Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a343030303a3a2f33342d3334203d3e20323731313137.roa
File:                     323830343a373638343a343030303a3a2f33342d3334203d3e20323731313137.roa (raw, json)
Hash identifier:          IBirUSb3ay7rAAlczu4q6bWgIp5pvOXikd7pFyoo0dA=
Subject key identifier:   8E:56:B5:D9:52:57:BF:ED:5D:69:0A:52:F9:3F:DE:5F:DB:48:44:A1
Certificate issuer:       /CN=62D01A32125D7B1F626C38C25BC340B899793CFA
Certificate serial:       58B46944362047AE6ED869D9CDFD59D3817A1639
Authority key identifier: 62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a343030303a3a2f33342d3334203d3e20323731313137.roa
Signing time:             Thu 04 Apr 2024 21:36:57 +0000
ROA not before:           Thu 04 Apr 2024 21:31:57 +0000
ROA not after:            Thu 03 Apr 2025 21:36:57 +0000
asID:                     271117
IP address blocks:        2804:7684:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl
                          rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b4:69:44:36:20:47:ae:6e:d8:69:d9:cd:fd:59:d3:81:7a:16:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62D01A32125D7B1F626C38C25BC340B899793CFA
        Validity
            Not Before: Apr  4 21:31:57 2024 GMT
            Not After : Apr  3 21:36:57 2025 GMT
        Subject: CN=8E56B5D95257BFED5D690A52F93FDE5FDB4844A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3b:78:df:54:8f:24:b3:cd:a9:17:4c:d8:19:
                    7e:b9:9c:ac:df:8b:7c:67:02:6b:b5:48:71:fa:53:
                    da:42:0f:60:c1:26:ef:57:52:b0:d6:19:94:0c:16:
                    ed:bd:21:31:ee:47:b6:5c:b5:ec:c2:27:b9:9d:d1:
                    03:4d:c8:57:b2:9e:d9:09:d4:a5:1f:39:cd:8f:76:
                    e2:d3:c3:bb:b8:9e:6a:2f:33:6c:4c:44:ca:ca:48:
                    b4:fe:01:00:e8:d3:88:69:66:16:b4:a5:40:b0:4b:
                    63:ce:b6:87:d5:d3:ae:b2:5f:29:9c:db:f8:d5:99:
                    a0:2f:ed:72:29:2f:b1:4e:14:ec:cb:86:a7:dc:ba:
                    39:4c:84:af:10:42:3e:4f:b5:49:60:84:20:67:4c:
                    5f:e5:f1:b4:a8:f9:05:a5:0b:c9:9b:96:c6:42:37:
                    5d:ea:e4:43:f6:c1:bc:1e:7b:01:6d:90:56:6f:13:
                    17:7d:07:07:9d:99:68:db:b8:ed:d2:c5:c1:bb:72:
                    ee:7b:ba:9c:39:03:1c:cb:9f:43:9e:34:92:06:ea:
                    48:50:37:b4:b0:63:a3:1e:ea:b7:85:60:5e:39:27:
                    98:55:19:e1:e9:22:0a:c7:1b:02:d3:ae:c5:4e:44:
                    a9:f1:8c:a5:46:b6:ac:e3:96:7f:78:19:02:b0:d3:
                    92:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:56:B5:D9:52:57:BF:ED:5D:69:0A:52:F9:3F:DE:5F:DB:48:44:A1
            X509v3 Authority Key Identifier:
                keyid:62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a343030303a3a2f33342d3334203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7684:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8e:78:56:ce:ef:d6:5d:19:cd:b7:a6:77:8a:ed:97:e9:e8:bc:
         a8:df:c4:4a:e6:49:0b:49:ef:96:87:45:ba:be:7e:58:df:03:
         64:5d:25:19:63:0a:bd:38:22:fb:d0:b6:13:c1:63:7c:75:75:
         f8:15:f8:08:97:c8:1b:6c:0b:4d:d0:cb:f0:4a:7a:46:e0:2b:
         77:5b:ef:4e:66:b6:a2:78:8b:00:6f:d7:73:09:12:7b:aa:17:
         38:b4:3c:39:fd:8a:78:42:78:c6:a2:4b:eb:3a:01:b9:40:b7:
         aa:73:54:1b:37:a9:f3:d0:68:3d:1f:d0:05:fe:34:26:ec:c8:
         75:56:9b:cb:4f:20:60:92:b1:38:c8:47:d2:d8:0a:23:79:a7:
         ff:ff:fe:7b:23:79:e5:fd:97:b5:0e:02:05:6b:07:e2:8d:1b:
         f1:84:8c:95:6d:f5:0c:ef:ed:d0:a6:5d:5a:30:06:a3:c4:a9:
         5b:3f:26:45:24:c0:f5:88:b6:b5:aa:7f:82:93:1f:5e:23:ee:
         9c:d6:00:bc:2b:05:8c:4e:6b:64:35:42:76:33:a7:b8:bf:89:
         e7:e1:0d:80:7d:f4:3a:28:e4:e4:10:33:b8:e0:d2:95:47:53:
         8f:fb:94:c0:26:1a:59:63:12:51:d9:f0:9f:85:ee:bb:ff:1b:
         43:04:a3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:40 2024 by rpki-client on console-fra.rpki-client.org