Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/323830343a333637303a3a2f33322d3438203d3e20323636333438.roa
File:                     323830343a333637303a3a2f33322d3438203d3e20323636333438.roa (raw, json)
Hash identifier:          YfW1uuFUzXhJmEa84nnPSzkxgrDDXhogkkYz/evKbeQ=
Subject key identifier:   BE:F9:6F:B3:0F:30:1E:41:CE:B1:DB:F7:CE:3A:39:4E:14:68:90:53
Certificate issuer:       /CN=273782B997878A9415F132214E8D09CFA971572F
Certificate serial:       09B5510FC349544651D52419372220EB13B8CF73
Authority key identifier: 27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/323830343a333637303a3a2f33322d3438203d3e20323636333438.roa
Signing time:             Wed 03 Apr 2024 18:31:55 +0000
ROA not before:           Wed 03 Apr 2024 18:26:55 +0000
ROA not after:            Wed 02 Apr 2025 18:31:55 +0000
asID:                     266348
IP address blocks:        2804:3670::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl
                          rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b5:51:0f:c3:49:54:46:51:d5:24:19:37:22:20:eb:13:b8:cf:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273782B997878A9415F132214E8D09CFA971572F
        Validity
            Not Before: Apr  3 18:26:55 2024 GMT
            Not After : Apr  2 18:31:55 2025 GMT
        Subject: CN=BEF96FB30F301E41CEB1DBF7CE3A394E14689053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ed:88:71:ee:89:50:6c:87:9a:cb:e6:6a:d1:
                    18:59:70:4d:ef:d2:0a:b3:93:0b:7f:ee:d8:c3:28:
                    3a:52:23:8e:0a:82:3e:9b:39:23:cb:68:05:04:3e:
                    57:ae:c5:b7:a8:0d:1b:ee:84:5f:cd:96:6a:5a:7f:
                    a7:ce:21:4b:0d:7d:da:90:e3:d5:2b:dd:e0:35:68:
                    ed:73:e2:95:9d:79:da:ce:62:2f:47:52:11:6d:71:
                    d8:d9:40:63:aa:1c:e6:ca:31:c4:23:2a:5c:af:b4:
                    e7:9e:0c:28:f0:f9:5c:7b:31:ec:f9:f3:29:bf:00:
                    bc:d2:f1:05:b6:f6:a8:0f:f9:24:b4:a9:fb:a5:94:
                    94:f6:f1:f9:c4:2d:e7:c2:b0:79:48:e8:e9:48:40:
                    3f:d8:4e:a4:cb:84:35:83:67:f3:c0:db:cc:22:bb:
                    ba:95:ec:0d:07:92:7d:80:86:5f:02:bf:0a:c0:a7:
                    78:21:83:ca:3a:60:01:77:80:c7:7f:71:7d:bf:8e:
                    90:a9:79:11:b5:9e:96:2f:c5:52:7c:7e:95:1a:7a:
                    93:dc:2c:a5:2b:78:52:9e:45:28:91:69:23:23:35:
                    f3:17:06:4a:b9:57:03:3c:e0:f4:93:ce:c7:ee:cf:
                    0a:b4:a8:0e:01:c3:51:9e:98:48:6b:44:b6:e1:3b:
                    0c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F9:6F:B3:0F:30:1E:41:CE:B1:DB:F7:CE:3A:39:4E:14:68:90:53
            X509v3 Authority Key Identifier:
                keyid:27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/323830343a333637303a3a2f33322d3438203d3e20323636333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3670::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:de:e5:f0:7e:4e:d2:06:88:bc:72:8e:a4:12:8d:95:f3:25:
         33:50:5c:21:64:83:fc:42:d5:15:6a:6b:ef:20:a1:45:06:e0:
         18:5d:6c:37:87:f2:00:21:99:82:b8:df:89:98:13:4d:e3:67:
         6f:b4:68:2e:e5:66:a0:1f:ed:cd:ae:c3:93:4f:9c:4c:8e:cc:
         be:22:11:69:9e:d1:5f:72:11:63:3b:99:e7:4d:c9:81:8d:0c:
         eb:a7:14:f6:da:3e:17:b6:95:06:c0:a0:3c:e7:82:1b:41:79:
         0e:dc:9b:d3:89:d2:92:92:84:81:67:03:a5:b7:2d:fc:69:ae:
         90:76:af:75:bf:55:4e:92:2e:06:7b:72:f1:c9:4b:c3:fe:05:
         26:a9:39:4a:2b:8b:b9:cf:bc:c0:1d:93:46:d5:bc:16:fb:36:
         d2:01:9c:8b:7d:8c:a4:9d:31:f0:22:ae:8c:a1:e9:69:f2:a0:
         3b:28:a5:e4:8d:01:b4:00:27:c4:35:ef:2f:61:6a:41:70:04:
         f3:26:df:7d:50:0d:da:8c:f2:df:fe:66:94:64:fd:5f:bd:dd:
         fb:fb:50:22:b7:db:30:1e:43:77:95:47:ff:18:9c:fe:da:15:
         b0:15:71:fa:fa:54:75:53:68:f0:82:44:db:e5:32:3d:81:ab:
         d2:1c:e2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:06 2024 by rpki-client on console-fra.rpki-client.org