Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/323830343a373361633a3a2f33322d313238203d3e20323730393330.roa
File:                     323830343a373361633a3a2f33322d313238203d3e20323730393330.roa (raw, json)
Hash identifier:          bkpvgWh+S+RuoBZxCTqoVTuDCgypguUMau84g9s3IL4=
Subject key identifier:   7F:37:FB:33:36:B5:E8:44:FD:D9:9E:55:09:85:C5:3E:01:66:E4:E2
Certificate issuer:       /CN=1EE4D67FA010E491BFEDFB7AA592F824EBBC5208
Certificate serial:       19514A2F8BA9DE58CD80C80B3ED33B7F6EF1C9A2
Authority key identifier: 1E:E4:D6:7F:A0:10:E4:91:BF:ED:FB:7A:A5:92:F8:24:EB:BC:52:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EE4D67FA010E491BFEDFB7AA592F824EBBC5208.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/323830343a373361633a3a2f33322d313238203d3e20323730393330.roa
Signing time:             Fri 04 Oct 2024 11:07:40 +0000
ROA not before:           Fri 04 Oct 2024 11:02:40 +0000
ROA not after:            Fri 03 Oct 2025 11:07:40 +0000
asID:                     270930
IP address blocks:        2804:73ac::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/1EE4D67FA010E491BFEDFB7AA592F824EBBC5208.crl
                          rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/1EE4D67FA010E491BFEDFB7AA592F824EBBC5208.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EE4D67FA010E491BFEDFB7AA592F824EBBC5208.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:51:4a:2f:8b:a9:de:58:cd:80:c8:0b:3e:d3:3b:7f:6e:f1:c9:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EE4D67FA010E491BFEDFB7AA592F824EBBC5208
        Validity
            Not Before: Oct  4 11:02:40 2024 GMT
            Not After : Oct  3 11:07:40 2025 GMT
        Subject: CN=7F37FB3336B5E844FDD99E550985C53E0166E4E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9a:dd:d3:54:ed:9b:54:eb:f5:56:f5:32:ae:
                    68:1e:1e:2f:8b:85:0e:f3:ce:46:11:03:25:ad:7c:
                    58:b7:a5:f8:20:ed:c5:3d:8e:21:31:6e:bb:13:6b:
                    08:aa:bd:6d:ef:3e:0b:a3:e0:b0:cc:ff:39:cf:9a:
                    f6:80:22:ec:8d:92:6f:c6:a0:4b:99:78:9b:db:44:
                    2d:9c:bc:28:00:e9:84:2f:68:4b:0d:92:0c:26:8c:
                    0a:2b:ba:8b:0d:8b:bd:d4:e8:80:c7:67:ac:3a:7e:
                    b6:80:1d:6c:3c:0c:65:0b:a7:43:d1:0e:ec:63:a4:
                    1c:f1:b4:25:6a:d7:1f:09:e0:2a:06:70:19:cd:ac:
                    c8:d1:b7:4a:97:10:75:6c:7b:3e:25:33:83:38:a7:
                    da:96:78:86:57:46:54:15:3a:b8:a6:99:d3:a9:7c:
                    f1:80:37:98:34:dc:1d:39:5f:1d:30:2c:c9:de:40:
                    a7:aa:8a:3b:fb:97:07:62:c9:6a:1c:b7:e5:9e:af:
                    43:28:17:e7:55:95:2a:7f:0d:c0:f1:0f:f3:95:eb:
                    5b:1a:e8:03:6f:22:c6:74:60:22:63:83:cc:ae:5b:
                    ab:79:e8:63:25:9d:d3:35:36:a0:33:b7:16:a0:08:
                    7a:fc:09:e0:88:6c:c2:7e:1e:cd:c0:83:72:30:c3:
                    cc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:37:FB:33:36:B5:E8:44:FD:D9:9E:55:09:85:C5:3E:01:66:E4:E2
            X509v3 Authority Key Identifier:
                keyid:1E:E4:D6:7F:A0:10:E4:91:BF:ED:FB:7A:A5:92:F8:24:EB:BC:52:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/1EE4D67FA010E491BFEDFB7AA592F824EBBC5208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EE4D67FA010E491BFEDFB7AA592F824EBBC5208.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/323830343a373361633a3a2f33322d313238203d3e20323730393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:b5:17:99:46:25:60:59:0f:9a:26:83:1c:11:ae:30:e1:07:
         33:87:fe:83:bc:e5:69:fc:5f:f7:9e:1b:fe:6d:0b:bb:74:02:
         10:16:4a:f7:7c:a1:47:be:52:9f:2f:56:7d:7c:4b:5f:05:bd:
         cc:53:bf:68:25:08:bd:6b:41:15:6f:86:2b:10:16:49:94:6c:
         68:f2:8b:6b:33:ce:d4:9a:99:48:50:4f:54:59:4a:f3:c1:18:
         be:f0:cf:3f:02:4d:77:13:e0:37:8b:e8:22:59:08:75:06:e6:
         b7:47:23:0c:98:9f:11:38:80:10:23:f9:ba:be:ba:cd:b5:c5:
         93:f8:35:69:31:d7:cb:f0:a5:60:19:fc:70:07:b3:1e:53:21:
         8f:2f:7e:6b:1b:38:e2:e4:4b:cf:7b:73:e7:5f:9f:27:a0:9a:
         c0:6b:dd:3d:27:fa:b0:2f:11:7c:79:69:c9:27:a8:c5:06:1d:
         e4:0e:44:af:11:74:b5:5e:39:c4:e1:86:25:dd:c6:2c:db:a1:
         16:0c:0b:aa:44:e7:0f:dc:83:69:39:61:88:57:9a:bd:53:03:
         67:de:81:2f:8e:7c:fe:3c:1b:2c:51:7a:25:62:d6:92:8b:8c:
         5f:d8:78:f8:49:29:7c:19:d6:86:1a:9f:dd:e6:d8:88:58:ad:
         6c:3a:a6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:13 2024 by rpki-client on console-ams.rpki-client.org