Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/323830343a366530343a3a2f33362d3336203d3e20323730353730.roa
File:                     323830343a366530343a3a2f33362d3336203d3e20323730353730.roa (raw, json)
Hash identifier:          QpAVBixCpH4ncX2QT8SmGsw0TAw646K1SMFpelEVduI=
Subject key identifier:   34:42:60:FD:FF:55:AC:5A:BC:BC:65:CE:0D:25:A6:AE:B4:4E:53:40
Certificate issuer:       /CN=09FD8C705CB193341D9B117D7146D563E0766012
Certificate serial:       1450AB1A6E67B83FB772B29ABEBB97568A475402
Authority key identifier: 09:FD:8C:70:5C:B1:93:34:1D:9B:11:7D:71:46:D5:63:E0:76:60:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FD8C705CB193341D9B117D7146D563E0766012.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/323830343a366530343a3a2f33362d3336203d3e20323730353730.roa
Signing time:             Thu 11 Apr 2024 11:06:49 +0000
ROA not before:           Thu 11 Apr 2024 11:01:49 +0000
ROA not after:            Thu 10 Apr 2025 11:06:49 +0000
asID:                     270570
IP address blocks:        2804:6e04::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/09FD8C705CB193341D9B117D7146D563E0766012.crl
                          rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/09FD8C705CB193341D9B117D7146D563E0766012.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FD8C705CB193341D9B117D7146D563E0766012.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:50:ab:1a:6e:67:b8:3f:b7:72:b2:9a:be:bb:97:56:8a:47:54:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09FD8C705CB193341D9B117D7146D563E0766012
        Validity
            Not Before: Apr 11 11:01:49 2024 GMT
            Not After : Apr 10 11:06:49 2025 GMT
        Subject: CN=344260FDFF55AC5ABCBC65CE0D25A6AEB44E5340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b9:bf:dd:d3:4a:49:d4:b9:d2:39:bf:f3:3a:
                    75:61:c3:20:c6:82:e1:e8:64:54:4a:fa:ae:96:14:
                    4d:2f:e5:e3:23:38:22:de:e8:15:bc:87:66:b8:7d:
                    ee:d5:b9:65:b4:21:de:15:3a:9e:02:2a:c7:8f:3e:
                    3e:99:dd:ad:88:d6:6e:22:c3:5a:ae:e6:98:98:ac:
                    65:1b:95:a6:b4:ff:e9:dc:9c:dd:1a:ea:af:8e:09:
                    79:b1:30:ad:03:91:29:e9:e6:30:6a:87:13:c2:d9:
                    40:23:f6:1d:9a:f5:29:23:ba:78:c9:ce:a2:6d:31:
                    37:2c:ac:31:16:8d:fe:f4:80:c7:19:4d:01:03:f7:
                    4e:22:60:b6:f0:6c:ac:b1:30:54:ff:34:6e:6a:77:
                    7d:4a:4d:17:0b:e2:bd:4d:8b:95:a4:46:d3:fe:cb:
                    96:74:57:9e:5e:ee:d8:a2:9c:94:4a:5c:b5:95:8b:
                    68:1b:f1:07:56:8a:05:1e:f6:a5:4c:6d:6a:3c:c1:
                    5d:15:1d:f5:df:82:fe:52:0b:55:8e:a9:a7:bd:88:
                    52:8a:e4:e6:be:2b:0c:84:7e:36:a7:38:93:ea:6b:
                    09:71:ef:a5:f5:62:0c:cf:b9:4e:f6:81:99:77:e8:
                    ce:09:9b:95:7c:76:b8:68:cc:f6:65:12:ce:37:af:
                    d8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:42:60:FD:FF:55:AC:5A:BC:BC:65:CE:0D:25:A6:AE:B4:4E:53:40
            X509v3 Authority Key Identifier:
                keyid:09:FD:8C:70:5C:B1:93:34:1D:9B:11:7D:71:46:D5:63:E0:76:60:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/09FD8C705CB193341D9B117D7146D563E0766012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FD8C705CB193341D9B117D7146D563E0766012.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/323830343a366530343a3a2f33362d3336203d3e20323730353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e04::/36

    Signature Algorithm: sha256WithRSAEncryption
         5a:46:1e:bb:46:58:47:79:9c:40:13:76:e0:5c:13:2b:5e:aa:
         76:b5:24:10:f2:fe:33:02:09:85:13:f1:07:8d:e6:a1:c4:ec:
         36:a9:9b:31:26:96:04:14:b1:72:68:76:8f:2a:d1:89:37:30:
         72:c7:e5:3c:bf:57:67:f7:5a:25:ab:1d:02:d3:c2:35:fe:d2:
         20:ad:4e:66:cd:ba:18:89:81:69:1a:3f:a5:0f:a9:51:40:79:
         55:a4:a5:b1:80:91:47:04:83:75:90:27:26:14:84:88:38:7f:
         1a:e5:11:74:01:f2:28:ed:de:da:6c:9e:a1:dd:18:af:63:30:
         66:b9:37:4c:5e:d5:7e:cd:8b:29:7f:9f:8b:a5:f9:fa:35:57:
         71:d2:d5:35:05:88:c7:a3:f8:f7:e1:6f:bd:8a:d0:11:d2:51:
         d4:a9:e0:dc:02:f8:c8:3b:12:5c:a8:e2:c6:2c:77:83:24:07:
         dd:c0:93:20:87:ac:32:f9:d4:b1:92:b6:f3:ff:a5:17:15:08:
         f7:91:ef:13:87:c2:8b:5f:77:41:d2:e3:ec:78:62:2d:3c:22:
         43:74:53:26:f0:0d:0a:bf:57:43:9b:3a:de:3b:f5:63:e9:6e:
         01:96:2f:6e:b2:d0:cb:3f:18:c5:1c:5c:7e:0d:69:46:78:31:
         8b:3a:ad:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:14 2024 by rpki-client on console-ams.rpki-client.org