Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/323830343a373862633a3a2f33322d313238203d3e20323731323632.roa
File:                     323830343a373862633a3a2f33322d313238203d3e20323731323632.roa (raw, json)
Hash identifier:          2YFVUCvCWpCiPopRM4llNB5+LToYEPgBrSz7QovdGrs=
Subject key identifier:   7D:E9:DC:64:E9:03:EE:2C:26:76:B5:95:D7:54:C2:B6:90:60:69:C1
Certificate issuer:       /CN=9E17AE12E54FEC7BF015C94EBD811062D85D7047
Certificate serial:       214E163605753F9F4352CDD1C3BAF390ABCD77EE
Authority key identifier: 9E:17:AE:12:E5:4F:EC:7B:F0:15:C9:4E:BD:81:10:62:D8:5D:70:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E17AE12E54FEC7BF015C94EBD811062D85D7047.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/323830343a373862633a3a2f33322d313238203d3e20323731323632.roa
Signing time:             Thu 11 Jul 2024 15:22:46 +0000
ROA not before:           Thu 11 Jul 2024 15:17:46 +0000
ROA not after:            Thu 10 Jul 2025 15:22:46 +0000
asID:                     271262
IP address blocks:        2804:78bc::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.crl
                          rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E17AE12E54FEC7BF015C94EBD811062D85D7047.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 10:28:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:4e:16:36:05:75:3f:9f:43:52:cd:d1:c3:ba:f3:90:ab:cd:77:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E17AE12E54FEC7BF015C94EBD811062D85D7047
        Validity
            Not Before: Jul 11 15:17:46 2024 GMT
            Not After : Jul 10 15:22:46 2025 GMT
        Subject: CN=7DE9DC64E903EE2C2676B595D754C2B6906069C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2b:ae:1f:53:26:be:5c:4f:6a:5c:db:4a:b4:
                    d3:a8:54:f5:94:3e:71:87:e4:21:13:88:3e:8f:a1:
                    e6:66:f6:75:49:d7:82:89:65:de:c9:f4:71:b4:8b:
                    eb:b6:f5:c4:5e:72:40:b8:f9:f5:f9:2b:e8:8e:a0:
                    09:f0:5a:4f:c9:e7:c6:06:69:a1:08:18:d7:e0:a3:
                    b0:5a:4b:18:9a:6d:3a:a7:80:9e:87:31:a6:88:a1:
                    81:62:51:2a:43:3f:88:f9:f8:ce:6f:ab:61:9d:67:
                    b9:e6:ea:1a:fb:a0:1c:93:0f:30:bc:ee:7b:ee:58:
                    0d:78:24:1e:7b:05:1e:60:00:c9:f3:e2:99:4f:03:
                    91:6e:ef:16:8e:e4:83:f3:6c:35:b6:d0:1e:59:5a:
                    6a:12:8e:84:58:9e:a3:69:25:ae:0d:0e:29:03:1c:
                    3f:ee:36:56:d6:e6:82:bd:ca:a5:40:86:c2:6b:f7:
                    48:0e:0b:57:1b:77:d1:db:08:38:2c:ea:54:8e:01:
                    5e:4c:5c:60:5d:6e:1e:66:53:91:96:55:70:41:a4:
                    ec:72:e8:b3:77:44:34:31:c2:1a:95:3a:ad:11:0b:
                    de:de:de:74:35:d1:3f:ae:f0:26:a5:b1:4a:3f:21:
                    58:d1:0d:4b:db:84:5e:ed:86:a1:d3:ed:14:a8:ea:
                    ca:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E9:DC:64:E9:03:EE:2C:26:76:B5:95:D7:54:C2:B6:90:60:69:C1
            X509v3 Authority Key Identifier:
                keyid:9E:17:AE:12:E5:4F:EC:7B:F0:15:C9:4E:BD:81:10:62:D8:5D:70:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E17AE12E54FEC7BF015C94EBD811062D85D7047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/323830343a373862633a3a2f33322d313238203d3e20323731323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:33:d5:55:f7:c6:ab:7b:17:13:62:83:e1:46:1b:f9:ac:74:
         ec:14:41:ac:0d:1f:36:11:54:b8:ba:a3:cd:a4:cb:22:ec:bc:
         b1:13:2b:74:7c:8d:2e:42:98:07:4c:be:c8:38:5c:90:7a:6c:
         58:89:bd:9b:bf:f3:38:85:9f:a0:43:06:cb:23:3b:f1:ce:8b:
         63:5f:74:2f:fe:67:36:89:87:8e:a9:46:3c:6a:53:ef:43:55:
         e2:7b:88:a7:2e:9a:ef:9b:a1:bf:b7:33:2f:8e:fc:a7:1b:0e:
         d3:26:9f:89:22:76:a3:6b:b5:0b:20:92:bb:62:3b:93:c4:6a:
         91:af:b3:36:e9:36:dc:22:8d:79:ca:a7:2a:b8:3c:0d:da:42:
         ad:cb:dd:3c:bb:ed:e5:68:44:64:ce:81:ce:90:03:b9:fa:ac:
         4b:c8:b9:00:d0:1b:61:53:5f:b2:61:6c:79:a1:3b:52:fa:03:
         6b:2f:10:45:86:55:d9:6d:0d:fa:a7:27:e5:d8:05:30:a1:93:
         b7:cb:eb:fb:42:6d:db:63:5d:bc:b9:b3:7d:b3:a2:d8:13:6b:
         1a:aa:68:b7:dd:48:39:c8:7a:a0:a2:8a:73:b8:73:b2:78:d9:
         71:a6:b0:7f:82:4d:6a:fe:ce:6a:fb:da:35:de:94:6b:3b:d0:
         2c:3e:c3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 12:53:16 2024 by rpki-client on console-ams.rpki-client.org