Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/323830343a356635343a3a2f33322d3334203d3e20323639303932.roa
File:                     323830343a356635343a3a2f33322d3334203d3e20323639303932.roa (raw, json)
Hash identifier:          Z7RRwOHMm/DTvWTLFscJF5q4ZoMUWtgNPJexVyGhLgA=
Subject key identifier:   D7:CB:85:D3:AD:34:46:BD:EE:B4:2E:26:3A:86:03:70:FF:06:37:6F
Certificate issuer:       /CN=A73D6D578C402A7DD8AED3B5544070906E2FE163
Certificate serial:       57BFE0B27309BD181B75D2DE28FEA3C962F3EC00
Authority key identifier: A7:3D:6D:57:8C:40:2A:7D:D8:AE:D3:B5:54:40:70:90:6E:2F:E1:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/323830343a356635343a3a2f33322d3334203d3e20323639303932.roa
Signing time:             Thu 04 Apr 2024 06:02:04 +0000
ROA not before:           Thu 04 Apr 2024 05:57:04 +0000
ROA not after:            Thu 03 Apr 2025 06:02:04 +0000
asID:                     269092
IP address blocks:        2804:5f54::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.crl
                          rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:bf:e0:b2:73:09:bd:18:1b:75:d2:de:28:fe:a3:c9:62:f3:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73D6D578C402A7DD8AED3B5544070906E2FE163
        Validity
            Not Before: Apr  4 05:57:04 2024 GMT
            Not After : Apr  3 06:02:04 2025 GMT
        Subject: CN=D7CB85D3AD3446BDEEB42E263A860370FF06376F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7f:10:c3:c4:a9:51:4c:fc:dc:42:6c:fe:24:
                    37:87:2f:fe:e2:51:4f:dc:61:a2:80:fe:61:6c:f9:
                    66:40:b2:11:af:07:4b:24:10:98:42:5d:b3:a5:4e:
                    f7:06:87:ca:db:36:42:1a:6e:94:78:14:aa:a4:38:
                    27:2d:4a:4e:48:96:9b:91:42:c7:39:99:ea:ca:c9:
                    87:a4:73:89:56:ab:d6:d0:64:da:7d:19:61:aa:d0:
                    dd:e7:3f:af:ac:6f:44:12:fa:b1:95:df:72:ed:5f:
                    c8:7b:c9:00:02:50:3b:93:a6:c0:72:ad:96:c3:e2:
                    09:43:87:a2:37:20:c8:7b:1c:f8:4f:ee:1f:20:74:
                    64:0e:fa:13:40:ad:b6:0f:b7:fb:f6:06:87:26:f8:
                    3d:77:64:b0:63:39:5d:04:12:dc:f4:d3:1c:a0:c9:
                    0c:eb:7a:32:cb:c9:ca:a1:7c:76:f7:40:e7:1a:94:
                    9d:77:05:4c:d1:05:f4:8d:60:fc:a2:65:57:90:b5:
                    0f:8b:ef:3b:d3:4a:c4:b0:41:9c:7f:10:19:91:a8:
                    7b:b8:0d:57:f0:9d:96:97:5e:fc:68:fb:40:89:8d:
                    d7:d7:60:21:8f:5e:33:62:98:0d:1e:4f:a3:b5:d8:
                    6c:8b:28:e3:02:52:84:71:93:67:b3:d8:5f:1d:ed:
                    d7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CB:85:D3:AD:34:46:BD:EE:B4:2E:26:3A:86:03:70:FF:06:37:6F
            X509v3 Authority Key Identifier:
                keyid:A7:3D:6D:57:8C:40:2A:7D:D8:AE:D3:B5:54:40:70:90:6E:2F:E1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/323830343a356635343a3a2f33322d3334203d3e20323639303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f54::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:7c:6b:bc:21:98:a4:e8:4b:11:76:e2:7e:48:42:22:c2:73:
         60:c4:b7:86:8f:07:aa:45:9f:81:c0:11:4e:75:21:c5:d2:bb:
         59:bc:27:7f:fa:70:71:98:d1:d3:be:9d:3f:f0:b7:45:74:6e:
         b5:60:e3:3b:f3:86:7e:71:d5:72:92:fa:f9:9e:94:06:75:79:
         9a:d4:88:b8:f8:57:9d:e3:8f:e5:58:a1:0a:d4:b5:06:90:76:
         f8:90:12:4d:a8:b0:05:ec:9d:ff:c6:f1:38:31:4c:03:dd:53:
         83:f0:30:b6:99:97:a9:e8:da:df:9b:f0:5e:ce:8d:99:14:ed:
         f2:1d:01:79:e0:8d:4a:6c:f7:6d:d9:d6:a7:af:50:93:e7:bb:
         d1:ce:4a:8c:e4:05:69:35:1a:06:f2:99:f4:41:1a:3a:51:ad:
         e5:40:74:df:79:f9:46:41:68:47:59:7b:30:4c:c8:0e:c4:ea:
         6a:c0:af:82:fc:90:2f:90:b4:2e:ab:57:99:69:64:d1:20:95:
         61:84:d1:45:22:d0:b6:d8:8f:a3:30:a8:94:3b:7f:0c:c7:48:
         96:2a:0b:20:c7:f3:ef:93:4c:f1:03:81:0a:62:ed:95:b1:c1:
         0e:34:36:f8:29:0b:fc:75:75:80:19:a8:c2:88:21:6a:9c:25:
         59:da:45:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 21:52:35 2024 by rpki-client on console-fra.rpki-client.org