Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/323830343a363434343a313030303a3a2f33362d3336203d3e20323639343137.roa
File:                     323830343a363434343a313030303a3a2f33362d3336203d3e20323639343137.roa (raw, json)
Hash identifier:          Y1oMbTQpDwx844j/bbauRImUbP76qVnuhh9jAsYGdXo=
Subject key identifier:   0A:34:6F:60:BF:2E:AD:16:E7:5C:C8:E1:76:D7:B3:36:D0:31:B7:30
Certificate issuer:       /CN=582517B9105955B7B839FB60DC59AE677C6B4DED
Certificate serial:       39FA73A9ED90BD9B03343FCBD4D31BAB0989838B
Authority key identifier: 58:25:17:B9:10:59:55:B7:B8:39:FB:60:DC:59:AE:67:7C:6B:4D:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/323830343a363434343a313030303a3a2f33362d3336203d3e20323639343137.roa
Signing time:             Fri 05 Apr 2024 03:18:11 +0000
ROA not before:           Fri 05 Apr 2024 03:13:11 +0000
ROA not after:            Fri 04 Apr 2025 03:18:11 +0000
asID:                     269417
IP address blocks:        2804:6444:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.crl
                          rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:fa:73:a9:ed:90:bd:9b:03:34:3f:cb:d4:d3:1b:ab:09:89:83:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582517B9105955B7B839FB60DC59AE677C6B4DED
        Validity
            Not Before: Apr  5 03:13:11 2024 GMT
            Not After : Apr  4 03:18:11 2025 GMT
        Subject: CN=0A346F60BF2EAD16E75CC8E176D7B336D031B730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:eb:2c:aa:e5:ea:6f:8d:b1:ff:3a:9a:6d:
                    0f:5b:65:68:f1:f4:42:4d:98:0d:02:e4:2f:bf:f3:
                    a5:dc:03:86:ae:21:2b:37:4d:90:69:d6:63:e5:b5:
                    a6:bd:14:19:7f:12:c2:31:09:7a:a4:db:bb:06:72:
                    80:05:3c:a7:7d:b7:b0:fa:4f:75:72:4d:40:60:04:
                    71:8f:0f:01:7e:59:7e:28:ba:00:00:86:c2:96:42:
                    7c:e0:13:44:22:af:55:ed:4d:e1:40:ae:09:c7:83:
                    6c:3d:89:45:4d:d9:a1:96:32:e8:3e:5c:75:94:e7:
                    8d:e2:55:42:85:64:16:d5:ca:b6:cc:fb:51:3e:b6:
                    dc:37:71:fe:ef:28:0f:3d:3c:f6:7e:3c:b3:f2:32:
                    78:03:63:4b:55:47:e8:08:d3:61:b1:cb:f7:98:8a:
                    db:44:81:ef:c4:a2:35:4e:36:9e:00:ab:e4:a1:6b:
                    61:9b:df:6c:f2:7d:89:cc:98:0a:29:bb:ce:65:7f:
                    99:91:f8:f3:b8:75:59:c6:17:0c:2a:13:d5:db:b7:
                    54:b1:f6:0a:0c:18:af:b8:02:54:c3:1a:77:a2:02:
                    f8:4d:ff:8e:33:99:51:3e:eb:cf:95:92:64:ad:df:
                    91:1f:e9:ab:32:19:91:c9:8c:59:93:73:ed:cd:be:
                    84:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:34:6F:60:BF:2E:AD:16:E7:5C:C8:E1:76:D7:B3:36:D0:31:B7:30
            X509v3 Authority Key Identifier:
                keyid:58:25:17:B9:10:59:55:B7:B8:39:FB:60:DC:59:AE:67:7C:6B:4D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/323830343a363434343a313030303a3a2f33362d3336203d3e20323639343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6444:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a4:39:11:2b:4c:78:95:74:27:12:cb:68:a8:5a:4e:02:e3:05:
         b3:ca:a3:57:8b:ad:c1:a6:f9:5f:65:8c:e8:c1:5b:6f:79:ed:
         2b:08:81:b2:21:df:ce:fc:d9:c5:9d:c7:2c:4a:8b:a0:1f:f3:
         dd:74:78:26:a4:08:84:89:37:b0:b4:79:29:a0:71:3d:82:63:
         b3:db:9e:59:c8:c1:12:9b:28:11:95:8d:14:38:36:e2:39:e8:
         29:46:c3:7a:04:40:de:f8:c7:1c:3a:b5:cd:f6:a6:e9:41:96:
         ee:a9:26:0f:68:57:18:28:17:3d:d6:d3:dd:f5:9d:bc:83:e7:
         b5:b1:06:67:70:1f:ca:ba:d4:9f:28:78:e6:17:34:cb:51:34:
         9c:f7:89:ba:a4:18:98:9b:4c:92:14:e1:f2:8e:39:88:18:e2:
         68:a1:ac:59:68:25:03:0c:31:d3:87:e3:9b:b1:82:3b:20:ea:
         7e:64:f2:c4:f3:e5:f3:53:2d:50:24:37:fc:a7:18:80:6c:a9:
         7b:27:0d:51:5f:bb:06:39:bb:b1:86:66:bc:e9:32:bf:cf:2a:
         8f:29:49:00:fe:09:88:31:c4:3d:59:64:78:6f:2f:c5:a7:39:
         34:fe:2a:c4:c6:46:74:8c:f5:ba:2b:c7:ca:db:df:7a:4e:f9:
         5b:8e:8e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:03 2024 by rpki-client on console-fra.rpki-client.org