Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/323830343a376631303a3a2f33322d313238203d3e20323731363634.roa
File:                     323830343a376631303a3a2f33322d313238203d3e20323731363634.roa (raw, json)
Hash identifier:          xsfJuFFnpUgUI7NBL/O8JhsnYhHSE6tYnKMLCK3YJaE=
Subject key identifier:   66:E8:7D:94:63:71:C7:D3:B3:11:C9:79:D9:C8:CF:C8:74:AF:59:9A
Certificate issuer:       /CN=0FED030269800638BF17FD30C2F60BA74A98F9B1
Certificate serial:       4481E6439610B675FD761DAA42BD3B630F9B0613
Authority key identifier: 0F:ED:03:02:69:80:06:38:BF:17:FD:30:C2:F6:0B:A7:4A:98:F9:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FED030269800638BF17FD30C2F60BA74A98F9B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/323830343a376631303a3a2f33322d313238203d3e20323731363634.roa
Signing time:             Tue 08 Oct 2024 12:01:39 +0000
ROA not before:           Tue 08 Oct 2024 11:56:39 +0000
ROA not after:            Tue 07 Oct 2025 12:01:39 +0000
asID:                     271664
IP address blocks:        2804:7f10::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/0FED030269800638BF17FD30C2F60BA74A98F9B1.crl
                          rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/0FED030269800638BF17FD30C2F60BA74A98F9B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FED030269800638BF17FD30C2F60BA74A98F9B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:81:e6:43:96:10:b6:75:fd:76:1d:aa:42:bd:3b:63:0f:9b:06:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FED030269800638BF17FD30C2F60BA74A98F9B1
        Validity
            Not Before: Oct  8 11:56:39 2024 GMT
            Not After : Oct  7 12:01:39 2025 GMT
        Subject: CN=66E87D946371C7D3B311C979D9C8CFC874AF599A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3d:b7:07:e4:97:0f:e5:3e:0a:51:ed:03:0c:
                    25:6b:1e:c9:44:c6:d8:39:a6:79:df:f8:9d:28:65:
                    ef:c9:30:93:96:b4:dc:f5:21:3f:f9:32:12:91:0b:
                    f2:dc:2f:28:dd:62:ce:18:d1:24:96:45:8f:2f:eb:
                    f5:c6:05:ee:bc:f6:a6:5b:6f:62:b2:69:f1:79:51:
                    db:8f:5a:44:ef:76:27:70:60:8c:bb:24:82:b9:67:
                    6b:8a:36:31:b6:79:ec:4c:d8:8b:d8:5c:c9:1b:17:
                    30:ca:05:f7:69:8e:33:01:09:40:ca:4b:12:98:ae:
                    42:d8:88:55:db:ad:be:e0:87:66:6f:56:af:54:f5:
                    d3:f7:3a:3c:5b:7e:5a:59:33:2b:91:d5:51:b7:79:
                    e8:23:82:32:f5:70:bc:2a:69:c4:93:9c:f5:f8:18:
                    c3:2b:77:9e:73:df:e5:a5:97:a2:ae:18:02:12:8b:
                    9c:04:07:dc:80:f7:e3:55:19:fb:95:45:aa:d3:2f:
                    29:f2:5c:aa:b9:e8:e1:57:9b:49:61:3e:ef:cf:e7:
                    5f:c2:01:47:fb:ee:78:32:76:46:cb:0e:46:25:89:
                    ae:8c:fe:6a:7f:89:80:d8:f0:a2:9a:94:00:74:bb:
                    37:5a:e5:ab:3e:21:f9:6c:d2:6f:04:33:b6:e5:48:
                    73:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E8:7D:94:63:71:C7:D3:B3:11:C9:79:D9:C8:CF:C8:74:AF:59:9A
            X509v3 Authority Key Identifier:
                keyid:0F:ED:03:02:69:80:06:38:BF:17:FD:30:C2:F6:0B:A7:4A:98:F9:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/0FED030269800638BF17FD30C2F60BA74A98F9B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FED030269800638BF17FD30C2F60BA74A98F9B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/323830343a376631303a3a2f33322d313238203d3e20323731363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f10::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:ac:f3:be:ea:13:e7:6f:eb:d8:ad:8f:9b:19:b6:5d:f5:d7:
         c9:18:df:65:91:f9:e9:93:02:b1:08:46:3c:8c:44:9a:91:bb:
         e2:d6:46:28:49:2c:8e:48:05:86:7c:8f:1a:0d:ea:f7:6f:2c:
         fc:af:69:f4:83:c8:2e:a5:b7:54:a2:ed:d1:f6:77:f0:f2:a5:
         1a:0c:f8:15:6b:a6:61:81:5f:78:a9:92:73:ca:d1:d7:6b:5a:
         25:96:ee:10:e3:d9:69:a1:b5:35:ed:45:cd:e0:ae:73:35:89:
         0c:40:bc:09:27:58:e2:07:20:f2:a9:de:42:18:29:75:d7:1a:
         9f:ad:4f:c7:cc:66:f8:cc:f8:da:67:69:70:d8:ea:ca:57:7f:
         a0:55:78:16:ee:05:8a:12:d8:ce:e2:09:22:2c:50:e0:bf:4f:
         72:7e:17:61:45:a7:79:fb:ee:85:8f:c5:7a:3e:54:d6:dc:a9:
         10:62:ee:e8:9a:e1:06:3b:ac:33:02:86:63:6b:c5:2e:5d:02:
         33:98:55:dd:11:e4:56:cd:f0:9f:73:ed:f3:19:5d:ea:81:59:
         6a:74:9a:58:dd:6f:87:1b:97:56:68:ee:0d:bd:23:58:cb:48:
         4e:f9:79:4b:ef:0c:60:fc:86:46:75:41:aa:8d:8a:69:f8:65:
         be:8f:58:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:13 2024 by rpki-client on console-fra.rpki-client.org