Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/323830343a353464633a383030303a3a2f33342d3334203d3e20323638363734.roa
File:                     323830343a353464633a383030303a3a2f33342d3334203d3e20323638363734.roa (raw, json)
Hash identifier:          TgDxlL8lttVYe4REtexCUN2EAEm72luEeuqYyKqW5NM=
Subject key identifier:   0A:DE:E8:5C:37:D0:9E:27:65:39:E2:1F:C2:52:77:F0:EE:77:35:A7
Certificate issuer:       /CN=DEA478CF34A11C2016DD7ED26FDC9421A6EE294D
Certificate serial:       3848C08BA44C33FB69E9328F3662A684EF59D0F0
Authority key identifier: DE:A4:78:CF:34:A1:1C:20:16:DD:7E:D2:6F:DC:94:21:A6:EE:29:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/323830343a353464633a383030303a3a2f33342d3334203d3e20323638363734.roa
Signing time:             Thu 04 Apr 2024 18:05:13 +0000
ROA not before:           Thu 04 Apr 2024 18:00:13 +0000
ROA not after:            Thu 03 Apr 2025 18:05:13 +0000
asID:                     268674
IP address blocks:        2804:54dc:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.crl
                          rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:48:c0:8b:a4:4c:33:fb:69:e9:32:8f:36:62:a6:84:ef:59:d0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEA478CF34A11C2016DD7ED26FDC9421A6EE294D
        Validity
            Not Before: Apr  4 18:00:13 2024 GMT
            Not After : Apr  3 18:05:13 2025 GMT
        Subject: CN=0ADEE85C37D09E276539E21FC25277F0EE7735A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a8:36:30:ac:50:ed:23:1b:67:8e:c4:4d:46:
                    d1:cd:67:f5:ba:1c:15:aa:66:63:e5:fb:99:72:94:
                    9f:9e:a5:10:16:7e:18:d1:3d:ef:52:81:77:cb:ff:
                    a3:25:1a:cf:73:f0:7a:78:38:11:69:d5:54:b1:60:
                    1b:2f:7c:d3:47:9b:1e:68:7b:2e:c9:3e:4a:de:60:
                    5d:79:50:e8:39:7e:f9:31:18:b3:d5:2a:61:b4:40:
                    4a:7f:74:e3:5e:95:e5:ef:5c:8d:8b:2c:f4:28:ac:
                    62:a4:13:4f:99:fa:16:11:ec:12:f6:43:f8:37:f8:
                    d3:11:58:b3:1b:99:9d:2e:8d:36:4e:f3:59:82:0e:
                    c7:1c:89:0c:f0:e2:ad:58:31:18:31:cf:90:6a:ae:
                    a6:26:57:35:8b:b7:a2:4e:19:ad:88:dd:97:e2:04:
                    0a:c5:f6:42:8e:2b:8c:75:7e:c3:9b:fd:e9:1c:3b:
                    6f:24:b7:07:98:5d:8c:f7:e7:92:27:8b:aa:3d:b8:
                    cd:bf:18:2e:5d:a4:fa:f7:c5:67:d1:40:29:9e:42:
                    60:d8:b4:4b:6c:b6:a3:88:15:89:d4:f9:e0:31:3f:
                    7b:58:2f:ea:01:79:54:02:a9:a5:cc:23:65:f5:2b:
                    7d:3f:17:73:b7:c6:f5:3f:72:a9:21:16:e1:62:f2:
                    de:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DE:E8:5C:37:D0:9E:27:65:39:E2:1F:C2:52:77:F0:EE:77:35:A7
            X509v3 Authority Key Identifier:
                keyid:DE:A4:78:CF:34:A1:1C:20:16:DD:7E:D2:6F:DC:94:21:A6:EE:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/323830343a353464633a383030303a3a2f33342d3334203d3e20323638363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54dc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3c:cc:37:36:82:94:e5:32:af:d2:2c:2b:f4:49:0f:29:23:27:
         6d:b4:f9:64:0e:15:7a:df:25:72:68:27:3e:77:f1:63:ad:7d:
         9a:26:d2:68:02:8a:bd:6a:da:d8:ac:e1:0a:4f:c1:87:a1:5e:
         e8:40:89:fd:8c:b9:83:7a:e0:af:f5:07:8e:43:5f:eb:9d:2b:
         0a:8c:49:10:e5:8c:ad:cd:28:71:01:39:90:5f:17:91:3a:65:
         1d:3a:39:8d:d1:b1:e3:a2:fb:20:f2:8a:04:b4:72:0e:88:7a:
         71:7e:58:91:00:da:6c:5d:f5:56:bc:b0:97:24:25:c3:72:b7:
         e9:4b:09:4e:bc:71:9a:47:8e:95:37:33:8b:ba:f0:8a:f9:86:
         45:ca:59:2b:11:84:8b:07:f9:ee:56:e7:d5:a6:44:80:7d:fa:
         c7:84:b7:ef:d0:a7:e8:7c:03:eb:29:ef:ee:18:73:3a:e1:81:
         6c:cb:2f:f8:e3:a0:7e:e4:23:21:3e:13:0b:35:55:a9:1e:a3:
         47:7e:08:ed:aa:42:81:16:f6:8b:1b:01:44:f9:9d:99:02:73:
         76:97:b4:6a:9a:c4:b4:69:49:a6:e8:1c:25:7d:e2:bc:d5:8c:
         f4:e0:31:0a:4d:41:b9:18:ca:ad:73:68:3d:96:fc:5d:bb:cb:
         09:e3:62:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:49 2024 by rpki-client on console-fra.rpki-client.org