Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/323830343a363964303a3a2f33322d3438203d3e20323730323933.roa
File:                     323830343a363964303a3a2f33322d3438203d3e20323730323933.roa (raw, json)
Hash identifier:          WD6IAfCe+O0ixWdFg+RK/ltDvobNTm8nGTInNMyvGwc=
Subject key identifier:   35:49:66:2A:F9:90:ED:66:E7:E1:37:E6:CB:81:C4:97:E4:AE:30:A6
Certificate issuer:       /CN=BAE765972DA3D51F7AB70A1D27716AF50D94C94B
Certificate serial:       76FDC749C84F67D1AB15DCE8ADF90C93DCC7150E
Authority key identifier: BA:E7:65:97:2D:A3:D5:1F:7A:B7:0A:1D:27:71:6A:F5:0D:94:C9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/323830343a363964303a3a2f33322d3438203d3e20323730323933.roa
Signing time:             Thu 04 Apr 2024 17:52:09 +0000
ROA not before:           Thu 04 Apr 2024 17:47:09 +0000
ROA not after:            Thu 03 Apr 2025 17:52:09 +0000
asID:                     270293
IP address blocks:        2804:69d0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.crl
                          rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:fd:c7:49:c8:4f:67:d1:ab:15:dc:e8:ad:f9:0c:93:dc:c7:15:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE765972DA3D51F7AB70A1D27716AF50D94C94B
        Validity
            Not Before: Apr  4 17:47:09 2024 GMT
            Not After : Apr  3 17:52:09 2025 GMT
        Subject: CN=3549662AF990ED66E7E137E6CB81C497E4AE30A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:68:6d:5d:ba:ad:24:61:d2:13:4c:97:ed:fa:
                    0d:78:6a:87:8f:86:56:22:d9:0d:2d:55:74:fb:1d:
                    c3:44:a9:dc:18:1c:03:1b:ad:83:9f:cf:16:3c:2f:
                    e8:0f:81:f5:9b:62:13:80:a0:d5:76:84:91:c8:e8:
                    73:54:a2:6c:7a:26:7e:32:3d:2a:fa:52:6b:51:65:
                    f0:53:0a:19:92:64:69:22:1a:ad:e6:bf:6d:40:cb:
                    8e:9d:8f:60:05:fd:e8:b0:5a:18:27:b8:8d:ca:ec:
                    c6:ca:f7:08:81:65:26:2e:62:a3:80:f6:9d:61:3e:
                    cb:cf:b1:36:31:0a:22:cc:33:94:17:c0:fe:4c:2c:
                    63:00:60:a7:72:91:9a:cc:45:eb:5d:87:24:34:8e:
                    9e:1c:33:eb:0d:ef:72:73:48:85:f6:2a:37:9b:34:
                    8d:a9:70:06:86:dd:61:ee:5f:f4:a1:4a:7b:69:32:
                    dd:a6:6e:ff:5d:0a:f9:73:eb:c9:5e:5c:83:1b:e5:
                    2a:02:63:f2:8a:dd:84:b7:27:13:4e:cb:10:61:da:
                    00:49:90:0c:66:09:0f:05:41:1d:10:0f:22:f8:53:
                    e0:36:39:cc:ac:49:78:45:97:ad:c5:6f:32:f6:ca:
                    e2:2f:d7:c6:d6:54:73:cb:95:21:44:91:8f:ab:40:
                    9f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:49:66:2A:F9:90:ED:66:E7:E1:37:E6:CB:81:C4:97:E4:AE:30:A6
            X509v3 Authority Key Identifier:
                keyid:BA:E7:65:97:2D:A3:D5:1F:7A:B7:0A:1D:27:71:6A:F5:0D:94:C9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/323830343a363964303a3a2f33322d3438203d3e20323730323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:69d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:c3:91:8c:4e:0f:a1:88:79:e0:86:82:c8:48:43:99:cb:04:
         1a:c3:9b:6f:cb:43:7c:1d:fc:63:8e:ef:58:81:25:c7:bb:8a:
         7c:9f:16:ae:36:5a:78:29:01:ce:e4:53:65:35:18:93:ae:1a:
         07:10:f6:00:86:a9:57:91:0a:98:4c:51:30:6a:5d:1b:32:e8:
         54:69:9c:c5:03:a4:32:c5:7c:36:58:a2:d2:f6:8a:7d:69:a3:
         01:96:18:36:18:8f:d6:52:f6:e6:fc:59:7e:4f:55:e1:4c:5e:
         d0:1a:6a:ed:a1:79:6e:5a:dd:b6:bb:de:d7:87:49:4b:c0:4f:
         ed:a3:48:b9:eb:72:fa:19:0f:61:0f:1c:53:55:43:31:fe:da:
         53:27:2f:e5:ce:ae:cb:24:3d:a1:20:f0:59:70:cf:c3:85:f5:
         bb:5c:59:18:1f:d7:c1:f5:ac:4f:c6:64:f2:83:d5:8d:4e:68:
         72:6e:7f:cd:e4:6d:1a:a4:bc:cf:b7:c1:f4:cf:57:71:0b:d7:
         d3:3a:6d:30:2f:e5:f7:a8:46:57:32:5d:a9:8d:ef:f2:3a:5e:
         1b:0e:04:0b:57:cc:b2:21:a8:82:27:37:04:64:81:a4:34:b1:
         23:92:a0:ea:7e:a9:4c:00:f7:b6:ab:85:37:51:4a:0c:37:9e:
         70:23:18:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:50 2024 by rpki-client on console-fra.rpki-client.org