Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/323830343a366261343a3a2f33322d3438203d3e20323730343134.roa
File:                     323830343a366261343a3a2f33322d3438203d3e20323730343134.roa (raw, json)
Hash identifier:          E9NBmW/zSAf24kZcYJSiIFJbNWRa1wae1mHOPg1bPUM=
Subject key identifier:   CD:E3:39:5B:DF:A2:4A:6D:EE:AA:CC:D0:17:BB:49:BA:87:40:2F:F1
Certificate issuer:       /CN=C95BCD8741F1697313471305FEAAAF3DA02061D6
Certificate serial:       1BB32F2A8170451A2A99B949F8DF9FAF4B46B126
Authority key identifier: C9:5B:CD:87:41:F1:69:73:13:47:13:05:FE:AA:AF:3D:A0:20:61:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C95BCD8741F1697313471305FEAAAF3DA02061D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/323830343a366261343a3a2f33322d3438203d3e20323730343134.roa
Signing time:             Thu 04 Apr 2024 16:11:19 +0000
ROA not before:           Thu 04 Apr 2024 16:06:19 +0000
ROA not after:            Thu 03 Apr 2025 16:11:19 +0000
asID:                     270414
IP address blocks:        2804:6ba4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/C95BCD8741F1697313471305FEAAAF3DA02061D6.crl
                          rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/C95BCD8741F1697313471305FEAAAF3DA02061D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C95BCD8741F1697313471305FEAAAF3DA02061D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b3:2f:2a:81:70:45:1a:2a:99:b9:49:f8:df:9f:af:4b:46:b1:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C95BCD8741F1697313471305FEAAAF3DA02061D6
        Validity
            Not Before: Apr  4 16:06:19 2024 GMT
            Not After : Apr  3 16:11:19 2025 GMT
        Subject: CN=CDE3395BDFA24A6DEEAACCD017BB49BA87402FF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:73:9e:23:d5:a9:47:f0:88:87:8a:aa:ae:ac:
                    ba:1e:03:68:9f:8b:ad:5c:62:f2:85:c5:3b:f8:20:
                    da:17:42:69:d8:75:39:35:72:88:c6:35:d9:5e:67:
                    0c:67:cb:e0:9a:85:4a:59:bd:43:03:3d:ed:14:a9:
                    22:05:3e:26:06:cb:50:85:7a:04:44:2f:cc:29:7a:
                    5e:1d:1b:af:25:33:6a:c1:fb:0a:37:31:97:cb:77:
                    c0:ca:86:7f:b7:e5:4d:9e:70:08:f0:47:fc:44:f7:
                    2d:7f:e4:65:53:f6:38:fd:a8:a1:c2:7e:a0:46:0b:
                    1f:c7:d0:2c:3c:8f:91:8f:86:0e:5f:ce:fc:a6:d8:
                    8a:7d:60:fd:bb:30:ea:e0:c4:b0:9d:11:b1:76:2a:
                    e9:d9:67:ca:43:13:c0:1b:80:e9:34:6a:19:43:75:
                    ce:3f:3c:87:c3:9e:eb:b8:ad:be:a0:84:4d:92:44:
                    e9:68:5a:d6:22:7b:4c:43:10:e4:fd:6f:6a:b3:c9:
                    ab:7d:cb:de:5f:c8:c6:2b:60:9a:08:67:5f:2d:d5:
                    9d:d4:6a:d0:44:a7:c2:dc:ef:c4:a4:09:35:c8:9a:
                    bf:55:12:fa:b4:02:16:ce:31:e1:71:f0:7b:e2:25:
                    28:c0:fe:ae:e8:47:79:d2:07:ef:99:0f:78:37:2e:
                    e6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E3:39:5B:DF:A2:4A:6D:EE:AA:CC:D0:17:BB:49:BA:87:40:2F:F1
            X509v3 Authority Key Identifier:
                keyid:C9:5B:CD:87:41:F1:69:73:13:47:13:05:FE:AA:AF:3D:A0:20:61:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/C95BCD8741F1697313471305FEAAAF3DA02061D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C95BCD8741F1697313471305FEAAAF3DA02061D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/323830343a366261343a3a2f33322d3438203d3e20323730343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ba4::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:4c:ee:4d:19:21:9f:f1:d9:71:e9:13:42:d4:33:a6:f2:3f:
         66:54:ce:39:9a:f3:b1:8f:df:61:35:7e:0b:b7:6e:02:1d:cf:
         ce:44:5e:a1:cc:07:12:97:16:19:1c:cd:63:b1:fd:fb:08:fb:
         1e:d6:50:fe:0a:90:04:28:ae:cf:ab:c4:60:53:4d:60:a4:5a:
         fa:7e:5d:2d:b9:c0:84:35:fc:36:78:58:98:98:0d:c9:54:79:
         35:31:a4:36:a4:c3:46:96:18:f0:c2:09:5a:f2:93:d6:6b:d8:
         09:b3:9e:e1:5e:c0:87:7a:f2:c8:9b:f4:41:ea:14:8f:d4:9f:
         f3:7b:3b:22:b1:15:38:44:f0:84:81:9b:d0:d6:03:7a:26:67:
         93:c3:05:f6:a0:2e:d7:9c:03:db:2f:f4:99:35:05:74:8c:f9:
         8e:fc:9d:9e:1f:1a:48:a2:bf:98:73:40:3d:15:84:3b:cb:e7:
         e6:7e:5f:f8:67:19:c6:a0:ef:9f:05:3a:f9:44:4c:2a:3d:5d:
         f2:38:3e:01:72:97:63:4f:14:f2:55:70:45:b3:37:73:bd:28:
         5f:e5:b3:32:0c:d9:74:fd:35:59:a5:57:09:69:a4:7e:61:8d:
         f0:ff:c2:ac:c0:67:6d:67:4a:2b:23:05:1b:d6:b8:c4:b6:8a:
         35:1b:ce:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:41 2024 by rpki-client on console-fra.rpki-client.org