Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/1/323830343a373465343a3a2f33322d3334203d3e20323731303130.roa
File:                     323830343a373465343a3a2f33322d3334203d3e20323731303130.roa (raw, json)
Hash identifier:          q5q9aKXHi8BBSYz9Q53T+m7RSR3wZN0JOXjs+kjRdrY=
Subject key identifier:   08:C2:FD:4E:A4:0A:68:3E:C3:AB:CC:11:21:B5:7D:5B:FE:03:B1:49
Certificate issuer:       /CN=C7925017EACBCBFDB8C96704D0075EE40B9E4267
Certificate serial:       22B09BEE38A198247102C620B25D7FDBC2025737
Authority key identifier: C7:92:50:17:EA:CB:CB:FD:B8:C9:67:04:D0:07:5E:E4:0B:9E:42:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7925017EACBCBFDB8C96704D0075EE40B9E4267.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/1/323830343a373465343a3a2f33322d3334203d3e20323731303130.roa
Signing time:             Thu 04 Apr 2024 11:39:07 +0000
ROA not before:           Thu 04 Apr 2024 11:34:07 +0000
ROA not after:            Thu 03 Apr 2025 11:39:07 +0000
asID:                     271010
IP address blocks:        2804:74e4::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/1/C7925017EACBCBFDB8C96704D0075EE40B9E4267.crl
                          rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/1/C7925017EACBCBFDB8C96704D0075EE40B9E4267.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7925017EACBCBFDB8C96704D0075EE40B9E4267.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 21:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b0:9b:ee:38:a1:98:24:71:02:c6:20:b2:5d:7f:db:c2:02:57:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7925017EACBCBFDB8C96704D0075EE40B9E4267
        Validity
            Not Before: Apr  4 11:34:07 2024 GMT
            Not After : Apr  3 11:39:07 2025 GMT
        Subject: CN=08C2FD4EA40A683EC3ABCC1121B57D5BFE03B149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:40:8d:4d:e1:e1:fb:33:a9:e0:47:45:bf:71:
                    97:d0:7f:b5:91:4a:87:01:53:f1:51:dc:03:f9:bb:
                    c6:ba:54:c3:ce:e1:3c:8f:0d:5c:54:30:01:cd:fd:
                    6c:cd:cb:5c:75:de:a3:14:c2:6b:89:53:80:dd:fe:
                    53:33:fc:e9:d4:28:66:62:56:00:10:e7:61:cd:1b:
                    0d:5f:60:96:c8:f0:6d:e5:8c:28:2e:46:84:65:ec:
                    e6:91:d2:90:27:6c:a3:44:36:c2:06:29:2d:de:fb:
                    ec:b3:22:e4:05:e5:58:f2:b0:ab:4f:b5:cf:8d:2a:
                    73:48:4c:3f:05:66:07:de:19:35:7e:ae:3d:e2:7c:
                    8b:56:c7:cb:96:89:55:b1:3b:2d:f2:47:30:ab:90:
                    00:06:fc:a2:e7:25:0c:46:13:ed:f7:c9:45:d6:64:
                    45:bf:fd:2d:ee:a7:32:c8:59:42:14:58:3e:47:00:
                    d6:b7:53:29:41:3c:95:40:c0:0f:63:13:ce:1e:32:
                    5e:fe:a4:50:c7:4c:36:ba:4e:a9:1e:e1:63:c9:4c:
                    c6:46:56:88:69:2f:33:84:95:e6:f0:93:81:ca:aa:
                    57:43:fc:db:0a:7a:fd:a0:46:5c:ad:68:5f:34:4e:
                    f5:da:fe:4e:c0:09:eb:d6:3c:33:37:fd:5b:af:75:
                    8e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C2:FD:4E:A4:0A:68:3E:C3:AB:CC:11:21:B5:7D:5B:FE:03:B1:49
            X509v3 Authority Key Identifier:
                keyid:C7:92:50:17:EA:CB:CB:FD:B8:C9:67:04:D0:07:5E:E4:0B:9E:42:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/1/C7925017EACBCBFDB8C96704D0075EE40B9E4267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7925017EACBCBFDB8C96704D0075EE40B9E4267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/1/323830343a373465343a3a2f33322d3334203d3e20323731303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:d8:98:a9:fc:c8:ff:e6:25:b6:a7:06:94:ea:7d:1d:30:d6:
         78:be:a6:bb:ba:e3:11:58:f3:6f:a7:cd:2a:6d:4a:c4:10:af:
         31:39:ca:c4:e1:45:9a:fe:0d:10:c1:6c:f8:1e:6c:9b:ff:75:
         2d:af:cc:2d:8a:49:79:0b:84:46:b3:41:06:c7:41:19:6b:37:
         72:e4:64:fc:a4:47:52:41:52:37:93:d0:2d:85:07:8f:55:2b:
         29:f4:f7:c4:58:65:f8:65:9d:74:17:ec:be:b6:1e:39:95:c7:
         2f:90:aa:a6:2c:a1:20:19:ee:d3:f0:56:7d:19:f4:a4:ab:86:
         a3:e7:0b:97:bb:79:83:df:de:43:91:47:bd:1c:2b:c5:ad:32:
         b9:46:20:4f:dc:cb:d2:be:44:4b:48:28:3a:0a:fe:56:3a:a7:
         85:03:ae:7e:b1:d9:ff:ae:48:ff:b1:6b:3c:af:c7:0d:00:a2:
         a9:ef:2c:bc:21:10:43:70:ac:bf:20:dc:52:cb:e2:42:12:ef:
         5a:80:7f:ae:62:f7:f2:b4:87:12:55:c2:21:5e:3a:17:99:4d:
         1a:8d:1d:40:c6:18:14:ea:ab:78:d2:10:81:e9:71:31:60:40:
         ab:4c:a9:32:58:60:f6:d9:1c:07:7b:ac:b3:c3:4c:ff:22:e2:
         93:7b:a2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:35 2024 by rpki-client on console-fra.rpki-client.org