Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/323830343a363938343a633030303a3a2f33342d3334203d3e20323730323735.roa
File:                     323830343a363938343a633030303a3a2f33342d3334203d3e20323730323735.roa (raw, json)
Hash identifier:          kuowMkx1Uddz9cuydiUUjHbkInzVWhReng16ky/v/zs=
Subject key identifier:   83:D4:09:D5:C3:57:71:14:2A:81:F7:DB:43:53:07:D9:A2:03:EA:98
Certificate issuer:       /CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
Certificate serial:       573C6C35FD47B2AE4255BBA798AEED410E2DC3C0
Authority key identifier: 1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/323830343a363938343a633030303a3a2f33342d3334203d3e20323730323735.roa
Signing time:             Thu 04 Apr 2024 06:00:38 +0000
ROA not before:           Thu 04 Apr 2024 05:55:38 +0000
ROA not after:            Thu 03 Apr 2025 06:00:38 +0000
asID:                     270275
IP address blocks:        2804:6984:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl
                          rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3c:6c:35:fd:47:b2:ae:42:55:bb:a7:98:ae:ed:41:0e:2d:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
        Validity
            Not Before: Apr  4 05:55:38 2024 GMT
            Not After : Apr  3 06:00:38 2025 GMT
        Subject: CN=83D409D5C35771142A81F7DB435307D9A203EA98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6e:fc:85:00:d3:83:65:5e:aa:b6:d2:dc:fa:
                    1b:f3:3a:58:f8:a5:cb:ab:d6:63:d8:57:a9:9b:36:
                    8c:86:89:53:8a:59:b6:a0:54:c1:60:9d:ac:89:19:
                    d3:4d:19:bf:f9:f7:de:7e:62:51:12:c6:91:4d:f1:
                    15:5a:48:e6:c7:91:38:37:f5:74:04:cd:16:aa:77:
                    73:6a:a9:2e:6a:09:24:10:ce:93:74:9b:69:15:bf:
                    1f:9e:ba:99:af:4f:69:be:37:aa:96:9a:39:04:14:
                    d6:75:86:e4:7a:03:d5:a6:1f:41:f2:81:9d:8c:8f:
                    9b:63:d4:51:84:ce:4a:00:a3:c4:63:60:b5:42:25:
                    91:ab:ee:3c:7a:17:be:a3:c1:81:db:02:78:35:c0:
                    18:02:24:f0:04:f3:32:ef:24:d9:91:b7:b0:7d:f5:
                    bc:84:16:63:4d:4f:5f:0a:ba:35:81:9c:3c:01:32:
                    75:a4:66:f9:a1:3c:76:80:d4:3f:95:10:f8:f4:e6:
                    ab:dc:a0:39:f2:16:63:5d:3f:fb:ae:e3:24:e5:8d:
                    36:1f:56:ee:9a:b4:7d:e2:61:59:a9:67:dd:00:41:
                    88:fb:51:a6:83:8f:db:30:04:60:50:6a:15:51:b0:
                    b0:37:54:4a:68:aa:ac:d0:e8:92:b2:e0:79:ad:84:
                    b2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D4:09:D5:C3:57:71:14:2A:81:F7:DB:43:53:07:D9:A2:03:EA:98
            X509v3 Authority Key Identifier:
                keyid:1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/323830343a363938343a633030303a3a2f33342d3334203d3e20323730323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6984:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         03:db:d2:bd:7b:57:25:23:39:38:68:46:a5:4d:1e:20:3b:9b:
         85:76:13:a1:bf:b0:84:ff:89:08:a9:77:cf:36:b1:2a:53:7c:
         5b:a3:db:04:eb:43:e6:36:d2:7e:24:2d:2d:ca:5f:a4:68:dc:
         f7:af:a5:99:ed:89:57:40:23:22:ee:f4:d8:4e:8e:9b:98:13:
         fe:75:c0:81:34:73:ab:f1:47:a7:b9:cd:55:c4:f8:81:7c:ab:
         4f:7d:75:e9:92:bf:38:09:4d:d7:00:ab:ca:71:e3:41:f9:ba:
         eb:55:2d:ed:5e:b3:60:3d:93:f0:49:9e:3a:ec:30:29:5c:f0:
         a6:48:56:92:ae:fc:e8:62:50:b6:aa:26:90:db:b2:e1:74:17:
         90:39:6a:71:04:a3:a6:9d:7c:ab:f6:54:a2:f0:29:37:14:5c:
         b3:54:9f:9e:50:4e:03:17:a8:6f:fc:69:81:6a:75:b7:db:17:
         fb:15:0f:2f:4e:0b:3a:5e:2f:37:0e:48:a8:59:be:41:05:40:
         18:d2:ef:d7:f7:78:ca:c6:ac:7d:3e:71:0e:e0:a5:4c:1e:60:
         1a:8e:39:45:bc:94:61:03:f6:cd:85:d5:45:4e:5f:60:8e:e6:
         ae:7c:8f:9e:30:45:e1:20:95:b7:3e:95:73:f6:e1:c4:99:b6:
         3f:b1:01:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:28 2024 by rpki-client on console-fra.rpki-client.org