Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/323830343a386533633a3a2f33342d3334203d3e20323733343132.roa
File:                     323830343a386533633a3a2f33342d3334203d3e20323733343132.roa (raw, json)
Hash identifier:          uoENkAJqVE1MxUXcy3X/hDttgKdX5RjB7VvJqhzqffM=
Subject key identifier:   11:18:1A:46:DC:09:7B:F3:3F:E3:47:AF:0C:40:95:D6:86:DD:39:DD
Certificate issuer:       /CN=4055DA0ACB382D3CF1F290979963231C8BAB34C2
Certificate serial:       71D9F57E116F4194B376DFD0D9ABC647EC7983E4
Authority key identifier: 40:55:DA:0A:CB:38:2D:3C:F1:F2:90:97:99:63:23:1C:8B:AB:34:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/323830343a386533633a3a2f33342d3334203d3e20323733343132.roa
Signing time:             Thu 04 Apr 2024 06:19:52 +0000
ROA not before:           Thu 04 Apr 2024 06:14:52 +0000
ROA not after:            Thu 03 Apr 2025 06:19:52 +0000
asID:                     273412
IP address blocks:        2804:8e3c::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.crl
                          rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d9:f5:7e:11:6f:41:94:b3:76:df:d0:d9:ab:c6:47:ec:79:83:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4055DA0ACB382D3CF1F290979963231C8BAB34C2
        Validity
            Not Before: Apr  4 06:14:52 2024 GMT
            Not After : Apr  3 06:19:52 2025 GMT
        Subject: CN=11181A46DC097BF33FE347AF0C4095D686DD39DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:01:07:ec:3c:a7:29:dc:a3:dd:65:31:f6:92:
                    ae:1a:3f:66:b9:82:3d:bd:1a:f7:ae:85:48:59:9e:
                    26:ac:93:49:ad:f2:72:57:57:12:c5:df:1b:32:85:
                    cf:b6:67:60:f9:64:30:bf:10:82:f8:3b:d8:f7:62:
                    a6:a6:8b:45:af:bc:cd:e4:fb:07:5d:27:9b:c6:9a:
                    7a:f4:17:4b:23:10:45:d1:8f:73:b3:9e:b5:57:b3:
                    09:c3:c6:90:99:be:37:6f:59:0e:16:15:bd:c5:38:
                    9a:9f:d2:23:fd:ca:ca:25:f2:90:58:b6:29:66:0b:
                    29:80:91:af:0a:e1:76:c5:e1:66:c9:a1:5c:8f:c6:
                    67:f6:b2:37:db:a6:db:c4:41:08:7e:6c:73:3a:30:
                    bf:8f:00:e7:4a:d1:a0:b5:a1:6c:d4:ee:1f:d2:9e:
                    99:f1:2a:72:f7:22:71:47:8b:da:5f:79:f2:4c:89:
                    b6:f0:d1:dc:9e:3a:cc:85:1e:57:f9:f0:00:c5:82:
                    17:70:b5:97:29:2d:59:58:b9:b7:2b:4e:e6:e1:3a:
                    86:66:2b:03:8a:0f:64:4d:fc:34:e5:76:3e:b8:3a:
                    98:2e:0f:51:55:a7:cd:56:b4:36:03:15:f3:a3:1b:
                    20:cc:40:a7:02:77:2e:21:ac:86:21:b1:36:b7:43:
                    6c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:18:1A:46:DC:09:7B:F3:3F:E3:47:AF:0C:40:95:D6:86:DD:39:DD
            X509v3 Authority Key Identifier:
                keyid:40:55:DA:0A:CB:38:2D:3C:F1:F2:90:97:99:63:23:1C:8B:AB:34:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/323830343a386533633a3a2f33342d3334203d3e20323733343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e3c::/34

    Signature Algorithm: sha256WithRSAEncryption
         38:12:b9:3d:fd:dc:c4:98:b7:0e:67:4c:3e:61:90:be:2e:00:
         b9:be:4d:ab:2f:09:28:ac:d4:fd:ba:0b:39:d0:03:62:57:f3:
         bc:fe:40:32:ae:82:17:23:16:7a:72:4c:d9:b8:37:f8:10:81:
         9c:58:e9:65:55:3e:98:e0:7f:01:15:d7:0c:e4:6e:87:c6:89:
         3a:79:0a:70:dc:51:27:7a:d1:7d:e2:53:bd:ca:3c:b1:52:89:
         e1:e9:e2:7f:e2:03:35:e6:f3:86:d5:26:ff:b4:43:d0:e9:ef:
         09:ad:c8:b3:ff:59:7e:82:4d:a1:b3:e1:cd:9c:d8:dd:33:80:
         4c:a4:85:7e:ef:68:fa:89:68:d3:67:a6:2d:14:5e:97:b8:6b:
         2f:ce:4e:65:6e:d7:ad:1f:5e:8a:a6:0b:c1:24:3e:34:a0:41:
         68:6c:e5:5a:2f:bb:21:01:92:d3:0f:02:80:f7:5e:59:27:5c:
         ec:aa:d2:45:5f:9b:e4:45:85:76:df:0a:83:a8:14:ab:a9:2e:
         86:7c:1e:b0:b0:76:6e:9f:7b:19:7f:ee:2e:a5:9d:e9:0e:50:
         22:f0:05:05:76:11:bc:c1:c7:a7:98:ae:2a:1c:7f:86:60:29:
         0c:1e:99:61:4d:86:80:ea:61:bc:bc:fb:12:c9:e8:87:f2:ac:
         3a:9f:4e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:04 2024 by rpki-client on console-fra.rpki-client.org