Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a633030303a3a2f33342d3334203d3e20323633313436.roa
File:                     323830343a313737383a633030303a3a2f33342d3334203d3e20323633313436.roa (raw, json)
Hash identifier:          2U7UC+iecO1N/C+tskSxGBieTswT547v4ld9jJgB4bU=
Subject key identifier:   F9:F1:DA:3D:C0:03:8A:43:72:FD:2E:AE:53:E9:05:82:05:23:6C:C7
Certificate issuer:       /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
Certificate serial:       2B5802053ECE865D0601AA4373AF6DAC6B77C18F
Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a633030303a3a2f33342d3334203d3e20323633313436.roa
Signing time:             Thu 04 Apr 2024 07:28:59 +0000
ROA not before:           Thu 04 Apr 2024 07:23:59 +0000
ROA not after:            Thu 03 Apr 2025 07:28:59 +0000
asID:                     263146
IP address blocks:        2804:1778:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl
                          rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:58:02:05:3e:ce:86:5d:06:01:aa:43:73:af:6d:ac:6b:77:c1:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
        Validity
            Not Before: Apr  4 07:23:59 2024 GMT
            Not After : Apr  3 07:28:59 2025 GMT
        Subject: CN=F9F1DA3DC0038A4372FD2EAE53E9058205236CC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:22:53:d9:c7:54:c4:89:ba:71:55:7e:c7:5a:
                    43:15:9d:d2:df:93:cb:46:dc:71:f0:14:58:2b:4e:
                    02:4b:6b:4a:c9:d6:b6:43:55:e1:3b:aa:5d:4b:b1:
                    87:9d:f4:1c:81:50:d7:47:35:69:23:08:8e:32:3e:
                    a9:fb:ff:70:86:ba:02:bf:4d:5c:c1:a8:d6:e0:a5:
                    9d:d2:b9:ef:ea:d5:42:6a:b5:d2:f9:e0:92:44:5d:
                    94:d5:5a:fc:69:6d:df:1f:3c:91:3b:f6:d0:86:33:
                    22:3c:36:32:13:0f:56:1f:fa:a5:d4:e3:bc:5a:fb:
                    94:23:a8:fa:f8:e7:18:e5:c2:0a:14:c1:09:a5:43:
                    ba:2f:dc:31:21:a2:c6:4e:ed:48:94:72:82:cf:31:
                    d3:23:c4:f7:b8:fa:c6:2f:ef:f8:0d:22:2e:b3:8e:
                    ec:4d:7d:1c:d2:f7:33:30:2f:87:11:bd:2c:f2:57:
                    15:60:61:df:5f:ae:e9:ec:5d:13:ec:b5:10:64:39:
                    36:e5:98:59:4d:64:1b:f8:c9:85:ed:5e:a9:7a:60:
                    d3:c6:cc:8c:56:13:3d:02:24:f9:3a:08:d3:2a:b4:
                    ea:b0:02:df:63:3c:0c:52:ce:79:c2:6e:32:fe:28:
                    a2:02:8c:a5:65:43:9a:00:35:d3:f1:69:ff:e3:ac:
                    42:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F1:DA:3D:C0:03:8A:43:72:FD:2E:AE:53:E9:05:82:05:23:6C:C7
            X509v3 Authority Key Identifier:
                keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a633030303a3a2f33342d3334203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1778:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2a:ea:d9:ab:a9:3a:ef:c9:ec:86:00:37:73:f0:e0:9d:15:b1:
         27:12:16:9c:3b:56:f4:e5:f4:ca:c5:8f:83:61:6e:7f:c4:4b:
         32:25:ab:dd:31:6a:c2:6c:4f:a7:50:d2:51:6d:f0:b1:a9:58:
         5e:08:2a:9b:22:21:db:e8:57:2c:1d:43:26:9a:34:88:b9:f7:
         9b:97:dd:d0:ea:9e:18:db:7e:22:75:1c:1a:a3:a5:fe:d6:c7:
         9e:c3:a6:a5:01:da:fc:73:79:cd:de:34:2a:17:7b:a7:34:d2:
         ae:0d:47:c4:bd:c9:82:22:f7:c5:6d:1c:8e:df:90:69:0f:9d:
         c0:f9:0d:a1:c2:c1:e4:97:bd:78:68:9f:76:a1:46:29:70:0b:
         c8:ad:d0:a3:37:28:07:8d:a4:70:a1:b9:f5:0f:a9:f9:f6:a8:
         0c:83:06:89:21:18:84:bb:b5:94:b3:88:ba:47:e8:df:68:1c:
         3b:00:24:b1:91:1a:03:37:c0:b9:2b:8b:89:05:37:0e:70:0c:
         55:3c:a0:31:58:d9:14:eb:4f:27:f7:7e:24:c3:b0:ec:0b:6c:
         08:6c:f0:8c:7b:1a:19:48:40:1a:93:d4:51:e1:e2:37:ca:5a:
         e4:a8:de:34:f3:d5:09:f2:a3:50:3a:a2:42:a2:fe:f7:9d:26:
         63:15:a0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:32 2024 by rpki-client on console-fra.rpki-client.org