Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/323830343a363064383a383030303a3a2f33342d3334203d3e20323639313935.roa
File:                     323830343a363064383a383030303a3a2f33342d3334203d3e20323639313935.roa (raw, json)
Hash identifier:          3LWxLXh5h3kmqnyIj7acmYB8nM9vqXM1ZbysnPSFW/A=
Subject key identifier:   27:06:A4:1F:E0:1C:BE:7A:A7:20:5C:03:B8:CD:03:A1:11:81:BE:8A
Certificate issuer:       /CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
Certificate serial:       55DFC98FE971BE2C005CCF811B5AD7C4EA9CCE92
Authority key identifier: 55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/323830343a363064383a383030303a3a2f33342d3334203d3e20323639313935.roa
Signing time:             Wed 03 Apr 2024 18:32:13 +0000
ROA not before:           Wed 03 Apr 2024 18:27:13 +0000
ROA not after:            Wed 02 Apr 2025 18:32:13 +0000
asID:                     269195
IP address blocks:        2804:60d8:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl
                          rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:df:c9:8f:e9:71:be:2c:00:5c:cf:81:1b:5a:d7:c4:ea:9c:ce:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
        Validity
            Not Before: Apr  3 18:27:13 2024 GMT
            Not After : Apr  2 18:32:13 2025 GMT
        Subject: CN=2706A41FE01CBE7AA7205C03B8CD03A11181BE8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:a3:91:cc:ed:16:02:85:a1:d8:1f:37:fb:
                    2d:2b:96:1a:b0:24:b8:dd:16:53:49:93:12:b1:39:
                    f3:cc:3f:6d:42:18:bd:44:e8:76:5f:7c:68:84:44:
                    b5:52:c1:9c:ea:6e:46:ac:25:47:1e:b0:b0:5b:da:
                    3c:74:d9:5f:e1:7c:50:b5:88:bd:89:7c:28:0b:ca:
                    a6:bb:d3:46:e5:38:fa:3a:14:ad:66:79:b5:f4:e5:
                    2c:ea:71:b0:15:13:ef:65:17:c1:74:da:d7:27:e5:
                    76:bf:4c:e4:00:d7:5b:45:af:37:e9:56:af:cf:db:
                    11:1c:e3:64:26:00:85:18:68:5f:4f:6f:af:19:06:
                    78:c6:ac:71:a5:80:e5:27:f2:7c:86:cc:78:09:ab:
                    9a:6f:15:3f:91:4f:59:e6:39:01:e7:cd:3f:50:db:
                    39:97:a5:8b:c6:a7:46:89:b7:04:e5:a2:d4:1c:c4:
                    64:0b:7f:e0:50:53:5a:88:fa:dd:49:6a:2b:af:95:
                    20:d5:7c:38:a6:01:f3:76:87:86:f0:ee:5d:9d:af:
                    7e:07:79:a9:31:58:78:49:5f:3e:ad:87:b5:23:0d:
                    f4:b6:b2:0a:6b:f5:a7:c5:ea:18:b2:42:4b:11:2e:
                    56:15:7e:3b:b9:2c:d1:ad:f7:f8:73:c4:13:72:92:
                    04:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:06:A4:1F:E0:1C:BE:7A:A7:20:5C:03:B8:CD:03:A1:11:81:BE:8A
            X509v3 Authority Key Identifier:
                keyid:55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/323830343a363064383a383030303a3a2f33342d3334203d3e20323639313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         03:82:fb:ca:5d:84:cb:9c:f4:4a:7f:f1:ed:27:76:15:b8:70:
         ba:4e:61:17:e6:ff:81:0f:43:55:72:f7:5c:e0:38:46:2b:8f:
         b3:53:07:ef:3e:8c:c8:3c:3c:96:46:0e:ef:b3:41:ac:de:47:
         b3:1d:9b:dd:b8:b6:ee:8f:03:b9:35:b7:f0:cb:cb:1e:ff:c2:
         e8:b4:7b:65:ba:07:fc:b5:5e:3c:c6:7d:d8:10:d4:34:84:43:
         4c:93:d6:fe:3b:94:f6:d5:11:e4:c4:6f:cc:93:d4:cc:8b:29:
         a3:ed:b3:49:31:e7:3e:65:34:c5:db:18:b2:c6:e5:15:2c:85:
         bd:c3:84:44:54:79:be:b0:04:d0:c1:83:eb:92:e0:cf:8c:35:
         69:ef:b1:f7:fd:fa:4c:98:39:28:17:a0:e7:c0:e3:a1:1e:72:
         47:41:ec:ae:fe:c5:27:0c:d1:e0:be:a5:71:89:2b:d6:c3:40:
         62:bb:e0:d8:0d:6c:04:0f:a7:4a:e0:5f:6f:c2:97:22:db:36:
         d3:27:84:0f:ba:5a:c3:16:bd:29:71:46:59:97:92:e9:f3:66:
         f7:78:fd:5e:69:22:ea:22:a3:c3:e9:5a:f2:63:cf:c9:90:65:
         87:86:52:c5:f6:1f:19:c6:6c:8b:bd:3e:9b:13:0c:0b:db:7c:
         73:d0:bd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:47 2024 by rpki-client on console-fra.rpki-client.org