Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LBWoVa3RBQ6AuYW8DQj4bDwRpUaxDqZ7jiXpxPZ8Ha5/0/323830343a383464383a3a2f33322d313238203d3e20323732323833.roa
File:                     323830343a383464383a3a2f33322d313238203d3e20323732323833.roa (raw, json)
Hash identifier:          xYE3FVS0cXi7vZf6EYjJ6Cw49R27dWmFS7ma1f8EwPU=
Subject key identifier:   04:DF:9E:AA:0B:15:DB:35:66:53:79:B0:F3:8F:36:02:3F:24:B3:11
Certificate issuer:       /CN=3504F7375A940F7C2F39F0724E0156581D0F249C
Certificate serial:       0D385BD38D85A7B7F878E0A964C2BB952EF304C4
Authority key identifier: 35:04:F7:37:5A:94:0F:7C:2F:39:F0:72:4E:01:56:58:1D:0F:24:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3504F7375A940F7C2F39F0724E0156581D0F249C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LBWoVa3RBQ6AuYW8DQj4bDwRpUaxDqZ7jiXpxPZ8Ha5/0/323830343a383464383a3a2f33322d313238203d3e20323732323833.roa
Signing time:             Mon 03 Jun 2024 17:33:49 +0000
ROA not before:           Mon 03 Jun 2024 17:28:49 +0000
ROA not after:            Mon 02 Jun 2025 17:33:49 +0000
asID:                     272283
IP address blocks:        2804:84d8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2LBWoVa3RBQ6AuYW8DQj4bDwRpUaxDqZ7jiXpxPZ8Ha5/0/3504F7375A940F7C2F39F0724E0156581D0F249C.crl
                          rsync://rpki-repo.registro.br/repo/2LBWoVa3RBQ6AuYW8DQj4bDwRpUaxDqZ7jiXpxPZ8Ha5/0/3504F7375A940F7C2F39F0724E0156581D0F249C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3504F7375A940F7C2F39F0724E0156581D0F249C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Jun 2024 18:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:38:5b:d3:8d:85:a7:b7:f8:78:e0:a9:64:c2:bb:95:2e:f3:04:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3504F7375A940F7C2F39F0724E0156581D0F249C
        Validity
            Not Before: Jun  3 17:28:49 2024 GMT
            Not After : Jun  2 17:33:49 2025 GMT
        Subject: CN=04DF9EAA0B15DB35665379B0F38F36023F24B311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:79:b0:17:90:8f:e7:b9:cc:a9:ee:19:63:f9:
                    d0:fa:fa:39:1d:5b:69:db:59:37:7e:88:21:f6:d1:
                    28:35:0e:45:4d:8c:de:c7:46:32:50:b9:e6:71:20:
                    d3:f6:9c:9c:39:ea:f6:49:c5:12:a4:c2:d7:19:36:
                    a7:05:f4:91:36:eb:4e:0d:35:0b:b2:c5:d1:e6:a6:
                    dc:8a:a0:fa:3a:f1:26:03:c4:4c:1b:30:90:cc:40:
                    ca:f7:a1:ec:23:d3:fe:45:e1:32:de:dc:2b:40:62:
                    49:31:0c:80:ad:f9:ea:a7:da:50:5c:27:bd:ff:e0:
                    14:69:80:42:7d:ad:fe:14:68:80:16:c4:ef:0f:60:
                    76:af:b1:4e:12:45:a0:eb:30:6b:15:60:d1:04:2d:
                    f5:f1:e8:f9:18:c1:1f:ee:ad:71:3b:c9:1e:13:ee:
                    3d:c1:87:07:44:49:af:94:8c:5d:f4:ce:8f:9a:fe:
                    5a:e0:73:6b:f3:1a:6e:cf:3a:74:71:c7:6c:7d:22:
                    fb:c0:fe:31:61:4e:51:a6:52:c9:57:e0:7b:f4:69:
                    46:f0:af:d6:97:7a:7b:74:4a:19:6e:99:c8:d1:26:
                    6f:f7:5f:0a:0c:f6:48:39:ae:c9:c2:b6:be:da:d4:
                    6c:f6:c1:32:e6:f7:2b:84:3e:65:60:2c:58:82:0f:
                    75:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DF:9E:AA:0B:15:DB:35:66:53:79:B0:F3:8F:36:02:3F:24:B3:11
            X509v3 Authority Key Identifier:
                keyid:35:04:F7:37:5A:94:0F:7C:2F:39:F0:72:4E:01:56:58:1D:0F:24:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LBWoVa3RBQ6AuYW8DQj4bDwRpUaxDqZ7jiXpxPZ8Ha5/0/3504F7375A940F7C2F39F0724E0156581D0F249C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3504F7375A940F7C2F39F0724E0156581D0F249C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LBWoVa3RBQ6AuYW8DQj4bDwRpUaxDqZ7jiXpxPZ8Ha5/0/323830343a383464383a3a2f33322d313238203d3e20323732323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:8a:48:c9:38:2f:d9:7f:14:69:d4:d2:bb:9b:24:b9:1d:67:
         9a:94:19:a7:2b:4b:f8:86:ac:b2:17:48:08:9f:9f:da:88:a7:
         31:a8:f7:90:9d:0b:27:f2:9b:37:a8:95:b6:0e:2d:68:62:ed:
         61:b0:51:80:97:ac:f8:9b:71:49:a9:af:ec:d7:31:bd:3b:46:
         fc:16:86:18:18:7b:b9:81:e9:b8:60:10:14:02:19:ed:1f:04:
         e0:34:4e:58:ad:2a:6d:22:61:eb:7d:a5:aa:66:72:eb:1f:a0:
         47:be:b0:62:71:1f:ef:9e:4e:23:8d:1c:8c:4c:9a:cb:7f:ed:
         e8:ea:20:a3:fa:34:da:e4:7a:c0:38:3f:83:5e:27:d1:4f:20:
         ac:9d:a7:b1:59:35:43:77:97:42:a9:51:68:12:9b:43:ca:f8:
         c3:8f:a2:96:e3:63:b3:1a:b2:a3:16:67:19:8a:46:96:8e:ec:
         27:1c:18:41:f3:b9:08:b3:27:b3:ad:ac:dc:28:e8:0c:70:a8:
         8b:c9:b1:f9:7b:63:c4:ee:c0:68:25:37:9a:96:95:61:67:05:
         ae:ee:ee:d8:a0:1b:89:4a:d3:c8:1c:56:8b:a7:c6:13:79:20:
         f9:70:98:35:28:57:73:ef:15:5d:94:3f:96:1a:f5:97:66:a1:
         f9:69:3a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 18:18:41 2024 by rpki-client on console-ams.rpki-client.org