Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/323830343a383666343a3a2f33342d3334203d3e20323732363737.roa
File:                     323830343a383666343a3a2f33342d3334203d3e20323732363737.roa (raw, json)
Hash identifier:          tNDDGM17ciLHUkNXTdQ/tufSqSc/k3wJ72Qkfm64+II=
Subject key identifier:   BE:5C:12:34:37:BA:7F:FE:F7:6D:06:40:20:2C:C2:C7:7F:91:BC:8D
Certificate issuer:       /CN=E1C3821086E172D7404AE335C21C2D33F448F991
Certificate serial:       4D65E70EFECB199B427CE7E6B147750F7E087607
Authority key identifier: E1:C3:82:10:86:E1:72:D7:40:4A:E3:35:C2:1C:2D:33:F4:48:F9:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C3821086E172D7404AE335C21C2D33F448F991.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/323830343a383666343a3a2f33342d3334203d3e20323732363737.roa
Signing time:             Thu 04 Apr 2024 14:31:00 +0000
ROA not before:           Thu 04 Apr 2024 14:26:00 +0000
ROA not after:            Thu 03 Apr 2025 14:31:00 +0000
asID:                     272677
IP address blocks:        2804:86f4::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/E1C3821086E172D7404AE335C21C2D33F448F991.crl
                          rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/E1C3821086E172D7404AE335C21C2D33F448F991.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C3821086E172D7404AE335C21C2D33F448F991.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:65:e7:0e:fe:cb:19:9b:42:7c:e7:e6:b1:47:75:0f:7e:08:76:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1C3821086E172D7404AE335C21C2D33F448F991
        Validity
            Not Before: Apr  4 14:26:00 2024 GMT
            Not After : Apr  3 14:31:00 2025 GMT
        Subject: CN=BE5C123437BA7FFEF76D0640202CC2C77F91BC8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8b:19:a2:e7:d4:b4:e5:ac:00:ec:b9:12:26:
                    c4:ff:ed:df:2f:fe:53:00:99:be:43:05:97:b6:aa:
                    2b:6c:62:e5:ae:08:49:3d:54:cb:7e:7b:9f:6b:af:
                    c3:f1:0c:0d:b5:fa:7c:ad:5e:72:79:0d:9c:a0:87:
                    6e:80:91:e7:51:28:40:07:f0:2b:79:cf:f3:bc:9e:
                    cc:12:e1:e2:fc:6a:e2:15:92:89:37:79:a0:f3:24:
                    72:94:90:ee:2d:ba:e0:fe:d9:ca:0d:ff:cd:8a:56:
                    35:77:25:35:4a:1b:39:5a:87:30:66:01:55:67:64:
                    76:83:24:f9:20:6e:9f:de:bf:e0:ec:dd:58:4d:31:
                    da:79:a8:c0:f9:e9:99:f3:59:8b:7c:7a:88:ae:30:
                    0f:b4:f3:28:e6:03:07:13:29:96:06:8e:0c:6c:84:
                    c2:f7:a1:20:a9:09:fa:14:a4:ae:f3:34:4e:c1:19:
                    15:07:cb:27:0c:90:9a:b2:55:46:23:7d:ff:34:78:
                    c9:8f:74:01:b6:ae:be:ba:f6:f6:35:23:fd:b4:77:
                    35:3b:f9:ce:eb:43:66:5d:e0:e9:73:13:00:b2:58:
                    38:98:da:9d:31:f5:2f:c3:63:56:10:5a:0a:98:d1:
                    1a:0b:5f:07:8b:ae:ce:10:5b:0b:3b:23:97:f2:34:
                    8d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5C:12:34:37:BA:7F:FE:F7:6D:06:40:20:2C:C2:C7:7F:91:BC:8D
            X509v3 Authority Key Identifier:
                keyid:E1:C3:82:10:86:E1:72:D7:40:4A:E3:35:C2:1C:2D:33:F4:48:F9:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/E1C3821086E172D7404AE335C21C2D33F448F991.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C3821086E172D7404AE335C21C2D33F448F991.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/323830343a383666343a3a2f33342d3334203d3e20323732363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86f4::/34

    Signature Algorithm: sha256WithRSAEncryption
         27:d2:4a:f7:0f:d5:16:a1:cc:b0:89:1f:97:b2:91:44:da:7b:
         08:35:20:23:39:f7:d3:7e:9e:b8:c2:7d:a9:65:d3:8e:85:6f:
         15:d2:b1:f9:9b:17:12:ca:96:89:31:ae:3b:1b:4e:c4:21:c7:
         43:16:ec:e1:fe:eb:7e:d5:c4:53:2c:08:25:4b:49:48:4f:2f:
         c5:68:9b:5a:8c:5a:81:b9:63:3a:09:2a:4e:da:36:a2:ca:02:
         fa:75:38:95:e5:db:3e:bb:9e:63:5c:dc:63:14:f0:02:9f:68:
         11:57:78:cf:19:0a:e6:55:a5:26:77:93:91:a3:19:fc:96:55:
         97:ec:3c:99:6a:12:99:72:0f:87:67:e1:06:9a:0b:97:37:b7:
         48:08:6e:1d:05:48:04:e4:e9:22:00:42:90:68:3f:58:68:aa:
         97:e7:79:fd:a7:e6:97:dd:fe:0d:c7:38:fd:f8:1b:2d:a5:70:
         77:d5:b4:dd:46:08:51:e0:7f:98:07:51:b5:b5:77:c9:55:21:
         18:2a:d4:4a:93:e8:57:86:22:ae:da:64:7b:1a:43:db:d2:b4:
         6a:e7:17:18:22:ed:e7:5a:c5:bf:86:d5:f0:8f:f1:6e:29:49:
         de:c0:4a:61:19:0d:8d:44:2a:1e:2e:cc:b4:c6:06:22:29:6f:
         93:49:c0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:55 2024 by rpki-client on console-ams.rpki-client.org