Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a3a2f33322d3438203d3e20323637303234.roa
File:                     323830343a343666633a3a2f33322d3438203d3e20323637303234.roa (raw, json)
Hash identifier:          l4Ym5Kvl/3132lqBeTG5YIv0HYAGozTtf91Fu514v7Q=
Subject key identifier:   34:CE:50:CC:62:A1:88:FA:5A:3A:D2:AE:B8:59:0B:E2:BA:91:52:2D
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       7D0F2263FF4AF56C0649FC0FAB2EAA46B2DBE190
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a3a2f33322d3438203d3e20323637303234.roa
Signing time:             Thu 04 Apr 2024 07:18:07 +0000
ROA not before:           Thu 04 Apr 2024 07:13:07 +0000
ROA not after:            Thu 03 Apr 2025 07:18:07 +0000
asID:                     267024
IP address blocks:        2804:46fc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
                          rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0f:22:63:ff:4a:f5:6c:06:49:fc:0f:ab:2e:aa:46:b2:db:e1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: Apr  4 07:13:07 2024 GMT
            Not After : Apr  3 07:18:07 2025 GMT
        Subject: CN=34CE50CC62A188FA5A3AD2AEB8590BE2BA91522D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:42:46:dc:92:f8:11:34:60:0c:bb:38:a4:
                    b3:01:96:74:67:30:1e:2e:5f:c7:01:52:64:8d:61:
                    2c:ac:96:04:25:84:6e:1c:85:87:ac:02:51:25:91:
                    22:d5:40:e3:d6:0f:df:e4:4e:83:d2:fd:80:51:d1:
                    30:97:ff:a9:34:41:3d:46:90:97:2a:b6:cb:20:11:
                    b8:db:5a:83:14:a3:3a:6c:73:3e:73:3c:32:8c:b0:
                    6c:1d:45:08:ec:e2:55:2d:ea:17:a6:ee:78:f2:ce:
                    e6:bc:41:87:a9:0f:ab:84:14:46:f5:8f:c2:95:5e:
                    65:13:1c:32:29:51:f0:81:6f:56:13:d4:a0:df:97:
                    12:c1:39:47:a6:71:23:09:83:fd:66:22:2e:e6:6d:
                    28:36:7a:84:85:89:10:ff:d1:c1:86:a2:f3:a1:7a:
                    88:e0:3d:0f:72:1a:46:f5:0b:5f:1f:33:e2:a8:ce:
                    ae:2b:3b:df:cd:35:9c:47:22:aa:b8:79:e0:19:ce:
                    f6:f4:02:89:5c:d4:5e:21:33:dd:97:37:1e:e8:ad:
                    15:c5:89:5a:10:c3:bc:45:e0:4d:7d:e4:6e:a0:f3:
                    a5:a8:34:d4:10:bb:5f:30:68:8a:66:56:d4:86:68:
                    31:03:c1:e0:76:59:4e:1a:1a:6c:d2:e4:e6:c9:3b:
                    eb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CE:50:CC:62:A1:88:FA:5A:3A:D2:AE:B8:59:0B:E2:BA:91:52:2D
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a3a2f33322d3438203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:d2:ed:cc:38:05:a7:97:8c:c5:09:d8:37:12:56:d0:b5:a4:
         a5:a3:e6:52:33:b1:75:13:62:cc:b1:8f:df:12:68:39:2b:79:
         89:19:51:70:8a:91:67:44:5a:fe:91:d5:1d:a9:da:6d:1d:0e:
         bb:67:71:13:f6:c5:18:50:66:05:ac:d1:76:f1:b2:48:ad:3d:
         bd:9f:23:bf:15:db:e4:32:0c:a7:b2:11:00:4c:ab:64:eb:70:
         d2:bf:a1:6a:e6:70:16:89:bc:f4:71:fb:a8:cd:b4:dc:76:79:
         89:bd:a4:74:3b:7e:08:a4:ab:cc:a4:4f:66:21:1d:10:9f:52:
         02:4e:c8:65:8b:1c:7b:d5:c8:3a:f3:42:50:a7:9a:c4:c3:0b:
         92:fc:c2:45:76:67:b0:8c:a8:f7:79:46:d8:9a:ed:ac:d1:0f:
         ac:96:78:05:8c:49:e3:ec:0e:d0:36:c3:fb:52:91:0c:ff:ea:
         90:85:aa:37:2f:5d:0a:64:23:a2:b5:f0:d5:db:4e:cc:3b:53:
         5f:3b:cf:5b:bf:a9:55:ba:52:b9:8c:09:5b:07:75:af:1d:c6:
         cd:dd:ef:83:21:19:0f:62:fb:12:13:87:db:3f:5e:33:cc:23:
         1b:aa:67:d4:ec:41:ff:b7:6e:58:bd:b8:93:b5:75:7c:2c:f0:
         d2:5c:2d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 07:56:06 2024 by rpki-client on console-fra.rpki-client.org