2e:6d:37:b7:cc:86:8b:cf:8b:27:5a:1f:bb:5d:a8:
                    95:7d:f8:24:24:91:2c:41:81:19:1c:f1:a5:3e:d4:
                    56:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F7:9A:2B:1B:B3:D7:52:1C:1C:A8:AA:54:76:DA:C5:F0:84:1B:3F
            X509v3 Authority Key Identifier:
                keyid:D6:E6:29:4D:1D:95:02:F3:C7:F5:F8:94:B5:97:83:77:79:B8:D3:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/323830343a376366343a633030303a3a2f33342d3334203d3e20323731353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7cf4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0c:f2:97:a3:48:01:ba:20:15:e3:46:0e:4f:a3:a4:04:c1:6c:
         f0:cc:d6:25:e8:68:b8:b8:77:6b:27:5c:fc:07:ae:66:8e:ff:
         83:f8:55:cf:d1:69:d6:df:63:eb:f9:69:ff:19:a5:9c:14:a0:
         54:6d:2c:ca:cc:6c:d7:84:54:4b:67:fa:0c:06:3e:de:7f:16:
         e3:2d:c7:e2:33:8f:cd:c0:00:67:bf:57:33:fe:29:9b:7e:3b:
         d6:39:e4:02:84:08:d4:ad:5e:ad:ca:d8:f6:10:de:77:e1:f6:
         b6:67:99:69:fb:f9:2a:5d:56:60:11:49:43:5c:1d:97:d4:e3:
         ef:b4:27:46:65:9c:04:a6:50:24:96:ea:46:fb:27:b4:e1:38:
         29:4b:66:4f:4b:ed:6c:4f:8f:08:c9:46:15:8b:c8:c8:58:6e:
         8f:8c:8c:d6:c6:56:ea:db:c2:69:90:e9:68:69:a5:ce:31:a0:
         2a:86:d0:87:4c:61:df:8e:f6:22:f1:9b:b1:d4:4c:89:fe:6f:
         63:a2:a8:7a:7c:fa:d3:7e:a0:a6:af:8d:c5:65:6b:41:7e:f1:
         49:05:8f:56:ee:08:c6:f7:56:0f:9b:6c:ea:fa:d3:f1:dd:c5:
         60:dd:29:02:f8:13:98:5f:c4:b2:6d:2b:c4:17:37:9b:80:f3:
         6f:52:82:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:52 2024 by rpki-client on console-fra.rpki-client.org