Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cqe4BWJkXwJjK2Gf45V2jcAcdqLNJnui9n7bJTQKPc3X/0/323830343a366337383a3a2f33322d3332203d3e20323730343730.roa
File:                     323830343a366337383a3a2f33322d3332203d3e20323730343730.roa (raw, json)
Hash identifier:          yHTucCWXjndskFsgZaNE54/Ewk1AVfheeHVDjLnKa48=
Subject key identifier:   91:C9:93:FE:DF:CC:34:37:31:13:99:57:A1:7E:EF:EF:55:95:91:5C
Certificate issuer:       /CN=F8627EF4EC5630BFBFA1853F634FB0290F6D4852
Certificate serial:       661AAF8FBC6F638905E5EB45841F03B96A0C7299
Authority key identifier: F8:62:7E:F4:EC:56:30:BF:BF:A1:85:3F:63:4F:B0:29:0F:6D:48:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8627EF4EC5630BFBFA1853F634FB0290F6D4852.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cqe4BWJkXwJjK2Gf45V2jcAcdqLNJnui9n7bJTQKPc3X/0/323830343a366337383a3a2f33322d3332203d3e20323730343730.roa
Signing time:             Wed 04 Sep 2024 05:50:16 +0000
ROA not before:           Wed 04 Sep 2024 05:45:16 +0000
ROA not after:            Wed 03 Sep 2025 05:50:16 +0000
asID:                     270470
IP address blocks:        2804:6c78::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cqe4BWJkXwJjK2Gf45V2jcAcdqLNJnui9n7bJTQKPc3X/0/F8627EF4EC5630BFBFA1853F634FB0290F6D4852.crl
                          rsync://rpki-repo.registro.br/repo/Cqe4BWJkXwJjK2Gf45V2jcAcdqLNJnui9n7bJTQKPc3X/0/F8627EF4EC5630BFBFA1853F634FB0290F6D4852.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8627EF4EC5630BFBFA1853F634FB0290F6D4852.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1a:af:8f:bc:6f:63:89:05:e5:eb:45:84:1f:03:b9:6a:0c:72:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8627EF4EC5630BFBFA1853F634FB0290F6D4852
        Validity
            Not Before: Sep  4 05:45:16 2024 GMT
            Not After : Sep  3 05:50:16 2025 GMT
        Subject: CN=91C993FEDFCC343731139957A17EEFEF5595915C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:57:bf:89:fa:4f:fa:c0:b8:d7:9d:27:f3:f4:
                    b0:d6:1c:5f:47:cf:9d:3d:f4:05:3a:40:a3:68:e9:
                    a6:b3:79:de:f7:06:df:4f:96:fa:cd:7a:2d:5c:5e:
                    02:07:bf:cc:70:ab:d1:d5:77:50:4a:6e:0c:41:11:
                    c4:77:63:d5:59:a8:fe:27:86:73:17:1f:18:7d:81:
                    a6:d8:d6:3d:59:4a:c4:5d:60:6b:c8:10:8f:62:ea:
                    b3:68:2b:12:d8:ae:07:66:92:9c:5f:ec:ed:63:8e:
                    50:53:4a:92:a9:9f:10:ce:43:69:77:c3:4e:2b:80:
                    5d:11:c6:f2:74:74:d1:09:fa:8e:1b:fc:e7:ad:85:
                    6b:39:0f:5e:c4:9f:0e:b5:73:0c:38:b0:30:14:2e:
                    19:19:37:49:5a:75:80:18:b5:8d:60:d5:d2:7e:f3:
                    3d:0b:8d:4b:61:77:d0:60:d6:0d:ee:e6:c3:84:1a:
                    0e:20:8e:55:e1:0c:90:ca:c9:79:b7:03:46:a0:fa:
                    b0:c5:08:a7:7f:2e:ba:01:48:c4:6f:6a:53:7c:ee:
                    ee:dc:2c:3d:df:3b:4b:d5:54:69:2e:f8:ad:07:01:
                    dc:d0:c9:b9:66:1d:2c:a5:9d:2b:4b:04:88:d9:9f:
                    ee:54:76:0d:07:a1:cc:c3:83:cb:e9:de:50:16:58:
                    e8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C9:93:FE:DF:CC:34:37:31:13:99:57:A1:7E:EF:EF:55:95:91:5C
            X509v3 Authority Key Identifier:
                keyid:F8:62:7E:F4:EC:56:30:BF:BF:A1:85:3F:63:4F:B0:29:0F:6D:48:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cqe4BWJkXwJjK2Gf45V2jcAcdqLNJnui9n7bJTQKPc3X/0/F8627EF4EC5630BFBFA1853F634FB0290F6D4852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8627EF4EC5630BFBFA1853F634FB0290F6D4852.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cqe4BWJkXwJjK2Gf45V2jcAcdqLNJnui9n7bJTQKPc3X/0/323830343a366337383a3a2f33322d3332203d3e20323730343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c78::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:0f:6b:f0:ba:36:78:e4:08:53:0a:98:a8:cd:5a:d2:dd:32:
         b4:b9:a3:c8:09:e1:93:11:fd:d2:b2:cb:96:e4:f3:31:f6:6a:
         b1:2f:55:41:89:4b:c1:dd:80:00:29:21:0c:4d:f1:83:83:93:
         d8:91:4f:26:80:5a:c2:cc:20:67:da:71:63:e9:89:d5:d6:ca:
         e8:7c:17:b2:59:18:a0:02:39:54:41:1b:42:13:ed:94:2b:37:
         37:fe:14:98:b4:d7:b9:df:ed:c4:a7:95:fc:5c:22:c7:7d:c1:
         b1:2c:81:a9:e8:26:5c:f9:f4:78:2d:af:6f:6f:54:fa:d6:b3:
         ac:c2:63:01:1c:46:77:39:97:47:95:c0:50:4e:75:60:71:cd:
         9b:da:c0:58:90:eb:e4:73:6a:2a:f4:95:06:39:68:dc:af:53:
         88:e6:22:45:f4:6f:62:1f:f0:40:b2:57:a7:2a:9e:b9:43:56:
         1a:14:3e:ee:16:cf:76:8c:59:9f:72:d5:cb:9a:a1:f0:b2:d7:
         7b:f4:71:bd:6d:32:ff:4d:b1:5a:fb:ae:df:e1:5b:00:23:6c:
         d8:ef:44:6b:88:ea:b1:39:84:63:7c:af:5e:8b:1c:f1:b0:c8:
         cb:50:8c:2e:ab:88:31:d0:a8:d7:0e:f0:d1:3a:7f:dc:d7:54:
         86:cf:8a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:36 2024 by rpki-client on console.sobornost.net