Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a313030313a3a2f34382d3438203d3e203238333036.roa
File:                     323830343a33343a313030313a3a2f34382d3438203d3e203238333036.roa (raw, json)
Hash identifier:          LBzrbFvFUQMMaFKzRk6pJsSsJzIImsKFDedkPWPSu7M=
Subject key identifier:   5E:41:93:8C:F1:A9:0B:31:48:A1:4E:60:EA:71:66:93:F0:E6:AF:17
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       4C82ECD214C80774B2FFFD53B4573E55D3BF47FD
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a313030313a3a2f34382d3438203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:18 +0000
ROA not before:           Tue 25 Jun 2024 15:16:18 +0000
ROA not after:            Tue 24 Jun 2025 15:21:18 +0000
asID:                     28306
IP address blocks:        2804:34:1001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl
                          rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:82:ec:d2:14:c8:07:74:b2:ff:fd:53:b4:57:3e:55:d3:bf:47:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:18 2024 GMT
            Not After : Jun 24 15:21:18 2025 GMT
        Subject: CN=5E41938CF1A90B3148A14E60EA716693F0E6AF17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6a:81:84:25:96:aa:dd:95:fe:4e:ed:3c:a3:
                    9b:6d:16:5e:d4:c9:09:d0:a0:8b:76:73:22:1a:ee:
                    62:aa:b8:2c:de:2d:2e:48:d5:6a:44:5d:60:ba:ea:
                    de:3b:d7:d2:5d:71:0e:77:2a:24:6b:f3:7d:ac:fa:
                    19:80:72:6e:3a:ba:95:9f:37:83:90:49:45:8b:3c:
                    20:75:c4:d9:f5:fa:01:7c:da:ab:28:c5:ae:a8:e2:
                    e5:12:01:38:dd:05:51:69:e0:fc:be:47:ea:5f:3d:
                    96:1b:42:fb:48:7b:e5:ab:64:01:e5:e1:c2:9a:72:
                    a0:d3:7b:b7:b5:0f:e8:b9:f4:38:cd:d1:7e:eb:d6:
                    f4:d8:e9:c9:f2:13:bf:33:63:4c:00:8b:2e:7a:09:
                    20:2d:1e:a9:b5:e1:c9:41:54:a6:ed:40:82:4a:df:
                    de:dd:b5:87:00:ac:cd:2d:84:8f:d0:b1:25:db:77:
                    cf:c9:c6:de:c6:87:49:20:c6:58:e9:e8:aa:46:f6:
                    5e:9f:f8:9d:de:65:be:86:42:65:5d:22:f9:94:ed:
                    73:a7:ac:89:ae:6f:e6:cb:cb:fd:62:dd:35:c2:20:
                    53:54:10:ee:fa:2e:67:fe:7a:ed:f0:91:bf:4d:ed:
                    e6:d3:4a:65:86:32:3b:09:79:35:45:e4:db:92:56:
                    64:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:41:93:8C:F1:A9:0B:31:48:A1:4E:60:EA:71:66:93:F0:E6:AF:17
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a313030313a3a2f34382d3438203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34:1001::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:4f:d7:b1:e9:2b:93:5e:ae:c5:c2:dc:b9:26:e6:3e:a8:66:
         f7:0a:a8:fd:1f:b9:38:67:75:5a:85:6f:ff:8c:75:1c:29:02:
         4b:fa:17:50:f2:3b:ea:e0:0f:55:e6:2f:de:4f:2b:72:c6:25:
         fe:59:98:e0:e5:19:46:1e:66:78:57:22:3f:5f:08:cd:cd:46:
         0a:17:67:c9:e3:fa:34:f6:70:9e:f7:46:92:b6:59:df:9e:6d:
         8b:46:a4:fd:3f:4e:a4:2d:17:41:c8:6c:68:fc:6d:3d:35:94:
         66:8d:17:d0:7c:9a:bb:80:11:53:f4:53:e6:f8:57:18:e0:3a:
         16:46:d1:f1:db:a9:8f:1c:d7:db:3b:1a:86:e3:57:b7:3b:7d:
         2f:79:73:ae:94:af:38:3b:d8:ae:58:c4:95:be:b2:0f:78:16:
         72:b9:0f:e4:06:67:52:09:29:78:12:6d:bc:25:7d:81:57:41:
         c5:f3:97:89:21:5a:a7:cf:c8:40:c4:00:8d:c3:1c:a7:45:f2:
         e2:ac:a7:1a:21:c6:3b:ac:24:12:85:50:a7:92:5b:01:96:c2:
         84:44:11:26:d9:5b:85:91:5c:7f:62:33:bb:25:98:8c:c4:07:
         1c:0b:34:47:58:e1:57:e6:29:c7:77:2c:42:84:1a:19:a8:86:
         8c:87:1c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:34 2024 by rpki-client on console-ams.rpki-client.org