Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/323830343a326439343a633030303a3a2f33342d3334203d3e20323635323930.roa
File:                     323830343a326439343a633030303a3a2f33342d3334203d3e20323635323930.roa (raw, json)
Hash identifier:          Sj/fk8S8pA/Efgu7BX+HBp6DY4WkWXMrf2sZhJ7l0+g=
Subject key identifier:   83:3D:7C:65:9F:45:61:54:C6:99:E9:69:8B:F1:C8:77:22:84:D6:98
Certificate issuer:       /CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
Certificate serial:       4ADF9F7E80D5EF36E022CDABDD6ADBE2C51D5340
Authority key identifier: D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/323830343a326439343a633030303a3a2f33342d3334203d3e20323635323930.roa
Signing time:             Thu 04 Apr 2024 10:32:30 +0000
ROA not before:           Thu 04 Apr 2024 10:27:30 +0000
ROA not after:            Thu 03 Apr 2025 10:32:30 +0000
asID:                     265290
IP address blocks:        2804:2d94:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl
                          rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 12:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:df:9f:7e:80:d5:ef:36:e0:22:cd:ab:dd:6a:db:e2:c5:1d:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
        Validity
            Not Before: Apr  4 10:27:30 2024 GMT
            Not After : Apr  3 10:32:30 2025 GMT
        Subject: CN=833D7C659F456154C699E9698BF1C8772284D698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:74:32:c2:8c:8e:80:0e:b0:44:db:8c:b6:21:
                    52:cb:6f:fe:47:c0:16:11:63:b8:47:02:4a:70:ac:
                    80:72:25:14:04:48:2d:a7:33:4d:d6:87:42:5e:c3:
                    09:23:28:d6:d2:63:a6:49:19:fc:04:af:28:9c:c3:
                    44:5d:57:73:c4:a5:fd:f3:94:13:15:fb:aa:75:d0:
                    01:e5:81:36:ee:4e:1b:97:af:8f:d4:1a:dc:bf:20:
                    d2:9c:92:1e:a5:3c:0a:13:6c:6a:0c:7f:20:5e:d2:
                    b3:8f:9b:38:a3:11:66:7a:17:9c:39:55:1c:8b:03:
                    2b:9b:6c:05:58:04:11:09:e4:ed:65:6a:c7:7b:d1:
                    ee:68:9d:f5:b1:e7:dc:77:b5:e2:fb:9c:9f:12:20:
                    29:38:2d:24:df:80:4b:f7:0f:03:47:24:c0:7e:ef:
                    ca:65:00:e8:03:2d:26:73:71:8a:ac:05:25:95:06:
                    43:23:86:8e:c2:ee:10:80:e8:4f:4e:c1:dc:36:11:
                    77:32:c2:53:c4:77:3b:35:0b:9f:29:72:b7:aa:cc:
                    d7:57:f0:12:6a:ea:73:08:9d:88:78:3b:56:3e:33:
                    6b:82:76:db:c3:f6:52:7b:09:3a:55:50:b3:9c:d0:
                    00:8a:14:42:d8:d5:d3:d7:b2:a9:ff:06:b3:49:c9:
                    54:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3D:7C:65:9F:45:61:54:C6:99:E9:69:8B:F1:C8:77:22:84:D6:98
            X509v3 Authority Key Identifier:
                keyid:D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/323830343a326439343a633030303a3a2f33342d3334203d3e20323635323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d94:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         48:43:f5:1c:fc:10:ef:98:f7:d2:46:b5:6a:83:c6:7d:14:27:
         7b:bf:68:a0:9e:d1:4a:cc:91:0c:4b:c2:a1:49:77:05:05:f7:
         af:de:09:69:c9:ff:f1:7b:ad:17:05:9a:ea:3c:8e:18:95:f0:
         78:ab:0c:3f:4d:57:d4:6a:ce:fc:29:34:e0:da:f1:5b:e9:20:
         44:22:5f:c4:be:58:c5:36:d0:ca:e6:df:e4:c6:62:9b:90:90:
         25:84:57:40:a5:02:be:25:a3:49:ec:d3:bd:23:3f:5d:e5:0a:
         27:51:c4:aa:c3:3d:81:1f:4a:2d:16:d2:65:a5:a7:7c:36:45:
         cf:20:33:25:bc:42:dc:1b:92:9d:17:08:44:bb:27:7b:25:e2:
         c7:2e:2b:b8:b9:bd:21:cf:ac:1d:8e:53:fc:d9:cd:49:6a:1b:
         bb:65:df:85:54:43:f9:3b:45:36:5d:0c:d6:99:be:66:11:66:
         37:4e:09:b3:3a:e0:07:8e:6a:1b:c5:76:68:b9:86:54:ce:f9:
         80:e5:03:00:bc:90:8a:cc:7b:aa:28:a6:d9:9c:a0:24:75:10:
         12:30:64:b2:9a:41:64:44:c4:a0:ae:4e:ca:79:88:dd:75:a6:
         81:86:41:ab:56:69:a2:56:97:7e:db:b9:eb:af:74:48:c4:ce:
         44:87:92:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 15:50:44 2024 by rpki-client on console-ams.rpki-client.org