Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/323830343a373039343a3a2f33322d3438203d3e20323730373335.roa
File:                     323830343a373039343a3a2f33322d3438203d3e20323730373335.roa (raw, json)
Hash identifier:          Ix4+LW1I9iKjlMuD+2VugAMo+xJiWFsl58nAspHNQpc=
Subject key identifier:   FA:57:0C:59:6C:43:B3:67:4C:50:36:A4:6D:AB:FC:8C:6E:9D:8E:49
Certificate issuer:       /CN=275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE
Certificate serial:       6DF5757BB6E305D90F56F2AF284280DB68601D46
Authority key identifier: 27:5D:9E:0F:3E:6B:B4:0B:BC:90:C8:BA:26:99:DD:6A:35:6D:A2:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/323830343a373039343a3a2f33322d3438203d3e20323730373335.roa
Signing time:             Wed 03 Apr 2024 20:00:28 +0000
ROA not before:           Wed 03 Apr 2024 19:55:28 +0000
ROA not after:            Wed 02 Apr 2025 20:00:28 +0000
asID:                     270735
IP address blocks:        2804:7094::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.crl
                          rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f5:75:7b:b6:e3:05:d9:0f:56:f2:af:28:42:80:db:68:60:1d:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE
        Validity
            Not Before: Apr  3 19:55:28 2024 GMT
            Not After : Apr  2 20:00:28 2025 GMT
        Subject: CN=FA570C596C43B3674C5036A46DABFC8C6E9D8E49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e2:2d:3d:ff:8c:22:d3:7f:82:6d:7e:6b:59:
                    b5:eb:f5:28:77:79:3e:f2:69:ac:53:83:16:94:85:
                    e3:0d:17:dc:35:86:a2:19:b7:26:80:41:22:fb:86:
                    ab:58:69:68:c3:ff:69:13:ba:66:4f:dd:18:43:ad:
                    8d:ae:50:a0:6e:3a:cb:cf:1a:5e:81:3b:37:9f:58:
                    1f:76:83:bb:88:32:70:0e:a1:88:78:92:41:f4:6b:
                    86:79:b8:a4:0b:97:5a:fe:f6:40:5f:86:57:8e:94:
                    70:5e:c6:87:88:8f:9e:55:99:dd:49:6a:8b:8b:e4:
                    10:bd:2a:77:40:63:20:f5:e3:00:8c:8f:39:89:8a:
                    38:be:08:49:3a:f1:b0:9b:f5:db:1c:91:4e:e6:f5:
                    5f:59:c0:0e:31:5f:c0:88:2c:48:b5:0b:fc:c3:14:
                    8d:0d:98:02:1b:40:03:52:15:d8:2c:41:fc:03:a6:
                    89:b3:4b:bd:d7:1a:1d:bd:35:93:48:04:43:c5:68:
                    39:b1:ee:04:29:4d:f3:7e:26:90:c9:b1:99:53:00:
                    23:44:00:6b:08:57:6b:52:10:40:de:09:eb:00:cb:
                    43:dc:19:30:e1:cb:f8:0b:2d:dd:95:ed:05:0c:5b:
                    ea:c3:58:8f:dd:64:23:5f:7f:5d:90:48:04:0c:a6:
                    20:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:57:0C:59:6C:43:B3:67:4C:50:36:A4:6D:AB:FC:8C:6E:9D:8E:49
            X509v3 Authority Key Identifier:
                keyid:27:5D:9E:0F:3E:6B:B4:0B:BC:90:C8:BA:26:99:DD:6A:35:6D:A2:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/323830343a373039343a3a2f33322d3438203d3e20323730373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7094::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:bf:70:f2:5e:5d:48:da:11:e6:2b:e7:04:59:17:6d:77:15:
         80:4e:a8:70:fc:8c:1c:d3:92:30:9b:ab:93:3b:40:b6:6a:c6:
         b9:44:0d:b5:14:ff:c2:21:c9:ac:18:fd:1f:43:5c:ac:6f:4e:
         01:74:02:2e:71:f2:72:b7:54:b7:80:31:1b:40:31:0c:c3:39:
         6d:66:23:26:5c:b7:a0:66:78:93:f5:94:46:0a:3d:51:96:f1:
         95:8a:85:8d:62:eb:10:0d:9f:c3:e8:8d:a2:bf:ad:a2:1e:c8:
         ce:4c:86:20:43:61:4e:a3:74:82:f8:5e:1b:ee:9d:db:14:21:
         74:53:7f:d1:66:90:31:88:73:13:b3:97:68:01:dd:39:6e:9a:
         cf:47:77:c6:04:52:5f:d4:c8:36:46:b6:e4:d0:4d:91:6c:d0:
         62:07:36:ce:07:c8:36:3e:86:fd:4a:be:cf:a8:17:9a:55:c8:
         a7:23:28:9e:79:29:06:51:b6:c0:5c:d1:13:f6:86:a8:05:2b:
         93:17:cd:89:e3:aa:ac:b7:28:cd:fe:0e:ce:cd:9d:1f:76:f0:
         15:a6:5e:12:b5:38:72:df:94:67:12:0a:ff:0b:d1:e8:39:bc:
         2e:7d:7a:54:d3:8b:e3:5d:26:52:54:e3:b7:f0:8b:e8:b8:82:
         76:16:46:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:50 2024 by rpki-client on console-fra.rpki-client.org