Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          cq9xdMTQwhEBL2QjibzUaRtSC1Zw1LJ/WUNO5a+Nh0w=
Subject key identifier:   67:6C:DC:7B:7A:79:F8:F3:03:2C:35:C8:99:92:2E:C3:AB:2D:A3:3B
Certificate issuer:       /CN=AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E
Certificate serial:       054561353E592D073DC58C087AAEB8F8FA8EFD2E
Authority key identifier: AB:40:03:9B:1E:5D:05:09:C5:1C:C3:58:7B:EF:6E:D2:A0:DF:E7:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Thu 04 Apr 2024 18:24:03 +0000
ROA not before:           Thu 04 Apr 2024 18:19:03 +0000
ROA not after:            Thu 03 Apr 2025 18:24:03 +0000
asID:                     264936
IP address blocks:        2804:3034:30::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:45:61:35:3e:59:2d:07:3d:c5:8c:08:7a:ae:b8:f8:fa:8e:fd:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E
        Validity
            Not Before: Apr  4 18:19:03 2024 GMT
            Not After : Apr  3 18:24:03 2025 GMT
        Subject: CN=676CDC7B7A79F8F3032C35C899922EC3AB2DA33B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c6:b3:60:99:2c:2c:46:33:41:01:af:65:4e:
                    6f:dc:fc:d5:79:9c:68:54:ca:72:72:3f:e7:ec:b1:
                    88:c4:24:fc:e6:52:b5:59:c8:18:11:51:b6:d2:89:
                    6a:ce:fe:0c:a7:23:ed:0a:c6:1d:83:3e:11:1b:b4:
                    ff:47:ba:30:7f:9f:88:9c:75:0d:15:74:41:31:10:
                    20:54:cb:8b:27:84:eb:43:af:4f:8f:8b:d6:3c:79:
                    25:e1:e6:08:ee:d4:a7:85:d4:58:96:79:cd:8b:94:
                    c3:b6:74:93:39:ac:f4:9b:07:2f:07:46:e1:16:0f:
                    01:40:0a:25:73:19:6e:7e:4f:38:ac:06:42:c4:4c:
                    87:50:1b:6c:70:68:b7:a5:33:45:13:98:b5:aa:91:
                    b8:a9:59:00:e6:84:a8:3e:2d:b8:d4:31:70:0c:62:
                    f4:95:d8:a2:b4:93:d4:7f:ec:d1:a5:c4:52:8f:e8:
                    6b:32:f9:66:4c:9e:1f:63:fb:05:30:5f:80:63:36:
                    02:5a:60:86:97:ed:fa:17:05:91:21:06:a5:61:b2:
                    6b:04:51:5b:f5:fe:8e:a0:c0:ed:22:47:a8:ea:be:
                    55:ac:d1:f7:46:97:d7:8d:a6:94:a8:73:02:83:19:
                    ab:36:1d:e2:42:f6:f1:9f:27:2e:9d:66:92:cd:be:
                    92:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6C:DC:7B:7A:79:F8:F3:03:2C:35:C8:99:92:2E:C3:AB:2D:A3:3B
            X509v3 Authority Key Identifier:
                keyid:AB:40:03:9B:1E:5D:05:09:C5:1C:C3:58:7B:EF:6E:D2:A0:DF:E7:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         b6:49:33:03:0f:75:b0:80:a6:fb:a4:be:b7:6e:b1:57:19:d2:
         b2:95:d9:11:e8:c2:63:b3:81:fa:1d:8f:47:43:f8:ea:f3:b9:
         c7:fd:48:92:30:ec:c2:c0:3f:46:fb:77:d7:fe:7b:b4:cf:fa:
         ff:f4:25:02:72:f7:10:eb:96:a7:76:7b:08:a2:60:7d:b2:c0:
         75:6f:3c:0a:22:e9:1a:92:3a:69:bb:fd:75:45:16:ac:c5:c9:
         9f:a8:e9:e3:e7:99:2a:42:2e:71:ea:80:28:a8:76:38:1c:e8:
         7d:99:54:56:b0:b1:ec:32:57:d0:61:02:4d:d1:f3:c8:e9:97:
         94:32:fb:5c:66:69:dd:a4:99:2a:40:a7:55:18:55:95:08:2d:
         42:5b:a2:6f:74:1c:93:8f:da:58:34:2c:8d:f8:7b:5c:18:e8:
         e8:31:b9:0a:6e:03:6e:85:2e:62:48:7a:d0:6d:6e:69:e9:73:
         ad:1f:d9:66:86:b9:a0:0e:46:9e:8e:b8:52:56:bd:9b:2c:34:
         85:24:63:af:45:33:89:64:57:01:f8:c5:a8:c3:49:4c:9f:ea:
         19:bd:f3:71:fc:d4:b8:08:43:42:98:ed:80:79:f1:5b:75:b0:
         6d:d7:cb:29:e3:a8:5c:ef:98:a6:a7:f7:22:15:f9:d3:63:ad:
         ef:62:dc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:53 2024 by rpki-client on console-fra.rpki-client.org