Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/323830343a386664303a633030303a3a2f33342d3334203d3e20323733353134.roa
File:                     323830343a386664303a633030303a3a2f33342d3334203d3e20323733353134.roa (raw, json)
Hash identifier:          +XXED6Sm1ISDUC0OM0kLafgFbv7b4kLovT9oyofmkVI=
Subject key identifier:   C4:30:66:62:21:F8:72:15:6E:2F:55:FE:4A:D2:0B:1B:DE:1A:41:F7
Certificate issuer:       /CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
Certificate serial:       5A988F663EB7CE97DA6C6D042B0BE53A3395C84A
Authority key identifier: E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/323830343a386664303a633030303a3a2f33342d3334203d3e20323733353134.roa
Signing time:             Sat 05 Oct 2024 16:43:50 +0000
ROA not before:           Sat 05 Oct 2024 16:38:50 +0000
ROA not after:            Sat 04 Oct 2025 16:43:50 +0000
asID:                     273514
IP address blocks:        2804:8fd0:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl
                          rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:98:8f:66:3e:b7:ce:97:da:6c:6d:04:2b:0b:e5:3a:33:95:c8:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
        Validity
            Not Before: Oct  5 16:38:50 2024 GMT
            Not After : Oct  4 16:43:50 2025 GMT
        Subject: CN=C430666221F872156E2F55FE4AD20B1BDE1A41F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ea:82:e5:41:90:d3:c0:45:b8:47:dc:0f:12:
                    2d:b3:64:11:0d:7f:44:5f:f1:38:aa:f7:70:e1:11:
                    98:5b:14:4e:b0:cb:22:fa:c2:4f:2c:27:15:69:be:
                    29:6d:d2:35:3e:33:d0:f0:01:33:8e:23:21:b6:0d:
                    b1:eb:e0:ba:ca:ed:e6:d0:0b:c8:67:56:8b:de:5e:
                    3b:79:c1:2d:21:17:ad:a7:ff:aa:2f:64:4b:28:c7:
                    b2:58:6b:16:90:bf:23:bc:72:5b:54:f1:43:86:ea:
                    9b:ae:52:89:93:b7:82:97:6f:9c:0d:45:54:99:c1:
                    a6:47:80:4c:92:1c:7b:72:c3:53:32:d0:18:bb:52:
                    d1:59:48:57:dc:4e:95:ce:7c:8e:55:1f:44:50:48:
                    fa:46:d9:5d:cc:2e:7a:7b:48:d0:f2:88:6d:95:54:
                    34:69:0f:0c:73:74:11:a2:af:20:6d:91:2f:b3:e9:
                    ec:b5:9b:ab:97:a8:ed:65:9f:97:ba:d0:1a:0f:3d:
                    9a:63:fa:31:c6:d9:db:77:ea:5d:06:13:a6:61:0a:
                    ea:76:d9:e3:d7:ba:7b:54:f2:f6:d8:72:41:e9:c5:
                    74:c1:88:06:37:1d:f0:3f:62:ea:70:0f:0a:d4:23:
                    14:d6:41:83:b3:83:44:25:26:ab:9d:02:21:41:48:
                    7a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:30:66:62:21:F8:72:15:6E:2F:55:FE:4A:D2:0B:1B:DE:1A:41:F7
            X509v3 Authority Key Identifier:
                keyid:E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/323830343a386664303a633030303a3a2f33342d3334203d3e20323733353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fd0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7f:6a:8a:36:01:fd:9f:50:c8:5f:ec:59:da:60:e4:6b:b7:d2:
         64:0f:bb:be:54:7f:b5:c8:21:39:0d:15:db:02:20:63:69:52:
         59:10:b9:be:a9:07:af:32:95:57:fe:31:e1:ce:b9:52:f3:d6:
         1b:3f:2a:56:a8:90:50:74:09:0b:02:f1:00:80:ed:f0:2d:58:
         fc:04:a1:e6:14:11:c8:9e:ec:d3:26:f4:93:16:6d:e3:ae:b5:
         da:44:24:11:f8:11:6f:5c:35:f6:3d:3b:70:5f:7e:59:c1:e8:
         6c:59:5f:d8:1d:26:df:2e:92:6f:68:58:88:b9:ab:b8:b9:69:
         38:91:18:60:75:d6:bb:fb:74:80:ab:4f:66:d7:56:01:ad:f5:
         2f:58:d8:c2:b2:47:46:95:2f:4d:94:a0:8a:23:65:48:6f:90:
         fc:23:94:4c:5d:92:fb:a5:73:d1:62:f5:39:bb:5b:5a:32:c5:
         13:af:9a:31:98:7b:ef:73:fe:3c:e8:97:87:4f:2d:59:62:95:
         82:8b:0f:45:7b:d8:ad:ea:8c:bd:b5:47:59:85:e2:b4:55:4e:
         45:2d:b0:ef:66:f2:9d:c4:de:98:28:ee:27:45:ca:30:05:e0:
         8e:d6:4f:47:b8:35:63:21:55:06:dc:5e:37:bb:5e:15:93:30:
         79:ab:72:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:15 2024 by rpki-client on console-fra.rpki-client.org