Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/323830343a376161343a3a2f33342d3334203d3e20323731333833.roa
File:                     323830343a376161343a3a2f33342d3334203d3e20323731333833.roa (raw, json)
Hash identifier:          nmxoBLj4wzaa9tMSrfu5jT5dpoS0mZ0cC0KS5iXsRMo=
Subject key identifier:   7F:51:B2:FE:F1:2E:95:9F:DE:DF:B1:2C:71:54:D1:34:7B:87:21:3A
Certificate issuer:       /CN=23235F2B7FAE22B78438698FD00F49F07D286674
Certificate serial:       49B8D3516FCA9C8048A26587F50980A6E086D452
Authority key identifier: 23:23:5F:2B:7F:AE:22:B7:84:38:69:8F:D0:0F:49:F0:7D:28:66:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23235F2B7FAE22B78438698FD00F49F07D286674.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/323830343a376161343a3a2f33342d3334203d3e20323731333833.roa
Signing time:             Fri 22 Nov 2024 14:28:11 +0000
ROA not before:           Fri 22 Nov 2024 14:23:11 +0000
ROA not after:            Fri 21 Nov 2025 14:28:11 +0000
asID:                     271383
IP address blocks:        2804:7aa4::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/23235F2B7FAE22B78438698FD00F49F07D286674.crl
                          rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/23235F2B7FAE22B78438698FD00F49F07D286674.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23235F2B7FAE22B78438698FD00F49F07D286674.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b8:d3:51:6f:ca:9c:80:48:a2:65:87:f5:09:80:a6:e0:86:d4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23235F2B7FAE22B78438698FD00F49F07D286674
        Validity
            Not Before: Nov 22 14:23:11 2024 GMT
            Not After : Nov 21 14:28:11 2025 GMT
        Subject: CN=7F51B2FEF12E959FDEDFB12C7154D1347B87213A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e3:f7:d8:b4:c4:fd:3d:df:c0:85:a5:1e:82:
                    d9:86:28:df:40:92:e5:88:24:1c:35:20:d4:6f:43:
                    1f:d1:cb:16:56:ea:6e:3a:14:f4:2c:13:8a:81:71:
                    96:d1:c1:18:05:13:7f:25:38:5f:80:23:5b:56:4c:
                    d8:5e:1b:90:95:84:55:ed:b0:37:f8:cc:21:fa:54:
                    c0:fd:a0:dd:b6:a1:16:e6:5b:d3:2d:c0:3e:da:14:
                    c4:e5:a1:85:7d:2d:61:0a:59:c1:46:79:94:91:a2:
                    c1:fc:d3:a9:7d:51:b1:8c:f1:9b:e8:08:6f:23:41:
                    c7:6e:41:3b:17:fc:33:5a:8c:37:8b:ba:65:37:01:
                    0e:4b:dd:09:0b:7c:61:6b:4f:20:a1:dd:db:8e:54:
                    d7:d5:ed:92:a3:57:c1:15:00:1a:69:18:c7:5a:3d:
                    c1:bd:b6:00:d1:eb:2e:2a:b0:0b:9d:80:47:9f:a5:
                    dc:50:26:5a:88:4b:e6:d2:12:8e:06:65:a8:50:ee:
                    60:5d:50:ce:fb:07:39:cb:7c:3b:a0:b6:6e:f1:19:
                    b2:91:18:46:b8:58:ec:67:5c:25:5b:9a:89:0a:bd:
                    5e:c9:dd:fd:dd:6c:a2:91:79:22:c9:d3:44:6e:27:
                    c6:f5:ce:a2:0e:b3:25:f1:db:c6:1f:29:79:2f:16:
                    4a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:51:B2:FE:F1:2E:95:9F:DE:DF:B1:2C:71:54:D1:34:7B:87:21:3A
            X509v3 Authority Key Identifier:
                keyid:23:23:5F:2B:7F:AE:22:B7:84:38:69:8F:D0:0F:49:F0:7D:28:66:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/23235F2B7FAE22B78438698FD00F49F07D286674.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23235F2B7FAE22B78438698FD00F49F07D286674.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/323830343a376161343a3a2f33342d3334203d3e20323731333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7aa4::/34

    Signature Algorithm: sha256WithRSAEncryption
         92:1b:d4:3b:78:af:00:2f:10:2c:97:e1:84:7d:83:59:9b:c9:
         2c:a3:30:fd:db:c1:84:0e:c2:be:f5:21:28:ab:87:50:2e:cb:
         07:be:12:61:f6:5d:88:27:24:f8:c4:95:78:df:87:e1:94:03:
         55:84:38:fc:06:d5:9d:e9:38:bd:c5:53:b4:0e:b4:b3:ee:8c:
         6f:66:00:0b:aa:fc:b9:c7:48:f6:f9:9f:b2:54:24:48:cc:68:
         9e:80:f7:21:b3:86:b7:4f:d1:90:67:36:f3:75:e7:ab:78:ae:
         23:ac:5a:03:ab:eb:01:58:a9:e4:e2:ce:1e:ca:a3:f8:7a:9a:
         ff:cf:3c:d0:5b:88:b6:dd:6e:c9:3f:4f:e5:ab:10:d6:da:9d:
         5f:c5:5e:71:eb:b2:76:a9:42:08:c8:22:59:f8:b8:a7:97:fb:
         5b:19:dd:80:de:b8:8b:2d:25:94:5e:1a:5e:2c:0d:c7:43:d7:
         b0:cc:17:f8:ea:1a:03:79:27:aa:1b:47:d2:21:94:0c:9e:cb:
         25:a6:2a:7c:ea:48:05:ef:b7:24:b8:fb:0c:2f:f1:7a:e8:f6:
         5e:1b:5f:c7:bf:c6:cb:ea:ec:a6:4b:b0:d0:4d:71:05:e6:fd:
         b6:97:65:73:88:5d:8f:36:d8:39:8f:d8:da:24:c7:df:ee:ad:
         d0:fd:6a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:29:57 2024 by rpki-client on console-fra.rpki-client.org