Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/323830343a313933343a633030303a3a2f33342d3334203d3e203631373738.roa
File:                     323830343a313933343a633030303a3a2f33342d3334203d3e203631373738.roa (raw, json)
Hash identifier:          eYUSjxdjtQ1LBcWwQ+fYkCWGT08a39dW/kHEr267a0E=
Subject key identifier:   4F:BA:DC:08:1E:B7:87:B7:04:C1:35:E1:CC:80:9C:63:F6:5E:EE:73
Certificate issuer:       /CN=3496860CED46E82860498DD946601D168147920B
Certificate serial:       380E9E0105F80865C517AE817836F3798EC236B6
Authority key identifier: 34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/323830343a313933343a633030303a3a2f33342d3334203d3e203631373738.roa
Signing time:             Wed 10 Jul 2024 16:35:38 +0000
ROA not before:           Wed 10 Jul 2024 16:30:38 +0000
ROA not after:            Wed 09 Jul 2025 16:35:38 +0000
asID:                     61778
IP address blocks:        2804:1934:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl
                          rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0e:9e:01:05:f8:08:65:c5:17:ae:81:78:36:f3:79:8e:c2:36:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3496860CED46E82860498DD946601D168147920B
        Validity
            Not Before: Jul 10 16:30:38 2024 GMT
            Not After : Jul  9 16:35:38 2025 GMT
        Subject: CN=4FBADC081EB787B704C135E1CC809C63F65EEE73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ee:73:0d:82:69:d9:0b:78:d9:ff:0c:3c:66:
                    a8:08:89:30:4d:7e:2b:9d:f6:87:9d:e0:83:be:df:
                    92:fb:82:d5:f0:8d:d1:5a:19:f8:22:b9:cf:8e:c2:
                    76:e2:63:b9:de:29:fd:7b:38:cb:c6:1a:fe:01:c7:
                    ff:bb:3e:04:00:2c:f2:75:77:e2:ab:55:ed:8e:5c:
                    39:88:82:1b:86:35:e1:84:90:26:25:e4:6b:a6:3c:
                    46:c6:ff:b9:f5:ce:5e:e7:2e:af:75:4f:93:01:8c:
                    48:67:d7:92:59:ab:36:4f:0f:70:30:14:48:a4:12:
                    87:95:4b:8c:7c:ac:71:29:b8:65:70:c0:53:42:be:
                    ae:4e:89:46:fa:35:21:4b:aa:3c:92:f7:68:06:a6:
                    21:a2:85:7f:73:3f:ac:4b:79:c9:c6:6b:13:2e:5c:
                    81:5c:e2:d8:b8:9b:0c:24:2d:d0:b3:2e:ae:e0:77:
                    d5:f9:72:dc:79:d6:40:d3:4f:c2:1d:f5:ae:e2:86:
                    37:51:7a:23:b9:e4:2f:03:6c:f1:6d:1b:be:26:3d:
                    1e:07:19:d4:fa:5e:20:29:81:4a:4f:ef:90:16:e3:
                    cb:3d:f1:5a:a1:2a:2c:74:ea:b3:b8:6a:64:90:f4:
                    a5:f0:8a:97:6b:be:20:f2:89:52:c1:13:d2:a2:46:
                    0b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BA:DC:08:1E:B7:87:B7:04:C1:35:E1:CC:80:9C:63:F6:5E:EE:73
            X509v3 Authority Key Identifier:
                keyid:34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/323830343a313933343a633030303a3a2f33342d3334203d3e203631373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1934:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7d:54:32:3c:34:a6:27:35:6b:20:27:2e:2b:d0:9e:a0:ec:65:
         e7:51:2a:59:ff:56:5d:6f:be:c0:20:6a:dc:d6:d6:12:c3:7a:
         bf:fc:4f:e2:cf:38:37:9b:a5:46:1f:04:8c:a3:04:47:09:ec:
         81:cf:f3:bf:72:37:4f:35:13:3a:71:60:b4:07:92:a2:18:6c:
         25:7a:91:ec:e2:36:9d:29:98:89:bc:50:0d:41:b6:06:9f:6e:
         6b:db:83:ed:73:8c:9f:e3:ea:88:45:cb:8e:28:ed:17:07:f4:
         20:0e:67:3d:83:59:17:91:63:0b:92:6f:65:1f:65:21:a6:b1:
         70:1e:e5:97:44:65:c3:0c:3e:46:94:3c:9e:50:f3:b9:cf:97:
         62:9e:3d:6c:48:2b:d6:09:fe:71:7c:be:0d:a0:3d:63:e4:7a:
         c1:3d:71:ba:9c:02:c0:65:ac:38:52:46:ae:47:4a:bd:44:a8:
         48:2b:ab:b0:0a:50:bf:0e:11:79:6a:8a:6f:cd:7c:4a:0e:66:
         73:aa:08:ac:2b:04:2d:1b:cc:0b:2e:42:69:0b:0f:79:71:de:
         66:ce:36:d5:41:2f:74:89:91:0c:29:08:b2:12:48:ea:f4:4f:
         cf:59:5f:d0:fc:c7:db:ac:40:f3:83:98:00:01:c3:fb:f6:36:
         b9:a7:34:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:02 2024 by rpki-client on console-fra.rpki-client.org