Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/323830343a373361383a3a2f33322d3438203d3e20323730393239.roa
File:                     323830343a373361383a3a2f33322d3438203d3e20323730393239.roa (raw, json)
Hash identifier:          5p0OQETcN0tveqfY9CiPylkBv2TbH+88Q2icLRUT/Po=
Subject key identifier:   EC:03:C1:EF:56:EA:C5:57:38:24:08:14:A1:1D:F9:35:C7:7F:1B:D8
Certificate issuer:       /CN=D207CF8D6BDFDFC2B678E998F47F0745A6013ABD
Certificate serial:       5AABCE00BA16F7D31E38C95B6C0EF66ECB76EC25
Authority key identifier: D2:07:CF:8D:6B:DF:DF:C2:B6:78:E9:98:F4:7F:07:45:A6:01:3A:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D207CF8D6BDFDFC2B678E998F47F0745A6013ABD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/323830343a373361383a3a2f33322d3438203d3e20323730393239.roa
Signing time:             Wed 25 Sep 2024 21:19:26 +0000
ROA not before:           Wed 25 Sep 2024 21:14:26 +0000
ROA not after:            Wed 24 Sep 2025 21:19:26 +0000
asID:                     270929
IP address blocks:        2804:73a8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/D207CF8D6BDFDFC2B678E998F47F0745A6013ABD.crl
                          rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/D207CF8D6BDFDFC2B678E998F47F0745A6013ABD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D207CF8D6BDFDFC2B678E998F47F0745A6013ABD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 15:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ab:ce:00:ba:16:f7:d3:1e:38:c9:5b:6c:0e:f6:6e:cb:76:ec:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D207CF8D6BDFDFC2B678E998F47F0745A6013ABD
        Validity
            Not Before: Sep 25 21:14:26 2024 GMT
            Not After : Sep 24 21:19:26 2025 GMT
        Subject: CN=EC03C1EF56EAC55738240814A11DF935C77F1BD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:49:79:95:3a:e3:1f:f5:03:98:ae:c2:e7:c6:
                    d5:41:13:a0:d7:bb:73:c5:67:e1:d6:49:59:64:c9:
                    f8:9f:1d:0d:a0:9b:f3:bd:1d:11:30:a4:93:3e:54:
                    1a:3d:92:48:74:85:b5:7d:de:7c:5b:0f:e0:df:55:
                    cb:a4:7b:9e:42:0e:60:49:df:db:0e:63:51:2b:8b:
                    65:b9:68:75:a7:17:1e:3b:28:40:06:92:7f:bf:87:
                    ef:15:f0:d9:8d:50:5a:c4:24:9f:b0:67:48:dd:1c:
                    e5:67:bc:24:02:96:ff:04:54:2a:b8:90:1a:11:69:
                    db:5f:0b:27:5d:d4:ca:64:7d:45:ea:45:21:56:75:
                    fc:8f:98:7d:df:4e:f8:7d:dc:40:11:ca:99:4a:88:
                    f8:a7:28:13:b3:bd:87:37:f8:6b:0d:8a:b5:df:b9:
                    22:1d:11:1c:8e:d9:46:10:2a:92:f2:41:8b:7e:cc:
                    7e:88:3d:b3:05:1a:6d:ef:e3:68:74:90:33:f5:19:
                    31:77:41:95:fe:52:00:4a:53:39:1e:ef:15:39:ed:
                    10:60:b1:c3:be:35:7f:db:50:50:7b:48:47:75:69:
                    1d:29:8e:0e:48:7d:54:af:95:6f:df:ec:c9:68:f1:
                    e6:81:3a:99:d5:4c:03:31:91:12:ba:1b:a6:f9:f5:
                    5e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:03:C1:EF:56:EA:C5:57:38:24:08:14:A1:1D:F9:35:C7:7F:1B:D8
            X509v3 Authority Key Identifier:
                keyid:D2:07:CF:8D:6B:DF:DF:C2:B6:78:E9:98:F4:7F:07:45:A6:01:3A:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/D207CF8D6BDFDFC2B678E998F47F0745A6013ABD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D207CF8D6BDFDFC2B678E998F47F0745A6013ABD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/323830343a373361383a3a2f33322d3438203d3e20323730393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:fc:f8:4c:87:61:12:59:3b:9e:77:fb:4d:6e:65:d4:af:28:
         86:62:aa:77:d6:66:d8:b9:69:aa:3f:d0:bf:c1:41:51:95:c2:
         66:72:e6:57:fd:cd:0b:b7:9f:d2:04:bf:71:06:e5:73:bd:2c:
         be:5d:d5:b4:7c:2f:b0:03:8f:95:ac:ac:4e:30:9f:0b:1d:ee:
         30:ba:c4:74:2a:5b:1a:d2:a3:cc:7e:43:4c:a3:b7:47:a5:48:
         3e:d1:9c:9a:41:82:9f:04:3e:22:22:a8:d7:1d:96:e1:c7:04:
         2f:9f:5f:ac:1d:45:a2:c0:ec:41:f3:56:fc:39:09:41:e9:33:
         d5:cf:6e:ec:85:07:84:1e:c7:25:9a:be:3c:2b:50:b5:18:96:
         fa:82:30:94:70:27:3d:a9:b3:ae:9a:0a:7d:83:1a:72:fc:88:
         e8:ff:a1:7e:bc:e6:f7:1e:c3:8d:d1:a2:63:6a:5b:8d:f6:6b:
         17:60:bf:6f:18:ae:4d:ce:d7:0e:b3:bf:4a:1c:19:f7:03:c5:
         7e:c1:4f:07:fd:97:30:00:78:f6:c1:d7:5a:22:f7:95:3f:ce:
         1f:e2:0a:59:e8:79:ed:de:11:68:6a:19:45:fb:42:6b:bd:c9:
         f0:b5:26:70:91:1c:c5:af:ba:2e:27:3b:ba:c8:f6:26:4d:18:
         20:13:8b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:21 2024 by rpki-client on console-fra.rpki-client.org