Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/1/323830343a386134383a633030303a3a2f33342d3334203d3e20323733363539.roa
File:                     323830343a386134383a633030303a3a2f33342d3334203d3e20323733363539.roa (raw, json)
Hash identifier:          OdlLYJuppiQrVFWsI9xL1zxzL7tH5sHPUundfOLqjao=
Subject key identifier:   BF:4C:EB:0C:F6:FD:0F:3C:A9:65:EC:A0:55:28:77:D1:BC:A9:27:40
Certificate issuer:       /CN=3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D
Certificate serial:       4A0297C46BBB041645E2D61F379CF39C333189A7
Authority key identifier: 3A:22:EC:79:4C:37:86:DA:E5:FD:E0:9E:C3:7F:1A:CE:71:8B:1A:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/1/323830343a386134383a633030303a3a2f33342d3334203d3e20323733363539.roa
Signing time:             Thu 04 Apr 2024 03:55:52 +0000
ROA not before:           Thu 04 Apr 2024 03:50:52 +0000
ROA not after:            Thu 03 Apr 2025 03:55:52 +0000
asID:                     273659
IP address blocks:        2804:8a48:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/1/3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D.crl
                          rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/1/3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:02:97:c4:6b:bb:04:16:45:e2:d6:1f:37:9c:f3:9c:33:31:89:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D
        Validity
            Not Before: Apr  4 03:50:52 2024 GMT
            Not After : Apr  3 03:55:52 2025 GMT
        Subject: CN=BF4CEB0CF6FD0F3CA965ECA0552877D1BCA92740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:29:a2:ac:3a:81:71:2b:3e:ac:f5:14:7f:80:
                    51:eb:fa:bb:80:8f:20:85:33:ef:09:e6:c5:d7:a5:
                    9f:fd:e3:1e:bd:4c:55:94:72:bc:73:b7:55:dd:1d:
                    3f:90:a4:11:62:43:ef:e5:30:3b:d7:8a:96:6d:d9:
                    f4:a7:96:fa:37:7f:62:68:17:45:3a:d6:ba:8e:d3:
                    98:3b:e3:b8:cc:8a:b8:c0:b9:46:be:2e:78:96:3e:
                    e3:20:02:ce:43:e0:f4:f8:85:8a:ef:55:16:f5:a7:
                    1a:de:e0:63:47:5b:dc:5d:cf:5d:5b:af:e4:a5:1f:
                    4f:aa:df:f6:c2:d9:a3:3d:0c:84:86:8b:5b:ee:f9:
                    10:b7:ce:2e:fd:70:ca:c3:d5:61:7a:9e:b4:71:29:
                    b2:03:2f:d8:54:3d:a0:95:ed:4c:6d:48:ad:6b:83:
                    28:21:b6:38:5e:53:51:08:09:65:b3:b3:60:cb:ec:
                    d2:4a:6a:f3:70:b8:5a:71:52:81:72:30:83:a7:24:
                    b3:7a:ee:f5:9c:3d:9f:f6:94:a9:90:b4:b3:ce:19:
                    cd:bd:cd:24:66:40:21:27:2d:67:dd:04:66:f2:31:
                    d4:15:87:fc:f9:ae:4d:fa:07:b2:2d:d5:73:c0:2a:
                    48:fc:5a:c4:96:5e:78:32:6c:6b:27:25:90:fb:95:
                    bf:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4C:EB:0C:F6:FD:0F:3C:A9:65:EC:A0:55:28:77:D1:BC:A9:27:40
            X509v3 Authority Key Identifier:
                keyid:3A:22:EC:79:4C:37:86:DA:E5:FD:E0:9E:C3:7F:1A:CE:71:8B:1A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/1/3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/1/323830343a386134383a633030303a3a2f33342d3334203d3e20323733363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a48:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         11:d2:9a:11:79:ca:f5:af:d1:4a:92:f8:cc:19:ba:0e:c1:ee:
         97:34:41:7e:45:4c:4d:a3:b1:05:8d:64:9f:44:24:69:5b:2e:
         f4:35:44:eb:51:e8:5c:24:45:af:3d:e0:70:f1:27:24:fb:57:
         66:8f:43:10:e7:15:e1:5b:af:15:1a:b1:3b:aa:54:24:8b:1b:
         99:e2:2f:e0:4c:f4:c3:24:80:10:ee:1e:75:75:2e:08:e8:65:
         72:8d:39:41:6f:17:5f:e5:6a:6c:34:27:2c:d1:de:98:e1:8c:
         95:af:6d:02:2a:00:af:c3:66:77:a0:fc:42:12:88:d1:99:88:
         1b:03:d5:30:ff:8d:b3:69:95:7e:ff:d5:e4:9d:3d:d0:dc:0f:
         11:af:63:3d:c6:45:aa:ea:d3:6e:25:ef:06:e9:cf:55:84:6f:
         95:e2:2b:26:6f:ec:90:f8:fd:f3:5a:5c:15:32:c6:9b:63:e5:
         45:ce:88:d9:94:9e:fc:79:80:3f:31:6d:1b:d6:a8:9a:3d:f6:
         14:3a:3f:74:4a:e5:01:81:60:7e:82:47:cc:76:47:07:8e:67:
         00:3f:ab:a0:af:6b:29:f1:6f:9b:d9:ca:6f:bb:96:c7:15:81:
         5f:f3:c1:34:7f:02:a6:a4:af:5f:d1:e1:cf:b7:f0:ee:b1:3a:
         db:4c:48:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:22 2024 by rpki-client on console-fra.rpki-client.org