Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/323830343a363830303a383030303a3a2f33342d3334203d3e20323639363634.roa
File:                     323830343a363830303a383030303a3a2f33342d3334203d3e20323639363634.roa (raw, json)
Hash identifier:          yBV/Icz/5VLdlCpfqJKwhe6lTP0sEEThbu8bw2BvAKA=
Subject key identifier:   22:1D:50:D8:51:11:A7:CB:6C:55:84:1B:38:13:8B:CE:F5:FB:AA:F5
Certificate issuer:       /CN=413E3D4F0110DFBA923D6F53579BE8E81ABDCC05
Certificate serial:       7410866F7EA37FBB0BEBEEEDE0F78BC0DBAFB14D
Authority key identifier: 41:3E:3D:4F:01:10:DF:BA:92:3D:6F:53:57:9B:E8:E8:1A:BD:CC:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/323830343a363830303a383030303a3a2f33342d3334203d3e20323639363634.roa
Signing time:             Wed 03 Apr 2024 21:52:38 +0000
ROA not before:           Wed 03 Apr 2024 21:47:38 +0000
ROA not after:            Wed 02 Apr 2025 21:52:38 +0000
asID:                     269664
IP address blocks:        2804:6800:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.crl
                          rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:10:86:6f:7e:a3:7f:bb:0b:eb:ee:ed:e0:f7:8b:c0:db:af:b1:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413E3D4F0110DFBA923D6F53579BE8E81ABDCC05
        Validity
            Not Before: Apr  3 21:47:38 2024 GMT
            Not After : Apr  2 21:52:38 2025 GMT
        Subject: CN=221D50D85111A7CB6C55841B38138BCEF5FBAAF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:92:7f:90:0a:08:dc:70:d0:e8:01:42:c4:71:
                    d0:f8:e4:4f:d3:64:ea:6f:42:a1:12:77:75:6e:f1:
                    48:12:d3:38:99:c7:59:6e:05:fb:de:01:09:76:22:
                    67:62:7b:d6:e9:dc:df:a4:d3:e8:6b:e2:e0:25:7e:
                    4e:e0:59:c5:10:32:83:29:ac:b5:81:d5:79:48:18:
                    af:86:43:d9:e5:32:05:13:2f:ce:38:6e:46:b3:d1:
                    43:57:e6:2a:fb:13:12:7a:24:a1:8c:78:1a:ea:3e:
                    dd:17:74:8d:2b:93:7a:97:c9:33:c7:a8:02:77:36:
                    06:8c:d4:c2:c2:19:a4:2b:c5:08:7f:1c:84:4b:07:
                    56:b9:b8:56:b2:ba:6b:0b:cd:b8:b6:2f:ef:89:4a:
                    9c:1c:c7:f7:62:f6:c1:fb:a7:24:3f:3a:9a:6b:7e:
                    85:0f:b7:0b:15:22:9c:58:cf:49:25:ec:44:bb:b7:
                    c5:dd:1d:41:80:c7:52:6e:c0:25:14:96:4c:9b:bf:
                    2a:ea:a2:dd:7a:1f:3d:4f:4a:52:f3:0a:8c:cc:f7:
                    ab:ea:f2:eb:07:d7:4c:cd:62:38:a2:b7:66:34:8c:
                    e2:c1:47:78:21:7c:f6:ef:73:c9:5d:98:34:7d:27:
                    4d:db:5d:4b:c7:d4:7b:57:aa:38:88:de:47:17:ea:
                    7b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1D:50:D8:51:11:A7:CB:6C:55:84:1B:38:13:8B:CE:F5:FB:AA:F5
            X509v3 Authority Key Identifier:
                keyid:41:3E:3D:4F:01:10:DF:BA:92:3D:6F:53:57:9B:E8:E8:1A:BD:CC:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/323830343a363830303a383030303a3a2f33342d3334203d3e20323639363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6800:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         84:7f:1e:b5:8d:90:f5:63:38:6f:5d:30:d1:e5:58:bf:59:c4:
         ae:d5:98:1e:9d:4c:75:a5:39:c7:65:57:7e:ca:0d:66:77:86:
         15:ad:18:a1:e8:d8:f7:a2:dd:9e:a6:1c:13:b1:5d:dc:75:e4:
         a1:df:2b:9a:d5:13:d0:32:84:dc:66:c0:7a:0b:a6:c1:61:85:
         23:63:69:38:ba:d2:e9:bb:4f:d7:95:85:9f:12:00:e3:bb:28:
         df:61:67:df:a5:88:38:f5:10:eb:cc:53:e3:36:a3:be:cf:a6:
         17:22:3b:55:8e:e0:8b:ad:64:ee:30:30:ab:ef:e1:6c:6b:cc:
         44:b5:df:1e:a8:ce:13:72:95:de:d4:d7:b7:c6:be:ad:38:ec:
         8e:b9:9a:ba:e1:6a:16:4f:db:65:c9:8c:e4:86:b3:b5:63:27:
         82:b3:80:5d:c8:14:d3:60:a3:6d:bc:fc:65:83:25:84:b4:9e:
         18:74:d4:77:62:83:01:71:ff:fa:ef:ac:e8:a5:16:ad:b0:f2:
         91:49:15:bf:62:c5:45:3a:a0:c5:b7:2e:71:eb:0a:70:86:c0:
         f4:03:bb:f0:ce:fb:ff:0b:c1:3f:ef:0a:60:c4:77:78:f8:08:
         28:7b:bb:e4:32:be:57:93:e1:ce:a2:3b:38:69:9a:af:f5:10:
         0f:76:6a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:04 2024 by rpki-client on console-ams.rpki-client.org