Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a383030303a3a2f33342d3334203d3e20323731313137.roa
File:                     323830343a373638343a383030303a3a2f33342d3334203d3e20323731313137.roa (raw, json)
Hash identifier:          1nlWNYAwBfHkxJVPUVnAHrBT/8OJyqpq1lnND9xfWLs=
Subject key identifier:   95:EF:3D:92:B6:BD:01:F1:9B:A7:8A:EB:EA:17:DC:14:6B:8C:01:0A
Certificate issuer:       /CN=62D01A32125D7B1F626C38C25BC340B899793CFA
Certificate serial:       452FC2709E184BA4D0B5B2434B525089E35A7092
Authority key identifier: 62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a383030303a3a2f33342d3334203d3e20323731313137.roa
Signing time:             Thu 04 Apr 2024 21:36:58 +0000
ROA not before:           Thu 04 Apr 2024 21:31:58 +0000
ROA not after:            Thu 03 Apr 2025 21:36:58 +0000
asID:                     271117
IP address blocks:        2804:7684:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl
                          rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2f:c2:70:9e:18:4b:a4:d0:b5:b2:43:4b:52:50:89:e3:5a:70:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62D01A32125D7B1F626C38C25BC340B899793CFA
        Validity
            Not Before: Apr  4 21:31:58 2024 GMT
            Not After : Apr  3 21:36:58 2025 GMT
        Subject: CN=95EF3D92B6BD01F19BA78AEBEA17DC146B8C010A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:28:f6:54:7d:87:ae:ee:d7:a4:d9:02:bc:c3:
                    da:17:8f:bc:77:6a:64:01:43:c1:27:92:4a:63:17:
                    68:2d:c3:81:3c:2a:73:4e:62:35:6e:e8:7f:79:cf:
                    3b:a6:af:0a:af:bc:f2:11:b7:88:97:20:c7:9c:eb:
                    51:e0:8b:56:ba:3c:d5:2b:1e:e0:91:a1:ac:54:5c:
                    c9:16:a5:a0:98:c6:cd:d7:c3:3a:90:b1:f5:dd:46:
                    1a:60:c1:60:bc:0a:7c:a8:22:7a:65:a8:3f:90:7c:
                    33:53:c6:1f:17:19:50:ee:62:26:8a:b3:0e:ca:fb:
                    6e:c4:37:ee:0f:c5:91:68:57:ae:43:a7:9e:a6:a5:
                    43:a2:80:18:40:17:1a:01:46:b0:ef:bd:54:23:30:
                    80:27:c3:b6:76:4a:7e:93:36:af:c3:8f:75:e4:01:
                    0f:68:30:67:9b:da:6d:fe:11:d1:54:b1:a6:28:79:
                    b3:08:c4:13:dd:d3:f4:09:52:60:85:50:ae:0b:e9:
                    b4:aa:26:93:86:b5:98:da:73:98:c3:2e:71:c0:7a:
                    f8:ea:0b:9c:14:be:fb:51:b1:03:bb:98:94:f0:9c:
                    59:32:b1:46:83:c0:ad:8a:86:ac:7c:79:f0:3d:41:
                    54:c3:8c:50:95:a8:eb:0a:dc:de:cb:d0:f1:13:11:
                    60:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:EF:3D:92:B6:BD:01:F1:9B:A7:8A:EB:EA:17:DC:14:6B:8C:01:0A
            X509v3 Authority Key Identifier:
                keyid:62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a383030303a3a2f33342d3334203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7684:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         93:26:77:92:7d:cc:35:44:c3:9b:41:3f:c0:5d:ea:6c:39:d5:
         2a:0c:e8:c1:03:52:c2:51:ce:fa:99:10:99:b1:79:ca:eb:b3:
         fd:03:b8:9d:78:5e:34:d2:82:6c:4a:83:a8:5d:2b:2a:45:32:
         cc:4e:36:9a:61:07:16:71:a1:5f:6b:98:7e:d8:f5:77:e0:e9:
         26:73:4c:d0:ed:37:fc:72:d4:44:24:32:6b:5c:79:82:2b:4d:
         cd:82:e2:45:8d:f4:f8:a8:f4:6a:00:2c:f0:a8:96:f4:15:a8:
         88:7f:c7:48:64:f0:d4:93:6a:70:6b:8d:59:73:15:72:84:89:
         e3:a3:9f:09:b9:6b:7d:fe:3f:a1:d1:e4:af:29:a1:3f:02:c0:
         20:e7:7e:b1:98:32:d8:18:c4:bb:64:73:e0:e7:be:d1:98:e1:
         27:d9:c2:ee:e7:32:4c:2c:5b:93:09:48:c7:60:86:d2:2b:c8:
         06:62:7b:e3:1d:74:97:b3:5e:1b:15:42:7b:81:a6:9a:4c:14:
         ee:96:c9:ff:dd:d6:29:ac:b7:20:e6:ec:07:7f:c4:b4:58:17:
         ea:10:02:a1:90:19:c8:df:95:23:1c:66:65:e3:ba:dd:d2:57:
         58:85:79:e6:e4:ad:11:eb:79:e0:6d:a6:26:94:3d:d0:77:79:
         9e:37:06:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:40 2024 by rpki-client on console-fra.rpki-client.org