Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/323830343a333033343a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          Ar4HzwQpeMC/L19l75OgwzjdSA7YTiQnRUsjctoSPjk=
Subject key identifier:   7C:98:69:83:C6:40:F2:AC:4D:64:DF:E6:8F:0D:7D:2E:33:F2:05:AC
Certificate issuer:       /CN=AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E
Certificate serial:       3E8A67FD43529DFC01C8BBBE2AD267C15D69B4CF
Authority key identifier: AB:40:03:9B:1E:5D:05:09:C5:1C:C3:58:7B:EF:6E:D2:A0:DF:E7:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/323830343a333033343a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Thu 04 Apr 2024 18:24:02 +0000
ROA not before:           Thu 04 Apr 2024 18:19:02 +0000
ROA not after:            Thu 03 Apr 2025 18:24:02 +0000
asID:                     264936
IP address blocks:        2804:3034::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 17:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8a:67:fd:43:52:9d:fc:01:c8:bb:be:2a:d2:67:c1:5d:69:b4:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E
        Validity
            Not Before: Apr  4 18:19:02 2024 GMT
            Not After : Apr  3 18:24:02 2025 GMT
        Subject: CN=7C986983C640F2AC4D64DFE68F0D7D2E33F205AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5a:43:fd:90:95:7b:0d:29:d2:a8:f7:66:20:
                    4d:f6:38:b4:c2:16:e5:49:42:7d:7a:8e:0e:62:6a:
                    4d:aa:e2:60:43:07:86:08:e0:03:1f:2e:22:bb:f0:
                    1f:bb:ae:1a:d4:c1:f4:c6:43:11:7b:34:5a:99:e3:
                    0b:6b:c0:42:7b:51:ef:de:6c:e2:77:e0:62:77:ff:
                    dc:11:38:7d:bf:86:be:a3:ff:36:e6:41:ce:26:ed:
                    15:1d:82:67:ad:95:6a:43:e6:1d:22:ed:2d:fb:c4:
                    d1:fd:c9:bb:28:09:1f:51:6c:91:6d:47:a6:ed:32:
                    fc:77:68:01:4e:53:87:33:ff:e6:49:ee:cf:c6:b9:
                    1a:8c:be:1b:4e:a0:2c:fd:0e:4e:3c:97:13:fe:cc:
                    33:0d:20:8b:a6:db:80:02:fc:b5:a3:b1:0e:11:4c:
                    a6:8a:ff:5a:28:aa:b9:67:45:ea:91:c0:ec:b8:b5:
                    de:25:80:28:cb:77:68:f8:f1:d7:69:e7:8a:ae:be:
                    fe:e0:56:f6:05:59:b6:9d:df:a1:c5:8a:3d:7f:c6:
                    6b:5f:24:ff:6a:50:c8:02:66:df:a4:96:19:68:3d:
                    12:95:9c:2d:c0:12:77:f9:b1:f0:d4:10:e7:02:f2:
                    ed:4e:fc:4e:b7:fc:72:9e:1a:dc:88:91:8a:c9:98:
                    7c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:98:69:83:C6:40:F2:AC:4D:64:DF:E6:8F:0D:7D:2E:33:F2:05:AC
            X509v3 Authority Key Identifier:
                keyid:AB:40:03:9B:1E:5D:05:09:C5:1C:C3:58:7B:EF:6E:D2:A0:DF:E7:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/323830343a333033343a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034::/44

    Signature Algorithm: sha256WithRSAEncryption
         d8:a8:ec:a0:2c:bc:21:a5:f0:13:41:dc:61:45:a7:b7:e3:4b:
         41:e5:56:20:6b:ab:01:8b:74:77:df:0e:c4:2d:e1:c0:56:61:
         91:69:34:f1:f9:23:c6:28:7e:09:ee:2b:43:a8:43:41:03:79:
         30:17:88:b5:ea:34:18:2a:ab:df:c0:65:d7:f9:c0:ff:8f:b5:
         a7:dc:a6:c3:74:02:23:d5:dc:70:f4:17:89:3d:4e:c8:f0:40:
         6a:ff:4c:81:d8:e6:87:49:43:f2:90:4c:2e:80:72:26:b0:32:
         c0:70:fc:c7:59:ef:fd:16:a5:f1:de:34:cc:ee:75:5d:50:7a:
         0a:73:64:75:58:9e:fd:a9:78:e2:1b:e7:a2:4b:1d:06:84:cc:
         32:37:8c:11:5a:e8:22:5c:81:a9:1c:cc:0d:fa:6e:e6:8e:07:
         23:01:e2:bc:d5:d5:21:66:ad:b2:78:53:38:84:91:e5:ea:b1:
         63:ba:28:37:16:fd:f4:da:88:a0:42:9c:a0:cc:dc:1e:0c:7d:
         80:ed:7d:a5:04:01:c3:d3:89:eb:2f:0c:3d:0c:e9:39:df:54:
         3a:03:8f:b1:18:cb:bb:a3:c9:aa:1b:ae:d3:06:2f:70:a0:5c:
         a4:85:dc:95:76:0f:79:19:f5:c8:7e:ae:2e:d9:d9:f5:25:90:
         f7:cd:dd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:43 2024 by rpki-client on console-fra.rpki-client.org