Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/323830343a316332343a3a2f33322d3438203d3e203238363730.roa
File:                     323830343a316332343a3a2f33322d3438203d3e203238363730.roa (raw, json)
Hash identifier:          +TDxYAnVsPID27nBhQMm7/l7Ah845871Q9Ijswo4tW4=
Subject key identifier:   EF:24:CF:B9:34:18:2F:0A:96:92:1C:54:66:01:7E:AC:5D:1A:41:5F
Certificate issuer:       /CN=4E7EB31B6D4532D1C10444DB3B88D1F6D002F236
Certificate serial:       3A9104BCAA3876EFDC2E03B51B1C4AFEAD167E3D
Authority key identifier: 4E:7E:B3:1B:6D:45:32:D1:C1:04:44:DB:3B:88:D1:F6:D0:02:F2:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/323830343a316332343a3a2f33322d3438203d3e203238363730.roa
Signing time:             Tue 30 Jul 2024 15:03:10 +0000
ROA not before:           Tue 30 Jul 2024 14:58:10 +0000
ROA not after:            Tue 29 Jul 2025 15:03:10 +0000
asID:                     28670
IP address blocks:        2804:1c24::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.crl
                          rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 16:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:91:04:bc:aa:38:76:ef:dc:2e:03:b5:1b:1c:4a:fe:ad:16:7e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E7EB31B6D4532D1C10444DB3B88D1F6D002F236
        Validity
            Not Before: Jul 30 14:58:10 2024 GMT
            Not After : Jul 29 15:03:10 2025 GMT
        Subject: CN=EF24CFB934182F0A96921C5466017EAC5D1A415F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ed:73:f9:2d:d4:a0:72:43:a4:8b:1c:d3:b5:
                    5d:82:47:e2:e2:a7:7c:93:d0:8f:f4:4a:b8:51:fb:
                    e0:ad:2b:5f:ca:1b:26:97:eb:04:2a:54:5a:7f:15:
                    0b:b9:ff:2d:94:51:32:e1:5f:4c:db:a5:86:77:ba:
                    b5:64:3d:15:43:dc:d1:a7:6b:7e:6b:99:0f:93:8b:
                    5b:20:96:82:1c:01:57:c9:31:eb:f6:bc:33:1a:1c:
                    c0:53:ef:b9:0c:c9:f4:d1:37:73:0b:0e:00:ad:cc:
                    cf:d4:dd:90:cd:76:2c:a6:25:b6:7e:ae:c6:18:68:
                    74:b3:34:ea:05:dc:d4:fe:36:dc:86:65:f7:6d:78:
                    3b:50:6d:ab:82:e0:53:bb:8e:da:d1:26:22:80:52:
                    5b:23:b1:60:90:98:87:84:7c:2f:d7:60:5a:5d:cd:
                    f5:61:15:f9:6d:ea:3f:47:56:62:30:36:78:5a:2b:
                    57:1a:4c:ec:85:9e:6b:06:b9:94:93:cd:2d:4e:3d:
                    c4:59:6d:8b:03:4b:aa:5b:b8:48:30:dc:ba:05:e9:
                    a2:47:01:d3:9b:0f:d8:ef:0e:62:75:fd:f7:6c:08:
                    13:3c:38:fc:5e:05:91:ec:db:b3:1f:87:9b:f4:dd:
                    a9:96:48:3a:02:b1:c3:32:21:fe:61:61:f2:d2:8a:
                    b1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:24:CF:B9:34:18:2F:0A:96:92:1C:54:66:01:7E:AC:5D:1A:41:5F
            X509v3 Authority Key Identifier:
                keyid:4E:7E:B3:1B:6D:45:32:D1:C1:04:44:DB:3B:88:D1:F6:D0:02:F2:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/323830343a316332343a3a2f33322d3438203d3e203238363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c24::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:f0:75:26:04:0d:51:94:a0:a5:76:86:17:ee:49:55:b4:47:
         e3:bd:86:3e:78:71:5c:3e:cf:01:61:84:8b:94:91:ce:ae:e2:
         4b:1b:df:98:8e:27:da:37:89:27:c3:35:e2:22:b0:ea:cf:70:
         84:63:07:7b:db:7e:00:1a:ce:36:7b:dd:8c:56:34:a0:8d:8c:
         82:61:c9:a0:30:09:ec:1a:55:32:ba:94:9c:aa:34:94:8e:d7:
         3f:22:c1:33:d5:cd:c9:de:47:18:cf:7a:8c:fc:83:ca:49:5f:
         cf:b2:0a:ce:0b:07:e1:e0:63:ca:b3:6a:bb:11:a0:f6:6c:66:
         17:71:42:f4:13:34:c4:a7:74:77:af:05:ad:b9:13:21:fa:b5:
         1e:1c:ec:eb:62:75:ed:20:0c:1f:50:86:91:69:2e:3d:fb:5d:
         6c:28:11:f8:fa:86:84:0d:35:34:a7:b2:8a:3d:6e:d8:0f:a7:
         2b:d1:81:0d:82:88:14:9b:f1:9c:11:45:9d:a2:53:c4:df:f4:
         82:e1:42:80:44:23:e4:85:1d:91:db:e4:77:49:f0:b8:7e:10:
         26:35:dd:7d:62:62:6b:dc:a1:91:fc:f6:cf:88:d0:3b:10:14:
         d6:12:e6:9d:15:d1:69:ef:e1:6c:07:20:43:7a:3d:4e:8b:e3:
         89:14:e7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 17:14:36 2024 by rpki-client on console-fra.rpki-client.org