Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/323830343a366336383a3a2f33322d3338203d3e20323730343636.roa
File:                     323830343a366336383a3a2f33322d3338203d3e20323730343636.roa (raw, json)
Hash identifier:          kYuxF9z3tUO17hjy7C1qofDQMQ8UhCtndf3ZK0ldqoQ=
Subject key identifier:   7F:C8:38:13:49:40:A3:D7:2D:3A:3F:B3:6C:32:5A:1A:E1:B6:FA:55
Certificate issuer:       /CN=A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8
Certificate serial:       7CF1C87C67CD93C6DBE9CE7C7FEC7771005FF7E4
Authority key identifier: A0:D4:8A:48:1A:FA:B5:F1:D8:DA:16:FD:31:01:AC:40:1F:7A:16:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/323830343a366336383a3a2f33322d3338203d3e20323730343636.roa
Signing time:             Thu 04 Apr 2024 05:22:49 +0000
ROA not before:           Thu 04 Apr 2024 05:17:49 +0000
ROA not after:            Thu 03 Apr 2025 05:22:49 +0000
asID:                     270466
IP address blocks:        2804:6c68::/32 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.crl
                          rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f1:c8:7c:67:cd:93:c6:db:e9:ce:7c:7f:ec:77:71:00:5f:f7:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8
        Validity
            Not Before: Apr  4 05:17:49 2024 GMT
            Not After : Apr  3 05:22:49 2025 GMT
        Subject: CN=7FC838134940A3D72D3A3FB36C325A1AE1B6FA55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b6:58:f5:a1:60:8b:39:b6:d1:2d:e1:ba:2a:
                    a1:76:74:94:1d:cb:9d:a4:c4:b5:5d:a1:81:d0:ed:
                    48:9b:d2:7f:32:b3:75:2a:4f:76:b8:56:39:82:fd:
                    78:89:d4:9c:33:47:15:b9:e0:7b:ff:81:74:37:a0:
                    8a:6c:a7:6a:6a:f7:e3:85:ca:97:9d:87:83:6d:08:
                    7f:68:e7:45:69:f8:96:05:1b:90:35:04:4e:1a:75:
                    6b:92:14:26:5b:36:9d:67:52:97:96:3c:a0:24:eb:
                    06:89:d1:67:9b:8d:78:7d:94:fc:d7:00:09:b9:04:
                    ae:21:f3:ba:92:a2:df:b8:d8:26:51:d9:e9:e2:75:
                    a4:f8:2a:ef:5e:61:b1:18:ce:cb:3e:f8:3e:fe:a9:
                    ee:db:af:b9:ef:f3:32:6e:fb:ef:3d:13:eb:69:88:
                    db:b3:f7:75:c8:8f:b2:a2:96:78:90:45:0f:2f:ee:
                    e3:5f:97:ec:41:f3:0f:1b:f2:e6:18:b2:bf:89:ba:
                    c5:ff:4c:2e:46:e6:5a:49:0c:ca:33:ff:b7:eb:55:
                    d8:6d:c1:55:16:f6:1b:10:d2:b9:58:cd:61:14:34:
                    47:22:3b:c6:94:6a:59:7a:b3:75:a5:de:83:52:1f:
                    93:cc:54:c8:58:b6:ec:a2:5e:3b:97:e0:05:82:5e:
                    8e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C8:38:13:49:40:A3:D7:2D:3A:3F:B3:6C:32:5A:1A:E1:B6:FA:55
            X509v3 Authority Key Identifier:
                keyid:A0:D4:8A:48:1A:FA:B5:F1:D8:DA:16:FD:31:01:AC:40:1F:7A:16:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/323830343a366336383a3a2f33322d3338203d3e20323730343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c68::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:85:50:c4:7e:af:63:08:52:86:15:e2:ee:1e:74:05:ef:31:
         e0:c5:55:b0:e3:bc:dc:c1:8a:08:a7:ea:4e:b2:c7:a4:0c:7f:
         3f:c6:25:5b:6e:b8:6e:a2:d0:22:a5:c6:70:72:b9:79:b0:24:
         88:f0:15:cf:8f:f0:1d:d6:bb:e3:aa:95:4b:90:80:3b:87:78:
         36:05:7f:88:02:e6:8c:74:50:69:6d:0a:66:50:e3:b0:f1:e1:
         df:49:77:ba:14:86:2b:40:ea:4e:40:17:31:7f:08:32:de:b8:
         fa:40:cb:a6:85:68:dc:ab:c4:d9:62:1c:12:24:a0:7b:87:ab:
         a5:22:3d:70:34:18:7d:d8:d3:26:4b:a0:46:e6:fd:0f:0e:44:
         5d:5f:ef:0a:59:bd:a5:f2:2f:e0:ac:a6:fd:e4:9e:c3:a6:ce:
         02:75:29:c1:48:30:64:87:69:40:ec:13:6f:e2:b6:b1:bd:67:
         7e:b9:cd:62:fd:3f:a0:0d:d7:77:6c:29:a7:5f:4f:84:27:62:
         ef:c7:9b:d3:f9:f0:d2:5a:61:cb:f1:be:bb:d0:b8:a0:0b:f0:
         b7:42:c4:4f:42:41:23:d1:53:ba:37:f6:7a:0f:42:10:4d:c9:
         14:40:03:f2:c3:be:a8:a7:46:ab:82:d2:0e:90:db:3d:4e:74:
         e9:d4:8c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:02:15 2024 by rpki-client on console-fra.rpki-client.org