Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H271QMdvWExEAdwHK57gTuwdKJeknrKdce4hTcpi2nDo/0/323830343a366363303a3a2f33322d313238203d3e20323730343839.roa
File:                     323830343a366363303a3a2f33322d313238203d3e20323730343839.roa (raw, json)
Hash identifier:          TVMVrGKO974sx7xshYszkMI5IHN56JhF9uDcC/p7CXw=
Subject key identifier:   69:FF:BE:35:8B:57:A3:33:17:31:13:B5:27:99:81:E6:3D:85:39:F7
Certificate issuer:       /CN=5B0DB9324CBC0FFD2457266E0D95998A2EEA3B74
Certificate serial:       5D451246862C6CF9388A3B7EB9C16414E0A40DD1
Authority key identifier: 5B:0D:B9:32:4C:BC:0F:FD:24:57:26:6E:0D:95:99:8A:2E:EA:3B:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B0DB9324CBC0FFD2457266E0D95998A2EEA3B74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H271QMdvWExEAdwHK57gTuwdKJeknrKdce4hTcpi2nDo/0/323830343a366363303a3a2f33322d313238203d3e20323730343839.roa
Signing time:             Fri 18 Oct 2024 19:13:54 +0000
ROA not before:           Fri 18 Oct 2024 19:08:54 +0000
ROA not after:            Fri 17 Oct 2025 19:13:54 +0000
asID:                     270489
IP address blocks:        2804:6cc0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H271QMdvWExEAdwHK57gTuwdKJeknrKdce4hTcpi2nDo/0/5B0DB9324CBC0FFD2457266E0D95998A2EEA3B74.crl
                          rsync://rpki-repo.registro.br/repo/H271QMdvWExEAdwHK57gTuwdKJeknrKdce4hTcpi2nDo/0/5B0DB9324CBC0FFD2457266E0D95998A2EEA3B74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B0DB9324CBC0FFD2457266E0D95998A2EEA3B74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:45:12:46:86:2c:6c:f9:38:8a:3b:7e:b9:c1:64:14:e0:a4:0d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0DB9324CBC0FFD2457266E0D95998A2EEA3B74
        Validity
            Not Before: Oct 18 19:08:54 2024 GMT
            Not After : Oct 17 19:13:54 2025 GMT
        Subject: CN=69FFBE358B57A333173113B5279981E63D8539F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0a:0c:0d:c6:4b:0f:ab:ba:ca:81:b3:ec:33:
                    8a:2a:87:93:41:56:ef:32:fb:34:a0:ba:be:e3:9b:
                    f8:b3:51:c5:e0:07:fb:9f:39:43:9c:e5:df:5b:f6:
                    21:ae:44:b4:d8:4d:49:ae:80:d3:b3:2f:29:ac:78:
                    c5:b6:e1:7c:fd:35:69:6a:33:15:2b:b9:83:88:1a:
                    ad:66:1e:84:59:0f:3e:22:4b:6b:b3:3e:6b:b1:f0:
                    18:e7:a1:60:88:c0:1f:57:62:11:84:d1:6c:ea:6d:
                    00:ca:da:b0:b4:e4:00:8a:03:41:00:2e:ad:10:16:
                    2c:73:02:8a:ed:df:f8:49:0b:c6:d9:25:5c:60:70:
                    75:fc:9e:6f:40:73:5f:ab:1c:0d:27:9e:ab:02:71:
                    86:44:b3:1e:c8:e4:6f:6d:64:8b:8e:e9:d7:05:2d:
                    fd:20:71:cd:07:16:f7:4f:3f:d7:ec:77:8c:5f:21:
                    00:30:f9:e0:0a:21:6d:da:91:fe:5d:ea:5c:ec:78:
                    13:ca:07:d4:9c:9c:ac:31:aa:a0:0f:37:02:91:f0:
                    83:98:aa:af:ee:17:8b:c7:b3:fe:bd:e1:b6:e4:44:
                    38:4b:aa:ac:93:f0:cb:37:35:de:a1:53:26:0c:8a:
                    25:a0:8f:06:99:91:91:4f:a3:3b:42:27:17:52:7c:
                    30:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FF:BE:35:8B:57:A3:33:17:31:13:B5:27:99:81:E6:3D:85:39:F7
            X509v3 Authority Key Identifier:
                keyid:5B:0D:B9:32:4C:BC:0F:FD:24:57:26:6E:0D:95:99:8A:2E:EA:3B:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H271QMdvWExEAdwHK57gTuwdKJeknrKdce4hTcpi2nDo/0/5B0DB9324CBC0FFD2457266E0D95998A2EEA3B74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B0DB9324CBC0FFD2457266E0D95998A2EEA3B74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H271QMdvWExEAdwHK57gTuwdKJeknrKdce4hTcpi2nDo/0/323830343a366363303a3a2f33322d313238203d3e20323730343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:a8:9b:fe:a0:cb:d4:d7:76:3b:e6:26:65:03:3e:0f:8e:04:
         38:90:f1:5b:90:09:16:fd:25:07:a0:86:2e:5d:f0:9f:38:4c:
         d5:ed:30:2d:b4:f1:bf:a6:57:52:e5:22:4b:85:b7:db:6f:90:
         7f:84:f1:ea:48:80:87:a8:28:3c:8c:8a:c1:34:a2:11:bb:5b:
         7a:e9:09:81:73:fd:63:46:22:ff:04:4c:6f:76:df:e7:3a:32:
         ee:7a:47:80:76:a7:b3:87:d0:a8:bf:de:f6:ec:d8:7e:e0:bd:
         94:bb:c2:2f:62:85:b2:cc:ba:f6:98:55:80:a2:7e:17:c3:c4:
         cf:8e:0a:11:48:cd:f6:e3:64:11:21:8c:8e:43:88:68:9e:45:
         bf:df:de:9f:b6:f5:53:3f:23:cf:3e:de:9e:c9:eb:54:e1:af:
         ba:ea:9a:aa:3c:1c:ac:f8:38:53:02:13:f6:28:00:95:c1:93:
         95:2e:14:b2:00:6d:53:59:aa:ae:0c:d4:b8:bc:6a:71:e7:47:
         a6:9b:7a:7b:13:12:a4:02:fd:7b:a9:02:31:7d:97:04:4e:67:
         14:04:d2:99:20:dd:09:ea:4e:c7:aa:08:97:62:05:c2:21:17:
         ad:c2:d7:7b:f1:fb:e2:b1:1c:85:74:af:51:7f:bb:96:30:a9:
         3d:29:49:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:38 2024 by rpki-client on console-ams.rpki-client.org