Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a343030303a3a2f33342d3334203d3e20323634353039.roa
File:                     323830343a323062343a343030303a3a2f33342d3334203d3e20323634353039.roa (raw, json)
Hash identifier:          QD4XtfLrZbDXnXbNdfXaHk7LQzi8igNV33C4148uozY=
Subject key identifier:   1A:DE:96:F8:B2:FC:52:AB:9C:3D:D6:CF:25:41:FE:0F:BE:48:87:FE
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       0E52607C0A67B033CD75F377F53EA2EB5C016419
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a343030303a3a2f33342d3334203d3e20323634353039.roa
Signing time:             Wed 03 Apr 2024 18:31:37 +0000
ROA not before:           Wed 03 Apr 2024 18:26:37 +0000
ROA not after:            Wed 02 Apr 2025 18:31:37 +0000
asID:                     264509
IP address blocks:        2804:20b4:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
                          rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:52:60:7c:0a:67:b0:33:cd:75:f3:77:f5:3e:a2:eb:5c:01:64:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Apr  3 18:26:37 2024 GMT
            Not After : Apr  2 18:31:37 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:34:98:f2:2a:33:71:dd:cf:e1:6c:52:93:2d:
                    eb:0f:dc:48:00:0e:39:44:c8:a2:7b:de:7b:b2:f9:
                    2b:5b:95:9d:e1:9b:ef:44:79:e5:c4:fa:3e:32:40:
                    43:01:eb:a2:79:4d:69:c8:f5:13:29:77:aa:89:9f:
                    5c:5b:5a:01:14:df:0f:3a:6c:92:b9:f6:86:f7:1b:
                    fd:41:78:a1:61:b1:c8:9c:81:12:64:cb:39:bc:08:
                    ed:4a:d5:8a:0a:12:54:af:f7:f1:2d:d7:98:6c:01:
                    4b:44:99:97:cf:2a:f1:f8:db:4d:8b:f9:20:f0:9d:
                    38:a7:30:a0:29:b2:bd:54:de:2c:d7:07:77:9b:f3:
                    da:e8:b7:2d:5a:fb:b9:3c:50:e4:80:14:95:22:d5:
                    52:06:df:c7:04:58:2b:b6:17:48:94:10:82:19:ce:
                    53:6f:ae:19:92:38:95:c1:41:e3:fd:e4:db:d2:38:
                    79:e3:04:48:d4:e9:5f:d8:60:0c:61:a5:01:e7:41:
                    a9:0c:af:73:98:d1:ec:dc:0c:88:3c:ae:41:30:b5:
                    34:5e:a1:8b:e1:f2:53:a2:c6:ca:e2:1d:08:52:b2:
                    0a:32:c0:08:25:7f:04:9d:8e:90:3e:06:87:6b:2e:
                    aa:8d:76:e4:25:65:dc:04:b0:33:7a:66:24:34:c6:
                    d5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DE:96:F8:B2:FC:52:AB:9C:3D:D6:CF:25:41:FE:0F:BE:48:87:FE
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a343030303a3a2f33342d3334203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         70:e3:71:f1:b5:85:1e:02:68:50:d5:a4:a2:81:56:6a:5f:13:
         21:85:4a:35:13:66:87:d3:b3:cd:8b:57:2d:5b:cf:31:3e:33:
         f9:11:56:fe:e7:9a:15:28:87:e6:24:53:73:18:ac:f0:8f:c5:
         a9:19:70:4f:16:b1:46:f7:72:97:2c:77:4f:00:8f:9f:31:e0:
         8a:ff:ce:50:42:69:43:f8:e1:74:93:c4:0e:1c:05:26:13:c5:
         0d:b4:71:09:d5:ed:00:fa:9b:b2:7f:23:e2:64:bb:0a:cb:bc:
         c0:93:f6:48:74:b9:f3:86:b3:69:83:5e:b5:a0:67:c2:31:8d:
         e7:f2:fa:cd:9f:a1:7b:17:6e:f7:c2:fe:bd:47:b6:37:08:d4:
         b8:92:02:4f:d4:14:c9:17:7d:dc:66:24:0a:d8:a1:41:27:2e:
         8b:f2:0f:09:4d:ed:40:47:89:d7:34:23:2a:6f:a9:6f:e4:60:
         a3:19:1e:db:dc:98:91:c7:8d:e7:d7:a0:9c:6d:41:e2:7f:d9:
         01:08:85:3f:df:88:07:b0:99:e6:4a:43:18:61:7a:78:4c:97:
         d2:a2:1a:6f:3d:e7:ea:6c:50:b2:fd:d9:a3:4a:7f:22:d4:a1:
         54:23:c5:de:1c:ef:3b:e8:99:8f:22:02:22:db:64:0b:97:f1:
         ea:cf:ac:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:05 2024 by rpki-client on console-ams.rpki-client.org