Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a633030303a3a2f33342d3334203d3e20323731313137.roa
File:                     323830343a373638343a633030303a3a2f33342d3334203d3e20323731313137.roa (raw, json)
Hash identifier:          4SA1hYJ4kwnkoax2LfjFiIuhVrs6RPeVr7N+iat1o+Q=
Subject key identifier:   BC:3F:BC:28:9D:63:F6:5E:4D:6C:D9:F8:99:E8:2D:82:74:01:07:27
Certificate issuer:       /CN=62D01A32125D7B1F626C38C25BC340B899793CFA
Certificate serial:       4F803A1ED857C7052CF98DA2D1637154AE3778DE
Authority key identifier: 62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a633030303a3a2f33342d3334203d3e20323731313137.roa
Signing time:             Thu 04 Apr 2024 21:36:56 +0000
ROA not before:           Thu 04 Apr 2024 21:31:56 +0000
ROA not after:            Thu 03 Apr 2025 21:36:56 +0000
asID:                     271117
IP address blocks:        2804:7684:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl
                          rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:80:3a:1e:d8:57:c7:05:2c:f9:8d:a2:d1:63:71:54:ae:37:78:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62D01A32125D7B1F626C38C25BC340B899793CFA
        Validity
            Not Before: Apr  4 21:31:56 2024 GMT
            Not After : Apr  3 21:36:56 2025 GMT
        Subject: CN=BC3FBC289D63F65E4D6CD9F899E82D8274010727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a6:60:b5:9e:b8:42:73:15:74:de:cf:40:dd:
                    f0:16:e9:16:a0:62:03:3a:b1:87:97:f9:89:7b:57:
                    76:bf:cf:ea:f1:c0:ca:61:6b:2d:f7:f5:24:e3:af:
                    da:d7:0d:59:4c:e1:f9:20:12:5f:df:08:ce:56:62:
                    ac:c3:aa:ae:a9:16:cd:67:8a:9f:70:dc:df:c4:40:
                    de:30:37:5f:b9:a7:06:7f:74:fb:03:b9:71:80:c5:
                    b0:4e:b6:d6:c5:bf:c9:82:0b:90:52:97:be:1d:42:
                    ea:e7:d5:7a:c3:be:0c:c2:a4:1e:e4:7c:7b:06:d0:
                    07:f5:20:2d:2a:9d:18:23:32:f6:ea:c3:cb:d7:f2:
                    d4:4a:26:6c:71:13:e6:3f:79:6b:f2:bc:67:9e:5b:
                    fb:0e:ee:22:37:8d:d8:be:d0:02:51:78:2c:04:95:
                    95:db:b2:cc:26:ab:12:b2:b3:95:bc:32:3b:a7:64:
                    f0:af:d4:2f:09:ac:fa:c3:6f:6d:95:08:98:2b:6e:
                    ad:93:01:1c:41:b9:eb:f1:c0:85:41:c9:2e:92:1b:
                    9f:5b:36:92:07:5e:a4:86:16:81:b2:ce:3f:e3:b0:
                    50:05:df:8f:92:75:e7:81:bf:9c:9e:18:73:1a:70:
                    2f:ab:3c:b7:9d:84:85:2d:64:b0:53:67:b3:c5:47:
                    0a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3F:BC:28:9D:63:F6:5E:4D:6C:D9:F8:99:E8:2D:82:74:01:07:27
            X509v3 Authority Key Identifier:
                keyid:62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a633030303a3a2f33342d3334203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7684:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b5:aa:22:83:26:3a:df:29:72:d4:e6:95:5a:e9:41:04:9e:ca:
         9e:e1:4a:01:38:58:64:00:87:5d:24:31:33:cc:8d:22:c3:64:
         c5:70:59:02:9c:bb:34:b6:01:2a:40:57:2c:97:f4:d8:6a:55:
         31:7e:7f:82:91:ea:1a:b6:36:64:68:33:2e:81:62:3f:80:9a:
         a5:a6:d9:8a:ce:43:3c:91:45:56:f7:97:1b:78:fe:18:fa:49:
         34:77:67:ef:40:27:0f:d7:df:26:32:54:6f:3a:01:64:86:cc:
         46:05:fa:88:a3:0b:d2:da:a8:7f:c1:9f:2f:65:84:70:b7:27:
         9b:28:2d:63:f2:30:00:63:10:2c:1e:5f:f3:6e:b2:c2:d3:5c:
         9e:f4:f4:f4:f8:f2:6e:51:53:66:bb:b5:eb:eb:57:43:f4:de:
         cd:48:cb:70:0e:8f:f0:2c:90:c0:8e:39:ed:09:36:96:44:84:
         b5:4f:e7:2d:e9:7c:0f:a8:e1:47:7d:1c:47:f5:82:83:28:3f:
         8d:b5:87:ee:be:79:72:81:af:9e:24:5b:56:3a:6d:04:df:c9:
         96:66:fc:22:f7:8c:f5:ce:e9:02:8e:d1:a2:81:1a:ca:9a:79:
         69:e1:78:e1:53:66:e8:5d:88:a5:8b:52:fa:a2:4e:91:a0:89:
         e2:dd:6b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 11:59:56 2024 by rpki-client on console-fra.rpki-client.org