Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/323830343a373031383a3a2f33322d3438203d3e20323730373035.roa
File:                     323830343a373031383a3a2f33322d3438203d3e20323730373035.roa (raw, json)
Hash identifier:          OEUtMVIh0r2j9MayW9jXmqGktMa9OeGjpRbNzR9dikA=
Subject key identifier:   AF:68:B5:9D:AC:4F:6C:63:52:BF:77:27:3E:32:38:32:BE:4B:85:4F
Certificate issuer:       /CN=0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF
Certificate serial:       340E22E3ED3216D9769C0256FC6D45A0764345B8
Authority key identifier: 03:90:EE:C2:B0:EA:80:04:D4:BC:F7:E7:34:A7:D5:97:D3:0C:52:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/323830343a373031383a3a2f33322d3438203d3e20323730373035.roa
Signing time:             Thu 04 Apr 2024 03:52:31 +0000
ROA not before:           Thu 04 Apr 2024 03:47:31 +0000
ROA not after:            Thu 03 Apr 2025 03:52:31 +0000
asID:                     270705
IP address blocks:        2804:7018::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.crl
                          rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0e:22:e3:ed:32:16:d9:76:9c:02:56:fc:6d:45:a0:76:43:45:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF
        Validity
            Not Before: Apr  4 03:47:31 2024 GMT
            Not After : Apr  3 03:52:31 2025 GMT
        Subject: CN=AF68B59DAC4F6C6352BF77273E323832BE4B854F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7c:99:a5:9c:a3:f0:b2:c0:6e:7c:97:6d:98:
                    9a:fa:59:a3:51:45:de:3c:27:92:2c:90:be:cd:5f:
                    10:8c:33:20:4b:a1:1e:f2:27:be:58:b5:06:c2:28:
                    9b:a9:8a:74:69:18:02:cc:d3:ad:be:22:e4:73:79:
                    62:26:67:dc:1e:76:30:60:f8:f7:9c:23:c2:8d:0e:
                    7d:a4:0e:f8:e7:42:9e:c1:28:7f:55:d7:9e:ad:d6:
                    09:3e:29:de:69:f5:5c:b9:85:59:18:cc:1e:bb:18:
                    d3:12:59:ee:07:98:c8:03:33:c3:f4:8a:d4:73:c7:
                    01:b7:2d:42:a5:92:e4:62:31:f2:86:60:65:0c:a4:
                    0c:aa:0c:22:e9:66:63:e7:a9:02:9e:19:fd:20:e4:
                    f7:38:25:7a:70:9d:2e:07:b6:77:67:e5:e1:8d:11:
                    40:90:43:c3:01:fb:9b:bc:83:bd:89:29:e1:ec:d2:
                    b9:81:f3:e0:6c:7b:8a:29:16:cc:8e:22:04:c7:74:
                    be:44:f8:c6:49:9c:7e:6a:4e:67:ec:66:fc:58:f2:
                    04:9a:8d:74:19:e2:66:2c:30:06:31:7f:4b:39:7d:
                    09:45:1e:94:16:ee:03:b0:9f:42:f6:8d:29:f3:fb:
                    4b:73:58:ce:07:6e:35:f4:5f:a0:47:c0:72:b2:21:
                    76:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:68:B5:9D:AC:4F:6C:63:52:BF:77:27:3E:32:38:32:BE:4B:85:4F
            X509v3 Authority Key Identifier:
                keyid:03:90:EE:C2:B0:EA:80:04:D4:BC:F7:E7:34:A7:D5:97:D3:0C:52:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/323830343a373031383a3a2f33322d3438203d3e20323730373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7018::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:46:76:0c:cd:e0:52:1c:01:09:f4:18:14:cb:a1:92:25:15:
         fa:ab:7e:05:70:e7:66:57:eb:bb:05:03:f0:8f:82:27:64:36:
         bd:d1:08:ab:cd:dc:33:b0:6e:c7:fd:a0:fc:b8:60:b8:cd:aa:
         3f:bb:fd:e6:cd:b2:88:51:ce:0f:45:9b:7e:24:3b:36:ad:38:
         e9:35:83:94:b6:cd:d1:2f:1e:a2:e3:62:61:89:a3:7b:40:92:
         9f:38:74:39:06:37:f2:68:9c:ba:b2:db:3d:c9:b1:9a:66:ec:
         1f:6e:15:5f:21:9b:03:2a:f8:d7:46:46:c5:72:39:36:82:e4:
         d2:88:53:04:66:93:00:cf:5c:66:4a:0c:7d:8b:e1:31:39:db:
         49:e1:13:80:38:68:79:12:ef:96:2a:90:80:2f:83:d1:c0:9a:
         e9:46:06:a2:34:80:f7:3a:dd:92:71:f8:8b:0e:1a:c8:5a:ed:
         92:ed:e4:76:49:b5:3d:02:a9:eb:45:db:f7:04:06:14:0d:0e:
         5b:c0:c8:05:16:5a:d8:73:d8:40:41:a3:18:b7:e6:98:70:08:
         f9:2b:2d:10:b7:84:95:62:e2:65:62:0c:de:2a:0b:82:78:fa:
         97:5b:5f:fe:21:2c:76:b8:b5:fe:ca:c1:fa:85:82:8c:e9:60:
         73:a7:53:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:26 2024 by rpki-client on console-fra.rpki-client.org