Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/323830343a363266303a3a2f33322d313238203d3e20323639333239.roa
File:                     323830343a363266303a3a2f33322d313238203d3e20323639333239.roa (raw, json)
Hash identifier:          rV61iO788jcbeL+XTizJljr9YIeuGYXFrXOWGrpYZHs=
Subject key identifier:   8E:81:89:A3:E0:D4:0E:A0:62:AD:A5:3C:BE:33:76:DF:F0:12:95:C4
Certificate issuer:       /CN=6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE
Certificate serial:       327CFC7815048B8D26FCA4344944E333428FC45B
Authority key identifier: 6E:4B:B7:F0:B7:10:1A:40:8E:EA:A0:2B:18:DF:90:4F:30:D4:AB:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/323830343a363266303a3a2f33322d313238203d3e20323639333239.roa
Signing time:             Mon 16 Sep 2024 18:43:32 +0000
ROA not before:           Mon 16 Sep 2024 18:38:32 +0000
ROA not after:            Mon 15 Sep 2025 18:43:32 +0000
asID:                     269329
IP address blocks:        2804:62f0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE.crl
                          rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:07:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:7c:fc:78:15:04:8b:8d:26:fc:a4:34:49:44:e3:33:42:8f:c4:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE
        Validity
            Not Before: Sep 16 18:38:32 2024 GMT
            Not After : Sep 15 18:43:32 2025 GMT
        Subject: CN=8E8189A3E0D40EA062ADA53CBE3376DFF01295C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7f:49:b1:38:24:08:9c:24:b9:5a:54:a5:10:
                    fd:95:ee:10:73:9e:1c:0d:14:40:6f:1e:ef:90:fd:
                    41:3e:60:55:3e:46:78:8c:25:fb:65:90:8b:f9:3a:
                    11:8b:e6:62:0f:be:6b:09:0d:6b:5a:2c:74:90:da:
                    7c:f2:0b:c5:94:24:2e:64:76:a6:39:09:e0:c2:1c:
                    c3:93:1f:18:0c:b3:72:51:52:67:a9:d0:d7:a1:45:
                    a9:23:40:c7:c8:cb:59:7b:17:d0:e5:21:ec:8e:91:
                    bc:e4:ef:7e:4d:96:5f:40:84:d3:e9:ce:a7:e0:57:
                    76:e3:fb:5e:1c:c5:f5:b7:32:3b:52:ee:6e:16:91:
                    8a:a4:e9:6f:45:64:f9:be:8a:71:a4:93:43:e0:01:
                    69:c6:f9:ea:70:32:45:35:c5:54:18:74:ca:67:69:
                    ba:55:b9:f7:cd:d7:8b:f4:4d:73:95:d7:12:d3:50:
                    ac:c5:3e:bd:42:d9:58:b1:2c:1c:73:12:54:2c:f1:
                    20:67:a8:71:dc:9b:d0:d4:5a:79:af:67:cf:da:64:
                    43:1e:ab:8f:a9:a5:68:ef:e9:54:09:f0:5b:c5:ee:
                    2c:e0:0a:91:62:eb:4f:0a:e9:64:e8:9d:a8:31:eb:
                    68:3a:fe:ae:61:ec:88:f6:2b:6d:21:41:db:5f:e2:
                    11:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:81:89:A3:E0:D4:0E:A0:62:AD:A5:3C:BE:33:76:DF:F0:12:95:C4
            X509v3 Authority Key Identifier:
                keyid:6E:4B:B7:F0:B7:10:1A:40:8E:EA:A0:2B:18:DF:90:4F:30:D4:AB:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/323830343a363266303a3a2f33322d313238203d3e20323639333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:ea:56:15:3d:e7:2a:ad:26:b0:f8:91:8a:e0:aa:77:aa:ad:
         c1:e2:c7:fe:3b:1f:92:db:a9:a2:44:e5:b4:ef:60:bc:14:93:
         8f:0a:8e:c6:65:d8:f9:c7:39:5f:f7:3b:18:17:e7:b2:e4:13:
         2f:02:fb:c3:23:ff:3f:37:5b:d0:88:16:d5:e2:3c:40:ae:a7:
         03:18:95:d2:11:9b:1e:81:35:f4:6b:e5:66:c3:50:79:f9:17:
         d7:44:26:6b:86:ea:5b:d0:1f:da:81:d9:e7:3b:9d:fe:15:94:
         29:b5:ee:7b:d6:b7:ca:a4:e4:e1:ff:14:42:d6:c4:e6:a4:98:
         88:18:1a:24:58:e4:ab:41:8f:1c:72:b4:ca:fc:c8:52:45:4d:
         67:2d:20:b5:be:e3:42:c8:ee:8b:4a:aa:70:68:93:1a:67:ff:
         a0:d2:23:35:2e:76:5d:7b:71:b6:5d:1c:39:52:0c:22:98:00:
         04:2f:8c:75:d7:6a:51:84:3d:aa:66:a0:a0:b9:e1:e8:c5:95:
         3c:86:db:ef:ed:8a:4e:ee:b6:3e:66:87:a7:4e:5a:49:d4:62:
         f1:13:47:d7:fb:c1:e0:ea:ba:51:8e:3c:6a:b1:28:7d:e7:58:
         ec:15:9d:02:00:d9:33:e1:ae:0e:6a:56:a8:10:50:80:63:67:
         ed:9c:21:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:07 2024 by rpki-client on console-fra.rpki-client.org