Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/1/323830343a373938343a3a2f33322d3438203d3e20323731333130.roa
File:                     323830343a373938343a3a2f33322d3438203d3e20323731333130.roa (raw, json)
Hash identifier:          KqXWGS68Q12IpqN21g6IB+fOUpJmMEPISCWGs4oaB5U=
Subject key identifier:   58:36:9B:7E:18:E7:0D:4E:3B:AA:4F:AA:28:85:27:B3:8D:BB:70:AD
Certificate issuer:       /CN=D3A7410AF539DF601C7D31EFDDCE90F6D11D3D1D
Certificate serial:       324D8A72BA7AE276DD64EB9C9DDAD213FF5D4DE5
Authority key identifier: D3:A7:41:0A:F5:39:DF:60:1C:7D:31:EF:DD:CE:90:F6:D1:1D:3D:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3A7410AF539DF601C7D31EFDDCE90F6D11D3D1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/1/323830343a373938343a3a2f33322d3438203d3e20323731333130.roa
Signing time:             Wed 03 Apr 2024 22:08:01 +0000
ROA not before:           Wed 03 Apr 2024 22:03:01 +0000
ROA not after:            Wed 02 Apr 2025 22:08:01 +0000
asID:                     271310
IP address blocks:        2804:7984::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/1/D3A7410AF539DF601C7D31EFDDCE90F6D11D3D1D.crl
                          rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/1/D3A7410AF539DF601C7D31EFDDCE90F6D11D3D1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3A7410AF539DF601C7D31EFDDCE90F6D11D3D1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 12:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:4d:8a:72:ba:7a:e2:76:dd:64:eb:9c:9d:da:d2:13:ff:5d:4d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3A7410AF539DF601C7D31EFDDCE90F6D11D3D1D
        Validity
            Not Before: Apr  3 22:03:01 2024 GMT
            Not After : Apr  2 22:08:01 2025 GMT
        Subject: CN=58369B7E18E70D4E3BAA4FAA288527B38DBB70AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b1:50:b0:52:b4:7b:fc:e2:bf:37:53:0c:2c:
                    23:87:38:9c:c4:b6:f7:2e:5e:fa:4c:c7:d6:2a:ea:
                    8c:38:5b:e7:55:d9:8d:b8:18:72:a3:71:9a:bb:55:
                    ee:98:b5:63:8a:07:9f:1a:ba:34:e8:6b:3a:1c:46:
                    6d:6c:a4:1c:ee:5d:94:3c:92:de:c3:10:58:db:ca:
                    21:ee:65:07:ad:22:93:46:48:5f:3a:0f:ed:28:5a:
                    86:82:6e:8d:9c:32:6c:58:9b:8f:31:8d:6d:b4:b7:
                    cd:c1:2d:06:9d:ca:be:ff:fe:fd:02:c9:d5:97:88:
                    03:2f:66:51:42:bd:9e:9a:ee:1b:c2:e9:ef:ab:5d:
                    f5:8a:69:df:cb:18:7e:55:90:94:db:66:ee:29:35:
                    de:d6:62:bd:c6:7e:d5:ec:a6:ad:cc:f7:93:10:d3:
                    ef:db:ee:16:d4:de:bc:55:49:74:2f:d7:8b:46:f1:
                    bc:a0:8f:8f:00:9d:1f:b4:9d:e2:7e:68:2e:15:79:
                    4f:04:be:82:e3:7d:a6:2c:06:65:a2:b3:97:c5:b5:
                    ed:d5:c4:f6:dd:1e:17:17:c5:55:fc:99:9c:a2:66:
                    1f:a9:68:2a:60:a0:a5:10:5b:ef:8f:c4:38:ac:dc:
                    77:bf:75:03:dd:56:d3:c4:46:30:21:5b:96:63:42:
                    bb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:36:9B:7E:18:E7:0D:4E:3B:AA:4F:AA:28:85:27:B3:8D:BB:70:AD
            X509v3 Authority Key Identifier:
                keyid:D3:A7:41:0A:F5:39:DF:60:1C:7D:31:EF:DD:CE:90:F6:D1:1D:3D:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/1/D3A7410AF539DF601C7D31EFDDCE90F6D11D3D1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3A7410AF539DF601C7D31EFDDCE90F6D11D3D1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/1/323830343a373938343a3a2f33322d3438203d3e20323731333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7984::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:80:c0:69:cb:77:c9:31:34:18:e6:3b:5f:14:02:e0:db:a0:
         78:f0:7d:23:3f:45:3c:ba:46:15:e2:b3:27:c8:86:6d:b9:8d:
         ef:d6:48:a9:40:2a:c8:a7:05:57:46:4c:17:a4:ba:aa:7a:a3:
         18:5a:cc:47:9b:2f:b5:61:15:72:4c:49:1b:a3:5a:f9:48:3b:
         4a:09:86:3e:2c:d7:31:ae:da:c7:22:10:28:a2:8d:67:b0:2d:
         3b:4f:b5:7c:aa:8b:7b:30:8d:5c:3e:cc:c9:b1:ff:b1:3b:c7:
         f9:8b:79:04:d7:c9:8b:b9:ba:b8:7a:f1:78:ce:c7:a7:43:f7:
         2e:b7:35:8b:42:b2:6d:3c:8f:7a:e1:9b:89:89:8e:f5:13:61:
         ef:c1:6c:12:a7:09:83:1b:01:ff:25:36:e9:b4:45:92:ba:b5:
         e8:0b:dd:84:3b:ed:e1:30:92:bb:3e:35:94:eb:39:3c:c5:c7:
         c6:bc:3e:d6:13:9e:d7:41:d8:aa:5b:e3:57:3e:22:b1:ae:0a:
         55:67:15:03:ef:24:b4:28:4d:63:75:50:26:ea:39:df:ba:bf:
         ea:82:d1:84:cd:a5:05:f1:cd:4b:3f:7f:18:79:09:eb:ae:52:
         1f:25:48:5a:e5:b3:52:b1:37:c0:87:e0:dd:61:82:9c:8c:8b:
         1e:91:2c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 13:03:44 2024 by rpki-client on console-fra.rpki-client.org