Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/323830343a376138633a3a2f33322d3438203d3e20323731333738.roa
File:                     323830343a376138633a3a2f33322d3438203d3e20323731333738.roa (raw, json)
Hash identifier:          QIG1F+IV30Vtsfdaj51A0MNO5NWaVSAyjG6ZTfCsC6M=
Subject key identifier:   04:60:4F:01:7D:94:A9:1D:54:89:56:8F:04:72:D7:E7:78:FF:8E:C3
Certificate issuer:       /CN=E2072C475E2925AB717FA25CB0C35668A240297C
Certificate serial:       6B0D1AF64A3DAC1BA3594E567E0C62F82937C5B5
Authority key identifier: E2:07:2C:47:5E:29:25:AB:71:7F:A2:5C:B0:C3:56:68:A2:40:29:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2072C475E2925AB717FA25CB0C35668A240297C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/323830343a376138633a3a2f33322d3438203d3e20323731333738.roa
Signing time:             Thu 04 Apr 2024 01:45:13 +0000
ROA not before:           Thu 04 Apr 2024 01:40:13 +0000
ROA not after:            Thu 03 Apr 2025 01:45:13 +0000
asID:                     271378
IP address blocks:        2804:7a8c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/E2072C475E2925AB717FA25CB0C35668A240297C.crl
                          rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/E2072C475E2925AB717FA25CB0C35668A240297C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2072C475E2925AB717FA25CB0C35668A240297C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:0d:1a:f6:4a:3d:ac:1b:a3:59:4e:56:7e:0c:62:f8:29:37:c5:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2072C475E2925AB717FA25CB0C35668A240297C
        Validity
            Not Before: Apr  4 01:40:13 2024 GMT
            Not After : Apr  3 01:45:13 2025 GMT
        Subject: CN=04604F017D94A91D5489568F0472D7E778FF8EC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f2:58:8a:dd:e7:12:b5:2a:45:5b:5a:c7:14:
                    94:8e:b9:38:e4:53:63:50:ef:53:66:39:a9:a1:6c:
                    6a:0c:6b:f6:81:5b:38:21:f5:e8:e4:a6:65:2c:27:
                    7c:44:be:7f:5f:32:d4:e2:73:39:a8:ee:f3:81:0e:
                    99:ef:ab:62:ee:34:09:3d:ef:47:8f:d6:e3:51:e8:
                    e5:43:52:b0:48:40:0e:aa:4d:62:97:ea:91:c9:b7:
                    14:6f:19:56:38:68:3a:5a:db:37:a6:16:42:16:92:
                    e1:c0:11:10:97:c9:4b:ba:ea:58:24:af:4b:71:74:
                    2c:1e:fa:c6:65:20:24:ae:8f:b8:6b:16:39:a4:a5:
                    f6:77:21:a0:b2:ee:90:7b:81:55:ee:06:b5:5c:63:
                    f9:d2:fa:11:3a:c6:98:af:68:f1:29:e9:7d:56:40:
                    54:b5:39:89:c7:a0:b9:41:ea:86:4b:eb:76:9f:7c:
                    cb:f6:9a:a2:93:d9:f7:39:a0:39:4d:8c:b8:9a:8d:
                    80:5d:fc:7f:19:1c:84:2a:eb:51:b8:52:03:d1:1c:
                    d1:99:98:d0:ca:71:4c:52:51:68:13:2e:b0:08:4a:
                    5a:26:76:2d:72:53:18:30:6f:38:77:be:8e:4b:3f:
                    a1:b7:91:c2:54:a7:1f:e7:7f:f1:4c:ea:eb:f7:f2:
                    ae:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:60:4F:01:7D:94:A9:1D:54:89:56:8F:04:72:D7:E7:78:FF:8E:C3
            X509v3 Authority Key Identifier:
                keyid:E2:07:2C:47:5E:29:25:AB:71:7F:A2:5C:B0:C3:56:68:A2:40:29:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/E2072C475E2925AB717FA25CB0C35668A240297C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2072C475E2925AB717FA25CB0C35668A240297C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/323830343a376138633a3a2f33322d3438203d3e20323731333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:49:33:54:c5:e9:3a:0c:d8:fa:53:17:96:c0:fc:0d:40:3c:
         7e:5b:3c:0f:12:74:09:21:34:f1:9a:02:ac:3b:20:c2:b3:4b:
         44:68:0f:8a:c1:9e:97:5b:79:6b:57:a3:ca:3c:69:64:ad:a9:
         e6:c0:55:dd:0a:35:72:44:a5:2e:f8:84:0d:6a:5b:49:ef:9a:
         00:1b:56:64:f7:5f:40:19:17:41:fe:72:e1:91:05:01:49:7e:
         d0:59:57:77:7c:e3:23:cb:30:06:2d:f9:93:a7:77:d3:5d:4c:
         1a:8b:a1:d4:1d:eb:04:b6:be:b0:c4:f1:30:71:e7:f1:72:e6:
         4a:da:80:6e:3c:18:bf:4e:52:a2:14:9d:93:5f:38:e3:9b:d3:
         a4:42:19:ec:cf:08:10:f6:3b:6e:18:03:0a:d6:66:94:73:2a:
         2f:86:2a:f1:66:d0:88:ae:d6:c5:9b:a8:28:cd:87:cf:16:dd:
         c9:13:71:20:0e:6b:e1:f8:10:8b:3b:d3:96:52:44:2a:5b:78:
         aa:df:68:c0:3b:bb:1d:e5:b6:76:31:5e:22:8e:8e:2f:17:00:
         e8:39:8d:bd:0d:9c:2b:fa:3e:45:5b:b6:68:94:88:e9:9c:de:
         01:c0:e8:6d:db:67:37:fc:d1:be:e8:15:37:24:10:8a:b3:7f:
         50:2c:9b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org