Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/323830343a376661383a343030303a3a2f33342d3334203d3e20323731373031.roa
File:                     323830343a376661383a343030303a3a2f33342d3334203d3e20323731373031.roa (raw, json)
Hash identifier:          4GnbUwxEADMdjTX5hfUHF6WmkABq5w2fXgCurdOfZwk=
Subject key identifier:   38:EC:F7:59:20:34:6D:E7:2C:4C:0E:93:19:F3:DC:A3:1D:08:AA:10
Certificate issuer:       /CN=05563772FA5F7F02E46B10D42952096452B02F7E
Certificate serial:       0736620B470B29C7DCA6BE63252378FDF60D81D8
Authority key identifier: 05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/323830343a376661383a343030303a3a2f33342d3334203d3e20323731373031.roa
Signing time:             Tue 11 Jun 2024 13:07:16 +0000
ROA not before:           Tue 11 Jun 2024 13:02:16 +0000
ROA not after:            Tue 10 Jun 2025 13:07:16 +0000
asID:                     271701
IP address blocks:        2804:7fa8:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl
                          rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:36:62:0b:47:0b:29:c7:dc:a6:be:63:25:23:78:fd:f6:0d:81:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05563772FA5F7F02E46B10D42952096452B02F7E
        Validity
            Not Before: Jun 11 13:02:16 2024 GMT
            Not After : Jun 10 13:07:16 2025 GMT
        Subject: CN=38ECF75920346DE72C4C0E9319F3DCA31D08AA10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:73:49:7b:1a:99:9a:60:e1:64:1d:3b:8f:48:
                    30:b9:93:cb:28:40:c2:d8:14:21:82:d7:03:3f:87:
                    9d:27:d5:56:5b:4f:7f:3b:0e:cb:37:ba:23:43:cd:
                    3a:8c:0a:89:86:2e:2d:32:39:5e:a8:cf:cd:2d:43:
                    aa:7d:96:46:0b:ea:68:90:38:e7:26:0d:9a:ca:b4:
                    bc:6e:b8:53:05:f9:17:0e:20:71:99:cd:a0:bd:1a:
                    cc:18:b0:98:d0:2a:ac:70:64:af:7e:03:cf:16:16:
                    c4:42:97:a9:7e:d2:bd:f7:50:70:b8:5b:41:68:4b:
                    f9:df:e7:90:01:98:41:5d:28:16:1d:89:5f:6a:6b:
                    6c:c6:0f:74:d3:16:44:00:37:1a:8c:89:5a:50:4d:
                    72:0b:e7:50:fa:6b:97:49:57:75:b8:9d:da:8f:8d:
                    11:bb:ce:0b:7e:2d:c0:8e:c9:e4:ce:a5:ac:fc:f6:
                    8d:57:4c:dd:e8:7a:89:69:92:fe:25:f7:86:c7:a7:
                    8a:1e:96:4e:1c:76:0e:6e:bc:2e:8e:8e:71:18:0b:
                    8c:e1:b1:d5:31:a9:66:a5:88:9c:b1:17:0b:7f:05:
                    45:9e:70:9e:b5:6f:6e:73:e8:d6:1c:fd:84:65:5c:
                    1f:f7:f9:42:69:a7:d7:d9:0d:51:b5:b6:af:d6:ed:
                    6c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:EC:F7:59:20:34:6D:E7:2C:4C:0E:93:19:F3:DC:A3:1D:08:AA:10
            X509v3 Authority Key Identifier:
                keyid:05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/323830343a376661383a343030303a3a2f33342d3334203d3e20323731373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fa8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0b:6f:b5:f2:62:59:d2:29:87:dd:8c:e7:7e:a6:87:c2:fe:17:
         6c:b1:51:fe:f4:23:ea:f2:fc:d5:09:f9:f4:76:3a:98:96:ff:
         b2:e0:22:ea:01:5a:7c:1d:c3:9b:8c:84:22:f2:55:ea:60:c4:
         48:9f:e6:2d:2b:dc:88:64:dc:7c:95:4e:77:49:c8:7a:f9:62:
         48:52:df:2c:08:1a:fa:00:22:cf:63:cb:92:0a:8d:d2:27:7b:
         f6:f7:b4:67:0e:d1:5d:82:48:2f:4b:39:4f:62:51:02:30:34:
         a1:f0:19:3d:22:fe:9e:76:87:f3:c7:28:36:63:14:e9:81:51:
         81:d3:28:45:fe:54:31:63:8b:80:54:82:4f:de:12:52:20:d5:
         d9:1f:9b:2e:0b:c8:09:f9:4e:b1:22:a9:bb:b7:5a:99:85:b1:
         37:f5:ec:28:b4:98:06:94:eb:e1:27:32:d9:c5:48:20:59:3a:
         90:a9:9e:99:61:f6:8b:7f:03:e2:d5:a6:8f:58:3c:4e:a1:43:
         21:cf:a4:ec:ad:0d:c0:6e:db:3f:de:43:cc:1e:65:05:25:29:
         80:c6:de:10:75:93:35:3e:78:e6:dc:29:2c:bc:69:06:05:a7:
         00:23:cb:ae:6a:5d:8e:50:d4:ed:95:9d:b2:ec:dd:87:76:fa:
         09:b6:73:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:01 2024 by rpki-client on console-ams.rpki-client.org