Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/323830343a373638303a3a2f33322d3438203d3e20323731313136.roa
File:                     323830343a373638303a3a2f33322d3438203d3e20323731313136.roa (raw, json)
Hash identifier:          Fh7/Gj2/GN6wBDbOGL7+rbUqPQ3F+OI6Tx/zc++e+78=
Subject key identifier:   36:7F:93:80:EA:56:0F:FD:93:26:31:2A:CD:6C:C8:50:FE:3C:D6:7B
Certificate issuer:       /CN=278075463571E15A322ACDFA4EA429CD983E3EFB
Certificate serial:       5FA14A4CBA7F8688F889DF441139E4C2E52E4C17
Authority key identifier: 27:80:75:46:35:71:E1:5A:32:2A:CD:FA:4E:A4:29:CD:98:3E:3E:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/278075463571E15A322ACDFA4EA429CD983E3EFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/323830343a373638303a3a2f33322d3438203d3e20323731313136.roa
Signing time:             Wed 10 Jul 2024 15:05:00 +0000
ROA not before:           Wed 10 Jul 2024 15:00:00 +0000
ROA not after:            Wed 09 Jul 2025 15:05:00 +0000
asID:                     271116
IP address blocks:        2804:7680::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/278075463571E15A322ACDFA4EA429CD983E3EFB.crl
                          rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/278075463571E15A322ACDFA4EA429CD983E3EFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/278075463571E15A322ACDFA4EA429CD983E3EFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 17:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a1:4a:4c:ba:7f:86:88:f8:89:df:44:11:39:e4:c2:e5:2e:4c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278075463571E15A322ACDFA4EA429CD983E3EFB
        Validity
            Not Before: Jul 10 15:00:00 2024 GMT
            Not After : Jul  9 15:05:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:28:e3:03:b6:40:70:e4:10:e3:ef:6e:57:41:
                    2f:fa:ad:71:ff:b6:47:71:f0:8c:0a:c1:21:4a:c6:
                    32:c0:a4:48:9a:fa:8c:03:91:2a:72:31:d3:59:db:
                    d9:2b:ce:54:f2:35:69:bf:67:13:a2:07:66:0a:c3:
                    37:e2:cc:c3:fb:83:15:43:85:33:a6:a9:e3:3b:d5:
                    48:7e:8f:37:9b:67:11:12:e0:77:fc:33:d3:ba:1a:
                    cb:ab:5b:e1:18:7e:32:e0:66:fa:47:62:43:34:3e:
                    e6:69:67:03:1e:1b:75:bb:83:00:c9:b1:49:49:f7:
                    a9:c4:cc:23:13:00:36:c2:d2:9e:57:3a:2e:67:65:
                    5c:9f:b3:2a:e4:90:be:81:18:8f:0e:f3:f9:a6:d2:
                    2f:2b:1c:fc:8c:eb:00:88:f1:4a:03:41:94:b2:27:
                    81:8f:9a:b0:43:f9:93:ee:54:5d:63:92:e5:90:be:
                    06:3b:fe:43:40:38:79:01:2f:73:78:ea:58:4d:93:
                    b2:d1:1b:2f:0c:ed:f4:15:fb:fb:32:d1:80:47:32:
                    9e:88:c4:29:68:d4:6d:21:9d:07:a4:97:49:80:9e:
                    52:56:bd:62:c8:81:cc:08:4c:e0:d5:6f:7f:28:df:
                    51:f0:ab:9b:52:1f:9f:b1:48:5f:59:64:5e:f5:7c:
                    07:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7F:93:80:EA:56:0F:FD:93:26:31:2A:CD:6C:C8:50:FE:3C:D6:7B
            X509v3 Authority Key Identifier:
                keyid:27:80:75:46:35:71:E1:5A:32:2A:CD:FA:4E:A4:29:CD:98:3E:3E:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/278075463571E15A322ACDFA4EA429CD983E3EFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/278075463571E15A322ACDFA4EA429CD983E3EFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/323830343a373638303a3a2f33322d3438203d3e20323731313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7680::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:b9:53:1a:e6:e6:3c:6b:79:cd:4d:f4:ca:f2:a3:9c:8d:8d:
         18:70:af:0c:b8:cb:70:5d:d9:ae:78:0c:c3:58:39:43:d1:ca:
         5f:c5:19:97:0b:7b:bc:10:a9:ae:04:2b:d0:7b:d7:f0:eb:e5:
         7d:b5:79:7c:ff:2e:4d:13:b8:f9:06:9f:a0:5c:70:6d:f6:15:
         fe:ab:54:ad:cb:45:bf:28:09:3a:88:39:2d:ab:df:d4:2a:2f:
         07:00:1f:ad:3c:7d:94:2d:b7:1f:68:19:c3:a1:e3:1e:96:a9:
         96:a7:1d:86:3a:1d:05:1a:6f:78:ba:29:0a:c9:0e:57:ef:91:
         ed:33:47:95:a3:d6:68:ab:7e:b8:63:e1:d4:7d:18:2a:24:45:
         75:e4:da:39:1f:5d:87:c9:86:9c:ef:91:ed:ec:6c:27:02:d4:
         41:0e:1e:ef:f7:2c:5d:01:4f:e2:c4:cb:c8:f9:12:24:2c:4a:
         ae:ac:07:6c:60:b6:db:6f:a5:9b:0a:6f:66:b4:6c:53:e5:7a:
         c5:62:b2:ea:20:eb:78:75:6f:1f:32:7b:18:82:37:ce:14:b9:
         a5:28:c0:64:22:7e:10:23:8b:ab:5a:9d:d4:aa:e2:86:a5:e0:
         c9:48:67:75:43:75:20:38:de:84:11:99:e9:ce:e0:48:ec:b9:
         6e:c1:56:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 18:58:10 2024 by rpki-client on console-fra.rpki-client.org