Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/323830343a363632633a383030303a3a2f33342d3334203d3e20323639353339.roa
File:                     323830343a363632633a383030303a3a2f33342d3334203d3e20323639353339.roa (raw, json)
Hash identifier:          +54p+e7U1/ycal6jGNIB7yoRkWW6DtewKxy73jKClTg=
Subject key identifier:   93:0D:90:49:A9:FE:8E:AE:09:E2:D1:D8:5E:02:7E:0D:F9:85:0A:09
Certificate issuer:       /CN=61B8BFC4DF5F553A5B38694045E0E47F0F23EB63
Certificate serial:       4A7DB077DBFFC1A6294E453DC7DE4FF0AFD57FBA
Authority key identifier: 61:B8:BF:C4:DF:5F:55:3A:5B:38:69:40:45:E0:E4:7F:0F:23:EB:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/323830343a363632633a383030303a3a2f33342d3334203d3e20323639353339.roa
Signing time:             Thu 04 Apr 2024 15:55:28 +0000
ROA not before:           Thu 04 Apr 2024 15:50:28 +0000
ROA not after:            Thu 03 Apr 2025 15:55:28 +0000
asID:                     269539
IP address blocks:        2804:662c:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.crl
                          rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:7d:b0:77:db:ff:c1:a6:29:4e:45:3d:c7:de:4f:f0:af:d5:7f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61B8BFC4DF5F553A5B38694045E0E47F0F23EB63
        Validity
            Not Before: Apr  4 15:50:28 2024 GMT
            Not After : Apr  3 15:55:28 2025 GMT
        Subject: CN=930D9049A9FE8EAE09E2D1D85E027E0DF9850A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c7:90:cc:84:12:ab:a6:a8:0c:fe:54:06:85:
                    2b:87:11:47:6c:c7:c6:00:11:34:3c:c5:27:eb:4d:
                    8a:cd:34:59:5d:c3:0d:b4:fa:fe:94:59:ab:b9:a2:
                    40:30:a6:12:63:d4:5c:d2:84:dd:fd:d0:06:b1:b3:
                    05:5f:4d:71:03:d4:11:27:94:5b:3e:e4:89:fa:29:
                    52:3d:27:f2:8f:d0:67:3e:15:1e:3a:b4:3a:ca:45:
                    6e:45:fd:45:d2:c4:eb:97:b2:41:d9:0c:d3:5b:90:
                    a0:00:e8:52:d4:f6:12:f9:0e:a8:78:2b:46:60:63:
                    43:29:fe:2f:fd:12:f9:d0:a1:04:d8:ca:20:48:93:
                    54:34:20:63:d1:10:43:a8:07:0b:d2:4b:c9:c9:be:
                    6b:66:f4:f2:af:49:26:4e:83:cc:15:6d:f1:1d:9f:
                    12:3e:f1:5d:3d:49:45:d8:b8:6c:ff:83:f1:d8:5e:
                    4c:90:80:04:44:e3:5c:4c:9b:1b:bc:33:11:44:e4:
                    1b:ce:53:a9:5e:d4:e1:1c:c6:a6:af:8c:ea:e8:a0:
                    4e:9d:f6:02:cc:52:7c:48:da:fd:7a:86:05:c8:6a:
                    1d:2d:7b:f1:88:95:c3:72:13:b5:91:89:db:1f:09:
                    0d:2d:a6:73:56:9b:14:a4:7b:ba:82:6a:98:50:b1:
                    2f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0D:90:49:A9:FE:8E:AE:09:E2:D1:D8:5E:02:7E:0D:F9:85:0A:09
            X509v3 Authority Key Identifier:
                keyid:61:B8:BF:C4:DF:5F:55:3A:5B:38:69:40:45:E0:E4:7F:0F:23:EB:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/323830343a363632633a383030303a3a2f33342d3334203d3e20323639353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:662c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         08:79:9e:de:f0:fc:83:2f:d3:2c:b5:af:7c:d3:fe:a0:9c:22:
         da:18:a1:72:2f:6b:a7:9d:12:4b:d0:3d:95:2d:47:e8:51:bd:
         b3:f8:e4:07:eb:83:75:ac:49:f4:2e:d8:cb:ff:8b:df:17:22:
         64:24:77:ea:11:fd:b8:32:fd:49:5e:ee:0f:1d:ac:12:38:3f:
         3e:12:4c:7d:0c:ca:a6:74:57:ca:b2:d4:2b:06:32:ee:68:1f:
         71:ba:76:51:f8:9d:9b:a8:35:bc:50:0b:53:4f:9b:d1:99:a8:
         be:7d:32:20:59:bb:c7:a2:06:d5:e1:11:26:26:5f:db:46:2e:
         94:6a:dd:08:04:5d:c2:b0:aa:7a:f7:6a:63:3c:19:f2:63:02:
         02:89:03:77:22:86:0a:37:54:cd:84:8f:21:62:8f:cd:a3:18:
         16:da:0f:cd:14:26:40:6f:23:75:59:80:f3:55:fd:80:a4:0a:
         3f:c3:69:e2:4f:19:7d:ea:e5:6b:ef:fe:99:61:9b:59:24:1f:
         c6:85:38:d9:4d:6f:b7:4c:3a:17:ce:8b:c9:5c:2c:39:bd:50:
         fa:e8:39:a0:15:60:4e:28:2e:5d:ee:7d:a3:a2:16:fc:af:be:
         9e:b6:24:4e:5e:7b:b3:b1:67:db:89:28:6f:2d:e5:e3:5a:98:
         bb:91:37:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:49 2024 by rpki-client on console-fra.rpki-client.org