Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a343030303a3a2f33352d3335203d3e20323633313436.roa
File:                     323830343a313737383a343030303a3a2f33352d3335203d3e20323633313436.roa (raw, json)
Hash identifier:          SnxKGUF+txBRcZ2CSjNrYPmWPrJye8Lmv0AWBu+8hjg=
Subject key identifier:   0F:AA:DE:68:C2:E2:89:E4:2D:B4:B5:32:B3:C4:9A:7C:8D:DC:41:27
Certificate issuer:       /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
Certificate serial:       47700CE41522689B17649E298F1C3215A825A331
Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a343030303a3a2f33352d3335203d3e20323633313436.roa
Signing time:             Thu 04 Apr 2024 07:28:55 +0000
ROA not before:           Thu 04 Apr 2024 07:23:55 +0000
ROA not after:            Thu 03 Apr 2025 07:28:55 +0000
asID:                     263146
IP address blocks:        2804:1778:4000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl
                          rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:70:0c:e4:15:22:68:9b:17:64:9e:29:8f:1c:32:15:a8:25:a3:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
        Validity
            Not Before: Apr  4 07:23:55 2024 GMT
            Not After : Apr  3 07:28:55 2025 GMT
        Subject: CN=0FAADE68C2E289E42DB4B532B3C49A7C8DDC4127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:76:0d:ae:14:a0:14:cd:dd:a7:f6:20:16:2e:
                    e1:aa:af:ca:b7:eb:f8:37:e5:55:b9:3a:d5:f4:3c:
                    1d:65:d9:af:99:e9:c9:bb:e2:d2:90:e4:f6:4e:0d:
                    8e:5f:f2:fc:7c:9a:56:23:d4:19:3b:51:da:63:bf:
                    16:bf:a0:ad:f1:54:ec:32:96:3c:12:61:b0:23:52:
                    3d:f2:31:51:a6:45:fb:ea:b8:f9:52:64:46:0f:85:
                    11:ec:fd:dd:5b:e5:cd:74:de:66:67:a5:6d:84:74:
                    d2:85:de:99:32:10:fe:09:3e:25:ee:de:ad:b9:ee:
                    09:a8:55:93:8f:91:9e:ca:93:07:3f:f6:d8:2f:aa:
                    82:97:68:9c:a9:95:fb:d8:5e:8d:e8:f5:24:18:64:
                    3d:1f:04:45:a7:41:4b:da:f5:0e:92:94:ca:af:41:
                    b7:2b:de:ec:8d:c5:b1:a4:bc:09:0c:d7:72:74:d5:
                    38:89:84:89:8c:e1:56:b9:db:2b:a3:d9:5e:80:e7:
                    30:f2:5a:81:89:d0:32:d3:a7:39:d6:a9:b3:3a:d2:
                    46:3f:56:0f:d2:45:96:78:31:c5:0c:87:df:4d:4e:
                    49:76:da:c2:5e:22:c5:b2:ee:ad:f1:e6:dd:a9:44:
                    cf:c3:af:d4:70:17:4c:0b:fb:7d:4c:a2:1d:e2:a5:
                    54:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AA:DE:68:C2:E2:89:E4:2D:B4:B5:32:B3:C4:9A:7C:8D:DC:41:27
            X509v3 Authority Key Identifier:
                keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a343030303a3a2f33352d3335203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1778:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         b3:6e:fe:86:33:b5:e4:88:e4:9d:7a:3e:38:5f:0a:1b:8a:c5:
         1e:63:e4:ac:e2:51:de:48:ab:e8:e2:f0:4b:8b:cb:82:29:16:
         7e:f5:15:e7:f8:38:38:98:23:59:16:ca:b5:2c:ce:31:21:5b:
         b1:3f:a6:c7:b8:55:82:78:6b:53:49:1c:9a:66:fa:9e:47:28:
         70:51:6a:26:29:71:b0:24:b0:89:45:6a:15:2c:95:08:ea:5e:
         a9:5f:45:3b:8a:16:3c:9a:e6:b0:d8:f2:ed:f8:97:c8:69:a6:
         a6:f3:7c:7f:08:43:6c:e7:be:95:78:a0:77:b6:16:7a:78:6a:
         ef:51:5a:ae:1e:0f:84:1b:af:4c:9b:e7:fc:4e:39:2a:41:28:
         5f:d1:ad:e8:72:cb:23:1f:48:31:92:80:b3:54:c7:f2:56:23:
         72:35:71:37:1e:7c:de:a0:a6:ab:64:bc:59:f1:e1:da:ad:b5:
         40:2e:9e:c0:fc:62:a8:61:22:9f:2b:df:70:8b:ab:7f:a3:b4:
         50:53:c3:fa:9d:0b:8f:8c:b3:0e:08:bf:fe:77:c7:09:aa:0c:
         7a:0d:55:53:69:3c:d3:6d:07:0e:a6:a2:f6:e9:0c:a8:98:ff:
         6b:c3:91:c6:e3:31:ec:ac:53:ac:f0:81:6e:b2:9e:44:9a:25:
         61:d8:de:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:38 2024 by rpki-client on console-ams.rpki-client.org