Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/1/323830343a373636383a3a2f33322d3634203d3e20323731313130.roa
File:                     323830343a373636383a3a2f33322d3634203d3e20323731313130.roa (raw, json)
Hash identifier:          6kvRgzHNYYHV0IWX31GcT0ICAZrb3dSjP73q1cAz8Fs=
Subject key identifier:   3D:5E:9E:C4:65:3C:70:9F:7D:24:90:56:E2:39:A4:0C:6A:B6:BA:C6
Certificate issuer:       /CN=0D490435D8A32B7A9A3A7692BF04488233375E36
Certificate serial:       45C842C18912924F74A844101028B2E030A2B61C
Authority key identifier: 0D:49:04:35:D8:A3:2B:7A:9A:3A:76:92:BF:04:48:82:33:37:5E:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D490435D8A32B7A9A3A7692BF04488233375E36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/1/323830343a373636383a3a2f33322d3634203d3e20323731313130.roa
Signing time:             Thu 04 Apr 2024 03:01:15 +0000
ROA not before:           Thu 04 Apr 2024 02:56:15 +0000
ROA not after:            Thu 03 Apr 2025 03:01:15 +0000
asID:                     271110
IP address blocks:        2804:7668::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/1/0D490435D8A32B7A9A3A7692BF04488233375E36.crl
                          rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/1/0D490435D8A32B7A9A3A7692BF04488233375E36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D490435D8A32B7A9A3A7692BF04488233375E36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c8:42:c1:89:12:92:4f:74:a8:44:10:10:28:b2:e0:30:a2:b6:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D490435D8A32B7A9A3A7692BF04488233375E36
        Validity
            Not Before: Apr  4 02:56:15 2024 GMT
            Not After : Apr  3 03:01:15 2025 GMT
        Subject: CN=3D5E9EC4653C709F7D249056E239A40C6AB6BAC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:4d:fe:29:0c:aa:e7:51:1c:f4:a4:40:5d:62:
                    d5:2d:d1:a3:35:b7:b6:5d:10:52:5a:74:5b:13:d7:
                    1c:ae:0c:a8:9a:ce:c8:0b:0e:7f:9f:63:e7:45:5b:
                    ee:55:6f:13:34:4d:9f:ff:4e:c0:b2:77:15:7c:ab:
                    47:83:0f:15:9a:f7:55:2f:9f:6f:2d:1f:0f:68:5c:
                    38:67:68:1b:e9:04:5e:ee:1a:a3:8b:96:22:ae:cf:
                    db:43:54:d4:ba:44:e4:f1:d6:52:0c:14:86:bf:8f:
                    de:48:b1:6c:97:65:68:19:98:d3:ba:8e:45:45:62:
                    c7:fd:a0:d4:3b:06:cc:50:da:61:88:5b:f3:38:cc:
                    7e:ac:5e:41:2d:22:c4:ad:14:c3:eb:71:fa:9a:a4:
                    2f:ab:22:5f:87:ea:9e:1e:3a:6a:f1:d2:f2:e1:7a:
                    d1:54:e6:fa:f8:8e:31:87:89:60:eb:f1:48:fd:65:
                    ea:a6:dc:fc:fa:bb:7b:1c:c0:65:48:bb:42:0b:a5:
                    5e:eb:f4:8b:eb:f6:fd:ce:bd:6e:8c:ba:37:ab:d0:
                    a2:8d:4b:a8:c0:f9:f1:4f:9e:8b:ab:ad:f2:73:fe:
                    86:0c:4b:ba:e3:00:fc:f2:34:68:5a:76:bf:01:53:
                    ff:d8:79:d5:7e:23:eb:e3:13:a5:d2:fb:78:a1:11:
                    4b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5E:9E:C4:65:3C:70:9F:7D:24:90:56:E2:39:A4:0C:6A:B6:BA:C6
            X509v3 Authority Key Identifier:
                keyid:0D:49:04:35:D8:A3:2B:7A:9A:3A:76:92:BF:04:48:82:33:37:5E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/1/0D490435D8A32B7A9A3A7692BF04488233375E36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D490435D8A32B7A9A3A7692BF04488233375E36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/1/323830343a373636383a3a2f33322d3634203d3e20323731313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7668::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:dc:b7:99:cf:87:c4:36:e7:67:f5:a5:3a:fb:31:01:31:ff:
         d2:de:e1:c6:b1:eb:2e:f2:d8:ee:cc:91:0b:12:10:d9:c3:43:
         77:2e:da:e8:87:5b:b8:7e:68:c4:9a:b0:b2:21:b1:06:d4:40:
         65:8b:de:46:91:3b:c5:51:ff:ca:d8:bf:7a:55:bb:ee:f7:b1:
         10:2c:db:a6:54:6f:4b:d8:cc:67:ec:1e:bf:07:82:dd:70:5b:
         29:b8:fe:27:9d:21:8a:17:2a:da:5a:f0:1d:75:19:fb:ba:bd:
         e2:60:c2:d6:95:b3:2c:e3:93:53:38:84:f6:26:e3:34:66:6e:
         a1:33:1c:d2:96:cc:d6:4b:4e:4c:83:e8:52:d0:80:18:ab:9f:
         8b:aa:42:a8:08:f2:05:0a:27:e5:a7:61:1c:d1:0e:da:79:e1:
         8b:81:63:76:de:0e:5d:0e:5a:f9:ae:9f:69:8a:67:36:42:a0:
         ff:2f:00:a5:07:99:73:d1:03:6f:29:fe:87:9d:47:73:fe:27:
         86:a8:08:36:f9:6a:2a:9b:26:f3:0f:6a:3c:cc:60:bb:15:f9:
         7d:1b:c1:fd:fb:31:bb:9b:1e:f1:d4:bf:4d:33:42:8a:19:80:
         ea:a0:83:98:78:1b:b7:10:f9:7f:75:78:9d:a7:46:ba:f1:92:
         c3:55:8d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:15 2024 by rpki-client on console-fra.rpki-client.org