Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/323830343a366662343a3a2f33322d3335203d3e20323730363738.roa
File:                     323830343a366662343a3a2f33322d3335203d3e20323730363738.roa (raw, json)
Hash identifier:          grtdEqYi1SZS+hHvZJkGGJX17UWb0Z/gqzIvPEhax8g=
Subject key identifier:   B5:95:EB:4D:A2:84:5F:6B:4F:16:11:0D:CD:61:89:2D:D2:38:57:9B
Certificate issuer:       /CN=F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587
Certificate serial:       2F74E8EC8DA766C80A8B372A97D36FD28CBDBE4E
Authority key identifier: F4:50:62:DE:52:8E:3F:9E:B3:E8:78:F8:DE:D6:EB:8B:8D:7E:35:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/323830343a366662343a3a2f33322d3335203d3e20323730363738.roa
Signing time:             Wed 03 Apr 2024 18:32:25 +0000
ROA not before:           Wed 03 Apr 2024 18:27:25 +0000
ROA not after:            Wed 02 Apr 2025 18:32:25 +0000
asID:                     270678
IP address blocks:        2804:6fb4::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.crl
                          rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:74:e8:ec:8d:a7:66:c8:0a:8b:37:2a:97:d3:6f:d2:8c:bd:be:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587
        Validity
            Not Before: Apr  3 18:27:25 2024 GMT
            Not After : Apr  2 18:32:25 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:d5:77:8a:e8:5e:93:fb:30:ad:3e:70:e9:
                    5c:0d:69:e9:34:c8:65:f6:67:4c:b1:2d:07:02:c0:
                    75:e2:cc:28:81:a0:b6:00:ef:cc:1b:33:d8:77:5e:
                    e6:11:fd:2d:05:21:ba:f9:8a:9f:c2:eb:e9:69:df:
                    d3:7e:62:d3:79:3f:2a:95:a1:de:4d:a6:37:18:f1:
                    34:f7:96:bd:05:f0:1b:78:30:f7:a7:cc:ca:0b:e9:
                    2d:0c:09:18:ff:b8:c0:dc:c9:83:e9:29:f3:43:2a:
                    5a:c4:a1:2c:a8:39:1e:fc:a8:80:33:d7:24:08:d4:
                    61:e7:c8:3d:ab:36:f4:84:05:f9:69:ac:85:22:f9:
                    66:0e:f8:5d:8c:34:14:a0:86:d4:34:19:f5:1b:40:
                    31:c4:86:84:fd:61:cf:d9:96:ef:7c:3c:72:6d:51:
                    c5:42:de:0b:3f:a4:f6:ca:33:77:7b:0c:1e:3f:95:
                    5e:2b:27:55:2b:37:cf:2d:35:95:c0:07:45:30:b0:
                    ed:3c:cf:ff:2f:d4:e7:14:e1:38:e8:68:32:1f:70:
                    08:68:84:b1:e3:90:e7:79:54:3c:49:91:c8:c7:a1:
                    00:1e:53:a6:3b:9b:a7:36:43:60:e9:a1:68:a3:ff:
                    9b:47:2e:8d:f5:2e:d3:09:8b:f8:0a:12:ac:ef:7a:
                    66:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:95:EB:4D:A2:84:5F:6B:4F:16:11:0D:CD:61:89:2D:D2:38:57:9B
            X509v3 Authority Key Identifier:
                keyid:F4:50:62:DE:52:8E:3F:9E:B3:E8:78:F8:DE:D6:EB:8B:8D:7E:35:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/323830343a366662343a3a2f33322d3335203d3e20323730363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:ac:8c:12:07:65:dc:95:b2:bd:1f:b6:5f:94:84:af:db:3a:
         aa:32:58:b2:fc:ce:d3:80:5b:59:25:68:f5:7c:50:35:7c:2e:
         63:4a:12:db:00:ea:4e:56:b0:50:32:8e:a9:ea:ef:1f:9f:04:
         a3:4e:c4:6d:e6:21:7f:5f:62:5c:85:37:b4:78:54:d9:d3:ee:
         a2:82:46:bb:7e:e4:30:6f:bd:21:a1:df:f3:1c:14:2d:bc:62:
         48:9e:4f:cf:7b:38:da:28:be:d3:cd:1d:45:e7:ac:e8:87:d4:
         13:65:c9:6e:8a:74:40:ac:8d:df:48:a1:b4:4c:15:c8:2e:14:
         3f:57:62:67:2e:b4:db:2e:8c:9a:dc:2a:fa:8c:ef:12:85:c1:
         f4:61:7c:16:f7:48:a5:55:fb:cd:f6:3c:a7:7c:ae:f9:d1:55:
         d6:e2:aa:20:1b:44:76:eb:9d:95:1c:5d:f3:fd:42:53:d5:2c:
         db:a3:31:92:bd:4c:3b:72:b8:9b:71:3f:7a:3d:61:67:56:30:
         5e:d5:c0:75:8b:6f:98:e9:45:17:75:ad:a3:2c:84:65:32:98:
         69:3d:a5:92:a3:af:0c:c9:b4:0e:4e:37:1e:0b:b7:78:6a:46:
         ae:65:d2:59:4e:50:b3:a9:d7:32:ad:a2:ed:8a:35:7a:71:ef:
         57:fd:99:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:54 2024 by rpki-client on console-fra.rpki-client.org