Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/323830343a343237303a3a2f33322d313238203d3e20323637353030.roa
File:                     323830343a343237303a3a2f33322d313238203d3e20323637353030.roa (raw, json)
Hash identifier:          9w/ESxpacoSG2tkwlEFd2naeHmu54miVLMH9UhDaCIE=
Subject key identifier:   30:46:88:4E:35:9B:DF:19:90:6E:2D:B6:A6:5D:C2:F0:FD:AF:35:C5
Certificate issuer:       /CN=98478D9BCA6E6F14D35B8D2C3E0208CB6F2426ED
Certificate serial:       4403B1A68E8733FF7ADE02A996480A4E016A4E74
Authority key identifier: 98:47:8D:9B:CA:6E:6F:14:D3:5B:8D:2C:3E:02:08:CB:6F:24:26:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98478D9BCA6E6F14D35B8D2C3E0208CB6F2426ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/323830343a343237303a3a2f33322d313238203d3e20323637353030.roa
Signing time:             Wed 05 Jun 2024 13:48:40 +0000
ROA not before:           Wed 05 Jun 2024 13:43:40 +0000
ROA not after:            Wed 04 Jun 2025 13:48:40 +0000
asID:                     267500
IP address blocks:        2804:4270::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/98478D9BCA6E6F14D35B8D2C3E0208CB6F2426ED.crl
                          rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/98478D9BCA6E6F14D35B8D2C3E0208CB6F2426ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98478D9BCA6E6F14D35B8D2C3E0208CB6F2426ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:03:b1:a6:8e:87:33:ff:7a:de:02:a9:96:48:0a:4e:01:6a:4e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98478D9BCA6E6F14D35B8D2C3E0208CB6F2426ED
        Validity
            Not Before: Jun  5 13:43:40 2024 GMT
            Not After : Jun  4 13:48:40 2025 GMT
        Subject: CN=3046884E359BDF19906E2DB6A65DC2F0FDAF35C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1a:18:41:6d:c5:73:d8:5e:74:ec:15:7f:f7:
                    8e:cd:1a:3f:77:77:67:e6:39:9b:ed:1e:53:8f:d7:
                    22:65:db:e0:c7:9a:89:2b:91:31:f6:cc:2b:7b:84:
                    60:6a:e1:fc:81:19:a1:24:f7:63:28:da:74:41:65:
                    1b:9b:14:8c:d2:92:f5:f2:ea:b9:71:70:42:20:7c:
                    0d:a6:89:9b:fe:31:57:d0:6e:d9:0e:99:ae:b0:51:
                    59:c7:3d:50:57:c2:11:46:79:b8:db:1c:31:74:f2:
                    9a:36:de:31:95:b6:fe:9b:08:a6:fc:7b:e6:79:9a:
                    3d:07:bd:13:d9:9a:36:f2:a1:92:2c:dc:6e:b9:7c:
                    f6:55:88:96:ae:08:4b:3d:4d:fe:08:8c:e3:03:a5:
                    92:d3:5c:9b:5a:34:9e:0e:7c:3a:38:2a:fd:98:da:
                    4f:22:63:3c:5d:68:50:c9:a4:ba:58:40:45:d7:54:
                    1f:a7:ef:93:25:28:a1:40:9d:1a:37:f4:5e:b0:47:
                    f9:58:60:7b:8a:ad:f1:9c:66:12:1b:f7:e5:08:0b:
                    cd:4b:db:25:f3:8d:a8:6c:bb:6d:49:1a:ca:5b:de:
                    7a:64:57:c6:9c:69:4b:db:61:ae:40:03:81:61:3d:
                    c6:f4:39:86:82:11:8d:f2:de:2f:50:9a:76:95:c8:
                    06:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:46:88:4E:35:9B:DF:19:90:6E:2D:B6:A6:5D:C2:F0:FD:AF:35:C5
            X509v3 Authority Key Identifier:
                keyid:98:47:8D:9B:CA:6E:6F:14:D3:5B:8D:2C:3E:02:08:CB:6F:24:26:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/98478D9BCA6E6F14D35B8D2C3E0208CB6F2426ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98478D9BCA6E6F14D35B8D2C3E0208CB6F2426ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/323830343a343237303a3a2f33322d313238203d3e20323637353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4270::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:54:41:86:f4:82:56:c8:2a:4e:a7:2f:ff:f7:a6:a6:2d:2b:
         08:f5:b1:95:53:c6:c4:b1:ff:8d:56:f2:c2:c5:a3:48:0e:a3:
         73:85:ef:b1:d6:01:12:b9:f7:6b:e4:14:5c:bd:3e:17:5c:5b:
         85:d3:cb:e8:88:a0:91:a2:f0:9a:af:14:ac:1c:1c:17:69:c3:
         43:9d:2d:fd:57:51:5d:d4:a8:ea:a7:33:09:3f:2d:36:97:a1:
         82:eb:68:54:c6:b5:02:eb:c2:21:ab:78:c2:71:3d:14:bd:a6:
         2f:4c:cd:32:61:c3:91:aa:4d:e5:32:45:d8:5a:2d:c5:70:db:
         0d:11:72:f1:c9:76:9d:4c:b4:b1:26:5e:42:a6:04:ef:f3:60:
         16:69:f0:dc:59:83:92:b9:f5:58:4d:23:6c:d7:ae:27:b3:34:
         6a:7b:31:8e:43:9f:12:8d:9b:6b:12:6e:dc:17:b3:93:42:bf:
         de:9b:9a:3e:1d:f7:74:ed:2e:2c:46:b3:6a:ad:1f:1a:db:66:
         1f:18:49:f1:ac:ed:34:fd:86:78:a4:b7:aa:d5:24:24:16:84:
         46:45:33:fc:af:0f:6a:95:88:88:6a:f4:2c:74:b2:26:1a:c9:
         2d:c1:ff:91:45:16:08:bc:fb:55:c8:e7:5c:cb:29:cd:4b:8e:
         8f:a6:87:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:40 2024 by rpki-client on console-fra.rpki-client.org