Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/323830343a376138383a633030303a3a2f33342d3334203d3e20323731333737.roa
File:                     323830343a376138383a633030303a3a2f33342d3334203d3e20323731333737.roa (raw, json)
Hash identifier:          XXQ3HN2Q9J/tUgfzgBKRozQBDMs6gSUkaXpgYwKSA4A=
Subject key identifier:   01:ED:D4:42:8F:34:89:6C:D9:88:8F:63:71:D7:F2:45:E3:04:56:40
Certificate issuer:       /CN=9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4
Certificate serial:       071197C90BC5580A22C204CC16FDA1D8AF573A4B
Authority key identifier: 9E:D5:67:F8:6A:DA:E8:8C:DC:1B:94:F0:F1:6C:0A:36:55:A1:C4:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/323830343a376138383a633030303a3a2f33342d3334203d3e20323731333737.roa
Signing time:             Sat 08 Jun 2024 01:11:20 +0000
ROA not before:           Sat 08 Jun 2024 01:06:20 +0000
ROA not after:            Sat 07 Jun 2025 01:11:20 +0000
asID:                     271377
IP address blocks:        2804:7a88:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4.crl
                          rsync://rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:11:97:c9:0b:c5:58:0a:22:c2:04:cc:16:fd:a1:d8:af:57:3a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4
        Validity
            Not Before: Jun  8 01:06:20 2024 GMT
            Not After : Jun  7 01:11:20 2025 GMT
        Subject: CN=01EDD4428F34896CD9888F6371D7F245E3045640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:19:71:9d:ed:56:b9:44:be:52:80:77:3a:b7:
                    a3:15:6b:cb:f4:a9:80:9a:f9:07:a0:c1:20:c9:a5:
                    a8:23:9e:a8:b5:61:9f:a5:1d:c7:87:a3:38:69:93:
                    cc:55:80:3d:9f:ee:ca:76:c0:89:39:3b:46:a1:00:
                    6a:79:cf:a1:d0:b7:c1:7c:85:21:69:00:6f:3a:57:
                    05:ae:c6:33:f5:7b:22:c4:a9:76:15:0b:e3:ec:15:
                    52:a8:3a:c9:e7:8a:a6:c9:aa:63:35:97:fb:9d:c3:
                    2f:25:02:c2:61:9b:a8:98:07:72:72:05:b8:e3:57:
                    25:45:29:e3:09:a0:ab:d5:70:f6:04:30:00:5b:e8:
                    f9:66:f1:82:b9:e3:12:0c:80:c2:dc:0f:63:5d:e7:
                    42:0c:1c:46:38:29:36:bb:bf:45:11:b6:76:9c:fd:
                    82:13:a5:c7:be:cd:a6:c9:1b:f8:f7:d7:26:b6:b0:
                    9d:16:79:89:07:92:d9:33:ab:b6:9a:16:19:d2:f6:
                    1b:9d:16:39:9e:8f:08:cc:3f:fe:30:1e:1a:d0:30:
                    ce:e5:ce:0f:5a:8f:e6:3e:f2:d6:98:92:61:46:91:
                    29:af:83:ed:78:30:58:70:71:94:a8:d9:1b:ea:a3:
                    d5:ac:6b:70:72:a3:7b:73:8a:d0:a0:89:c5:21:c3:
                    20:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:ED:D4:42:8F:34:89:6C:D9:88:8F:63:71:D7:F2:45:E3:04:56:40
            X509v3 Authority Key Identifier:
                keyid:9E:D5:67:F8:6A:DA:E8:8C:DC:1B:94:F0:F1:6C:0A:36:55:A1:C4:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/323830343a376138383a633030303a3a2f33342d3334203d3e20323731333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a88:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2c:7d:63:5e:26:ca:6a:6c:26:83:d8:44:f5:2c:94:01:ee:68:
         19:3d:79:94:b3:6a:99:c7:d2:7c:67:e6:d5:b5:10:cd:a1:68:
         85:d1:67:2c:e8:b9:f6:28:c8:8a:2a:78:9a:e0:14:1e:4a:13:
         fc:b9:50:45:70:e9:0a:94:f1:80:f8:5c:b3:80:6a:b6:85:68:
         79:8c:72:e0:78:25:8d:8a:70:cf:a8:b1:60:6b:da:57:6b:98:
         c9:74:fa:1d:66:b9:66:c8:f9:7a:fb:85:dd:95:f0:fc:6e:bf:
         56:de:85:be:ee:18:d7:bb:2b:24:5e:48:45:e0:47:e6:15:3d:
         21:40:b6:b4:97:f9:27:a9:85:80:a5:33:9e:f3:df:cf:3e:d6:
         34:85:c3:37:52:2c:5c:eb:2e:2d:aa:ae:a2:67:4e:f6:2a:95:
         ef:8b:45:af:b7:90:07:71:4c:6a:89:79:64:b5:d7:36:67:6d:
         7c:bd:14:cf:aa:af:5c:33:93:74:5e:e0:c9:3b:ee:8c:a4:3c:
         72:b2:84:58:7f:ba:ad:49:3c:43:21:78:c5:1d:fb:17:d2:92:
         ee:bd:b8:c7:ec:80:52:97:78:4f:c1:ea:29:c8:47:c4:81:9d:
         7a:78:3d:03:b6:33:40:92:c7:79:21:a8:e6:f7:28:32:d4:ba:
         c6:2f:ea:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 11:23:07 2024 by rpki-client on console-ams.rpki-client.org