Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/323830343a333438303a3a2f33332d3333203d3e20323635343632.roa
File:                     323830343a333438303a3a2f33332d3333203d3e20323635343632.roa (raw, json)
Hash identifier:          7QjQEW3XyF/y9OeZRQm4zMnS03PxRGjn/ejaxLN/efo=
Subject key identifier:   96:CA:C8:88:48:BE:8E:F7:75:68:9C:8B:9E:9F:97:0C:D5:5F:FD:10
Certificate issuer:       /CN=74EA71FAA5CED5BB59CB34FC46F40B1198A31A07
Certificate serial:       79404E62576A4BDCBF9AD74A8DA1C9E16A3D4A15
Authority key identifier: 74:EA:71:FA:A5:CE:D5:BB:59:CB:34:FC:46:F4:0B:11:98:A3:1A:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/323830343a333438303a3a2f33332d3333203d3e20323635343632.roa
Signing time:             Thu 04 Apr 2024 00:50:32 +0000
ROA not before:           Thu 04 Apr 2024 00:45:32 +0000
ROA not after:            Thu 03 Apr 2025 00:50:32 +0000
asID:                     265462
IP address blocks:        2804:3480::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.crl
                          rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:40:4e:62:57:6a:4b:dc:bf:9a:d7:4a:8d:a1:c9:e1:6a:3d:4a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74EA71FAA5CED5BB59CB34FC46F40B1198A31A07
        Validity
            Not Before: Apr  4 00:45:32 2024 GMT
            Not After : Apr  3 00:50:32 2025 GMT
        Subject: CN=96CAC88848BE8EF775689C8B9E9F970CD55FFD10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ae:1e:76:10:d8:cf:19:e2:78:7d:3d:65:ab:
                    74:67:02:ae:84:4c:05:0b:73:8b:c3:b5:bf:cb:6d:
                    36:4b:be:54:88:6b:09:46:cf:40:8f:64:53:12:42:
                    fe:04:0c:49:20:c9:38:9e:d5:a3:b8:24:ce:9e:63:
                    56:74:3a:a0:88:9d:42:b8:b2:66:28:3a:36:c4:35:
                    cd:5a:c1:4a:92:1e:74:cc:c0:bf:d6:7f:e0:78:a2:
                    0d:05:b4:4b:95:3d:9f:59:a2:bd:71:3a:90:c5:37:
                    8b:a9:40:d3:e9:05:47:6e:65:43:b1:c7:32:ae:9f:
                    5c:29:31:e3:d9:65:70:eb:1b:e8:1e:b6:6c:b5:f5:
                    64:dc:35:e1:2c:13:0d:75:86:e0:dd:10:cc:38:4b:
                    fa:63:0f:3c:5d:5f:13:18:a0:ed:27:47:b1:63:85:
                    e7:bb:fd:9f:34:4e:44:41:53:0c:63:d2:26:f5:24:
                    9d:54:95:2d:58:9f:de:1f:72:ed:fd:73:16:71:89:
                    de:33:c1:24:1b:ce:57:07:fb:e4:bf:17:c4:f0:b5:
                    eb:26:32:b1:73:8a:90:66:03:75:56:a5:53:e3:c9:
                    35:0d:41:83:46:53:4f:09:37:74:87:87:d1:98:a4:
                    d9:cb:6c:ba:23:00:52:d8:1a:d1:6f:d5:d0:63:e3:
                    40:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CA:C8:88:48:BE:8E:F7:75:68:9C:8B:9E:9F:97:0C:D5:5F:FD:10
            X509v3 Authority Key Identifier:
                keyid:74:EA:71:FA:A5:CE:D5:BB:59:CB:34:FC:46:F4:0B:11:98:A3:1A:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/323830343a333438303a3a2f33332d3333203d3e20323635343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3480::/33

    Signature Algorithm: sha256WithRSAEncryption
         c7:f1:bf:c1:22:a0:49:3e:e8:e4:8d:de:1d:f8:fc:3c:c4:4f:
         68:df:d3:ac:81:da:6e:f1:81:6f:07:7f:3d:04:64:c2:b7:6f:
         87:cc:f9:e5:8b:2f:6c:19:1e:bb:20:42:fe:88:76:8d:3c:6c:
         ee:b5:40:e0:36:29:cc:52:06:2d:65:a7:7b:47:bd:8f:77:01:
         00:33:23:21:df:d1:48:c0:c7:32:21:92:9a:12:01:29:79:78:
         5d:de:49:c4:a6:23:89:d6:2c:c8:07:7d:3e:08:31:d1:a5:75:
         6a:07:97:22:32:da:6e:34:bc:3b:a0:17:73:46:2d:88:ce:ed:
         7e:8d:3e:4e:77:e1:a3:43:a2:95:cc:4a:4a:e0:8f:cb:73:58:
         fe:e3:b2:6f:9b:5a:5f:f1:87:4d:47:09:b1:d9:9d:77:33:59:
         aa:62:1a:5b:cf:44:16:6f:7e:eb:7a:ac:7b:ef:d9:52:fe:56:
         28:68:c9:73:8a:b4:dc:ab:2d:fc:9a:6d:cc:95:40:36:9f:3f:
         c2:05:1f:35:0d:48:36:c0:62:37:8b:6b:6a:02:39:30:71:42:
         4d:be:ea:54:ac:d2:d8:49:4e:69:1f:67:b6:8d:05:b3:d8:a5:
         f2:e6:6b:fb:87:5d:02:04:b2:a1:11:ca:aa:1f:28:63:ca:51:
         62:91:52:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:08 2024 by rpki-client on console-fra.rpki-client.org