Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a343030303a3a2f33342d3334203d3e20323633313436.roa
File:                     323830343a313737383a343030303a3a2f33342d3334203d3e20323633313436.roa (raw, json)
Hash identifier:          aMPl9ngjxrw+Wrby9IqnpGd5UwYNpODbbwE72tmVDlc=
Subject key identifier:   D2:3A:6B:51:FE:15:E2:B7:B6:B0:23:4F:64:BE:54:2C:92:5C:2C:E3
Certificate issuer:       /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
Certificate serial:       6B7F8F6441AA3C7504E66EA407EC58FBF4690162
Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a343030303a3a2f33342d3334203d3e20323633313436.roa
Signing time:             Thu 04 Apr 2024 07:28:57 +0000
ROA not before:           Thu 04 Apr 2024 07:23:57 +0000
ROA not after:            Thu 03 Apr 2025 07:28:57 +0000
asID:                     263146
IP address blocks:        2804:1778:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl
                          rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7f:8f:64:41:aa:3c:75:04:e6:6e:a4:07:ec:58:fb:f4:69:01:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
        Validity
            Not Before: Apr  4 07:23:57 2024 GMT
            Not After : Apr  3 07:28:57 2025 GMT
        Subject: CN=D23A6B51FE15E2B7B6B0234F64BE542C925C2CE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5e:a7:00:f4:0a:eb:3e:94:6d:50:e2:3c:fe:
                    f0:a2:98:1b:a3:31:08:24:2e:10:8b:4e:17:82:11:
                    12:22:fb:cf:28:41:b8:b3:28:14:61:8b:fa:d8:14:
                    b9:5b:0d:46:62:2a:d3:7a:7b:8c:74:26:e0:61:02:
                    d8:ef:88:1d:22:36:fe:fc:75:40:2d:5c:e7:6a:07:
                    31:5e:a0:44:8b:27:e3:68:bb:8d:02:10:d8:8c:eb:
                    99:87:69:0a:b4:05:00:d9:ea:b9:28:f1:7a:12:eb:
                    3c:39:06:b2:f4:cc:bc:5c:93:ea:67:72:74:ff:2f:
                    47:6d:f9:bf:c7:47:c0:ae:c7:16:61:de:d0:18:b2:
                    7e:19:ec:64:6c:57:24:0e:ef:f3:91:7c:71:35:8c:
                    c5:90:d9:10:b9:27:92:30:61:a7:1a:12:02:a2:11:
                    d7:b3:1b:d7:1a:77:73:e4:a4:e1:7c:ba:89:4d:e8:
                    1a:f8:ed:51:57:bb:d2:7b:5a:7c:44:b2:90:05:b5:
                    dc:41:81:d5:8a:70:9e:78:78:9c:53:f9:01:2f:9e:
                    0a:d3:8f:9a:e9:f1:8f:68:a1:09:70:f1:87:49:76:
                    6e:b0:c2:cf:2a:ab:a1:20:eb:05:6b:be:94:44:36:
                    31:9d:d3:31:fd:96:a0:44:bc:fc:61:92:a6:33:a9:
                    73:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3A:6B:51:FE:15:E2:B7:B6:B0:23:4F:64:BE:54:2C:92:5C:2C:E3
            X509v3 Authority Key Identifier:
                keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a343030303a3a2f33342d3334203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1778:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         99:e5:2e:6b:5e:e7:ed:1a:ad:dd:5b:cd:f5:87:0e:06:94:1d:
         8a:06:0a:9f:5d:cd:dd:d0:45:ba:5c:fe:92:fb:5c:86:8b:0a:
         85:1a:8b:34:75:52:25:70:10:81:7d:52:2a:9f:59:c8:ce:6e:
         91:d1:01:f7:60:c5:75:95:b2:e4:3e:97:37:7f:c6:cf:7c:b6:
         4e:13:e0:d4:5f:87:26:5f:ce:3d:73:8c:c2:f0:8e:a1:76:26:
         42:a6:6b:73:55:de:41:ff:89:cb:f6:35:f6:1a:f2:8f:22:c9:
         64:43:1f:d5:c1:16:26:ed:a3:86:fa:12:06:6e:7b:9c:1b:60:
         1e:a9:e4:b6:a8:f7:bd:94:95:1a:f0:c2:78:fa:40:bc:6a:27:
         d4:39:9f:c1:cf:c9:7c:5c:90:c9:b8:e6:e6:d9:4e:93:27:78:
         12:6e:eb:d4:53:2b:a9:8a:a9:af:77:2c:b8:97:e6:64:73:63:
         1d:d2:73:e3:74:d1:85:e3:6d:db:4f:14:ad:17:cd:01:ca:27:
         64:f4:7b:de:ff:24:ce:f1:dd:53:89:68:b7:bc:49:4e:7d:05:
         f2:e5:6f:d0:1c:2e:af:0b:ca:e2:33:2e:18:60:9a:01:59:ec:
         b0:09:61:6a:7a:f6:69:4b:47:24:3d:0d:56:0a:85:3b:39:f8:
         86:ce:35:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:32 2024 by rpki-client on console-fra.rpki-client.org