Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/323830343a323730303a3a2f33322d3335203d3e20323633383639.roa
File:                     323830343a323730303a3a2f33322d3335203d3e20323633383639.roa (raw, json)
Hash identifier:          qI2IX42s4PONdjdNfNOy9Rs7P1+i0GizyJCIufaqEzo=
Subject key identifier:   C1:C5:35:AE:FA:9E:50:8F:51:D1:AB:90:AA:15:45:B9:18:7C:83:E7
Certificate issuer:       /CN=3E3635534C5268C5F8F31D910454018D21BBA954
Certificate serial:       067B2DA5E7B0FE703075B80E285BF88FB76C2D74
Authority key identifier: 3E:36:35:53:4C:52:68:C5:F8:F3:1D:91:04:54:01:8D:21:BB:A9:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3635534C5268C5F8F31D910454018D21BBA954.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/323830343a323730303a3a2f33322d3335203d3e20323633383639.roa
Signing time:             Wed 03 Apr 2024 18:32:05 +0000
ROA not before:           Wed 03 Apr 2024 18:27:05 +0000
ROA not after:            Wed 02 Apr 2025 18:32:05 +0000
asID:                     263869
IP address blocks:        2804:2700::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.crl
                          rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3635534C5268C5F8F31D910454018D21BBA954.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7b:2d:a5:e7:b0:fe:70:30:75:b8:0e:28:5b:f8:8f:b7:6c:2d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E3635534C5268C5F8F31D910454018D21BBA954
        Validity
            Not Before: Apr  3 18:27:05 2024 GMT
            Not After : Apr  2 18:32:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:2e:3b:03:60:28:64:fe:7d:6d:3a:22:d2:
                    03:d5:0b:51:b5:fb:30:83:2d:b2:2e:9c:fb:cd:e1:
                    0d:f8:bc:59:51:dd:72:5d:25:f6:33:f9:7b:b7:c7:
                    49:6e:f9:a4:f1:2b:6f:ee:d5:e8:5e:71:6f:4b:19:
                    51:26:ab:43:97:b0:e5:e7:e2:4a:97:7e:55:12:fa:
                    9a:87:14:73:c4:2c:77:34:01:1a:44:0a:ef:82:1e:
                    12:de:e0:61:46:98:b4:92:4b:56:ea:d4:41:bb:92:
                    5e:1c:6f:69:c7:7c:b2:e7:21:0d:74:e0:3c:43:9e:
                    bd:87:4c:dd:c8:a3:22:89:34:10:2e:27:7d:94:ee:
                    9a:99:2b:54:c1:0f:b0:ab:54:7f:d2:a9:14:10:65:
                    b8:1b:8c:e8:c6:05:24:1c:ab:9b:a6:81:e9:76:96:
                    da:04:c7:35:ff:9a:6e:3a:b0:4a:98:d7:3d:46:3a:
                    ed:d4:dc:74:15:60:81:7d:3e:93:10:7a:0d:9a:bd:
                    a3:19:71:f2:96:18:81:12:67:3f:e9:27:06:bf:56:
                    7c:e3:a1:89:9f:3e:ed:9f:b8:99:0f:51:a4:30:95:
                    65:a6:24:a7:63:90:f9:32:45:f0:83:79:c8:49:e4:
                    76:37:2e:1d:c5:8f:3f:a6:ce:0f:e0:1d:e8:0a:6d:
                    1a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C5:35:AE:FA:9E:50:8F:51:D1:AB:90:AA:15:45:B9:18:7C:83:E7
            X509v3 Authority Key Identifier:
                keyid:3E:36:35:53:4C:52:68:C5:F8:F3:1D:91:04:54:01:8D:21:BB:A9:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3635534C5268C5F8F31D910454018D21BBA954.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/323830343a323730303a3a2f33322d3335203d3e20323633383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2700::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:ae:93:e2:62:13:bc:77:d5:d1:3d:f4:d6:56:6d:05:bc:59:
         b0:b0:47:13:1f:59:67:92:cc:b3:ce:6d:32:67:3e:bf:61:4f:
         39:f7:b4:32:a4:34:ef:e8:2a:c2:6e:05:4f:14:6a:f9:6b:9b:
         2b:a9:8d:2b:76:5b:98:c8:d4:e6:0d:cf:a5:4b:6d:d5:2d:0b:
         45:e5:38:0c:94:e5:0b:af:de:93:c5:35:81:65:ca:66:45:f7:
         8a:58:0f:29:e2:66:8f:ab:bb:1e:9b:8a:51:3c:78:be:63:fd:
         4e:de:91:5c:82:05:81:2f:45:ac:6a:cc:bb:6b:01:31:69:2e:
         cf:1c:59:94:d7:0b:e4:28:da:2b:85:9c:44:09:04:ab:44:ad:
         10:f9:8b:0e:66:5e:81:ee:37:be:46:7a:fb:7c:b0:aa:e1:97:
         d8:73:da:2a:d2:9b:ba:8d:a7:11:cd:26:e3:be:c0:04:cb:ca:
         ac:ae:76:3a:d2:9b:4c:3d:86:9c:17:ee:6d:22:a8:a4:d1:64:
         f0:6f:c3:f0:a1:f8:5d:9f:dc:67:2b:1c:46:d9:23:26:a0:7a:
         ac:ef:74:9d:c0:5a:65:49:97:dd:e3:dd:29:94:51:3b:ec:79:
         d7:bb:e4:34:f0:ab:69:a0:b6:e4:7f:cb:fa:59:e5:58:55:61:
         0a:a8:31:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:46 2024 by rpki-client on console-fra.rpki-client.org