Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/323830343a323330343a633030303a3a2f33342d3334203d3e20323634313337.roa
File:                     323830343a323330343a633030303a3a2f33342d3334203d3e20323634313337.roa (raw, json)
Hash identifier:          A2HGb6232jJWz4B2kEiwpdF8L7DC++FUxwpap38W3gI=
Subject key identifier:   25:48:E0:9A:9E:B0:C9:CB:28:58:34:36:87:4A:16:77:5F:0D:F2:8C
Certificate issuer:       /CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
Certificate serial:       56326CB87957DDFBB122D0E487FA5413C8689C3D
Authority key identifier: D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/323830343a323330343a633030303a3a2f33342d3334203d3e20323634313337.roa
Signing time:             Thu 04 Apr 2024 08:08:34 +0000
ROA not before:           Thu 04 Apr 2024 08:03:34 +0000
ROA not after:            Thu 03 Apr 2025 08:08:34 +0000
asID:                     264137
IP address blocks:        2804:2304:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl
                          rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:32:6c:b8:79:57:dd:fb:b1:22:d0:e4:87:fa:54:13:c8:68:9c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
        Validity
            Not Before: Apr  4 08:03:34 2024 GMT
            Not After : Apr  3 08:08:34 2025 GMT
        Subject: CN=2548E09A9EB0C9CB28583436874A16775F0DF28C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:23:97:5c:b0:59:69:2e:0b:17:a3:79:8e:a1:
                    34:74:8c:b3:7e:9d:5f:89:f0:26:f1:72:21:6a:56:
                    21:7f:1d:45:2e:fd:77:cb:cd:cf:68:da:3d:ce:4f:
                    22:ee:f7:c4:19:79:4d:55:68:8d:16:10:94:29:ac:
                    65:8d:c7:68:21:d1:b8:86:c9:50:d0:b3:45:c0:ee:
                    11:5f:a7:e7:53:97:86:f6:3b:4d:9a:8b:b4:26:3c:
                    bc:28:25:cd:56:9a:03:6d:20:43:84:ac:79:59:a0:
                    54:fc:fc:e8:59:c4:ca:d7:49:03:2d:dc:4f:8d:49:
                    5d:2a:01:6f:10:d8:a6:d9:88:8a:a8:41:e1:30:f6:
                    1b:9f:4f:7c:93:f4:45:19:9c:e4:d0:9b:04:db:2a:
                    82:be:4e:56:3d:9f:80:92:d4:7f:2d:97:6b:f4:00:
                    c3:27:f5:e6:84:a8:90:fd:68:f1:e9:8d:b7:c5:07:
                    be:f4:8a:7b:b1:1e:db:14:6f:f5:72:a0:cb:9f:5b:
                    e8:22:ba:da:67:04:ef:2b:d3:71:3d:7d:f4:f6:0d:
                    6f:7d:8a:b2:b7:9c:68:5b:e5:63:24:ab:b3:ec:96:
                    ec:4c:38:99:af:d5:63:a3:72:ed:18:b9:e6:ca:a7:
                    fd:0a:e5:0f:3a:03:3e:57:9e:8d:67:af:8e:cd:b6:
                    70:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:48:E0:9A:9E:B0:C9:CB:28:58:34:36:87:4A:16:77:5F:0D:F2:8C
            X509v3 Authority Key Identifier:
                keyid:D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/323830343a323330343a633030303a3a2f33342d3334203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2304:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b2:60:a8:39:ef:ab:b2:14:d3:14:a4:d4:48:13:b0:18:6a:a7:
         d7:1c:f4:30:8c:3a:55:09:97:d2:72:72:81:54:58:91:47:31:
         bc:a8:9d:bb:41:1e:06:cb:2a:03:4e:44:dc:03:12:3b:2b:dd:
         8f:0a:ce:5c:dd:86:38:ea:78:c8:e1:be:07:80:78:0b:19:80:
         79:a6:5f:5b:69:6d:61:89:51:7b:a2:2b:a6:c6:51:e4:56:0e:
         c0:f7:8b:f7:ab:f0:26:f4:16:b5:06:23:15:73:93:19:a7:da:
         a0:1c:6e:f1:85:82:35:1f:e9:23:37:42:74:76:a8:dc:f4:7f:
         c6:4a:e2:ca:21:44:cc:26:5e:d7:3b:74:26:28:72:09:76:36:
         89:ea:69:79:e3:79:22:a0:a1:2e:9d:44:81:8f:1f:d8:d9:ee:
         b4:07:07:2e:29:90:69:5a:aa:a9:7c:d5:34:c9:4a:ce:ff:60:
         e0:61:67:7f:b8:94:b7:e0:51:76:59:69:6f:b5:01:b7:9f:ba:
         d0:62:1a:1f:5e:8a:e4:d5:00:ff:88:84:17:23:93:1a:ec:fa:
         7a:93:bc:b7:89:1a:71:36:1f:c4:99:85:5d:eb:b2:1a:5c:fd:
         fa:a9:64:f5:ca:64:b5:0a:9d:e2:37:88:22:63:59:42:fa:14:
         51:eb:f9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:50 2024 by rpki-client on console-fra.rpki-client.org