Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/1/323830343a366232383a3a2f33322d3332203d3e20323730333832.roa
File:                     323830343a366232383a3a2f33322d3332203d3e20323730333832.roa (raw, json)
Hash identifier:          wH9hgPeDiW78jol7u0+k5b74Sl6cLClMn0j7brahUP0=
Subject key identifier:   61:D6:47:0C:D3:22:B3:14:50:0D:0E:9A:E5:2E:B2:1E:6D:B9:8D:1B
Certificate issuer:       /CN=B1741A97BC3381123971E501CF06704DBCD89710
Certificate serial:       1C3B06FBD2D9252D45FC21D3198F2480863C908A
Authority key identifier: B1:74:1A:97:BC:33:81:12:39:71:E5:01:CF:06:70:4D:BC:D8:97:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1741A97BC3381123971E501CF06704DBCD89710.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/1/323830343a366232383a3a2f33322d3332203d3e20323730333832.roa
Signing time:             Thu 04 Apr 2024 17:02:05 +0000
ROA not before:           Thu 04 Apr 2024 16:57:05 +0000
ROA not after:            Thu 03 Apr 2025 17:02:05 +0000
asID:                     270382
IP address blocks:        2804:6b28::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/1/B1741A97BC3381123971E501CF06704DBCD89710.crl
                          rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/1/B1741A97BC3381123971E501CF06704DBCD89710.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1741A97BC3381123971E501CF06704DBCD89710.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 14:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3b:06:fb:d2:d9:25:2d:45:fc:21:d3:19:8f:24:80:86:3c:90:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1741A97BC3381123971E501CF06704DBCD89710
        Validity
            Not Before: Apr  4 16:57:05 2024 GMT
            Not After : Apr  3 17:02:05 2025 GMT
        Subject: CN=61D6470CD322B314500D0E9AE52EB21E6DB98D1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:91:2b:65:b8:cd:dd:47:a3:91:67:0d:5c:34:
                    05:49:04:6e:ae:f3:0f:8f:b4:73:9f:8e:91:dc:fa:
                    0f:7f:37:2d:9a:8c:e3:2d:84:c7:c5:4d:0e:99:a6:
                    06:84:f0:a6:aa:b4:23:f4:e1:85:31:de:6d:fc:a5:
                    b6:d7:6d:c1:18:70:6c:5a:30:65:a7:98:ab:78:36:
                    65:92:ab:f3:13:73:4f:7f:fc:a6:2e:5a:72:fb:f4:
                    91:53:e5:5c:8f:05:5b:0e:46:7e:33:8d:ef:d7:33:
                    f8:62:ac:4f:ce:71:5d:d2:65:e1:b3:06:d8:b3:ca:
                    f3:4f:c3:81:9c:e3:86:27:d7:04:79:33:45:bd:fb:
                    3d:19:54:2e:17:f1:fc:23:3e:ee:7c:e4:09:3a:60:
                    d3:8c:59:94:7c:be:3f:66:89:a8:dd:6f:dd:86:aa:
                    7a:73:47:c8:6f:73:8c:09:94:29:05:6b:35:9a:87:
                    6b:5a:1d:95:20:4b:c0:6c:29:ca:15:ff:76:0f:d5:
                    dc:fb:19:17:4f:26:3a:25:21:94:e1:7a:e7:88:04:
                    d4:d5:a4:33:95:05:4c:1c:56:7b:9b:91:44:d1:58:
                    4b:d4:c1:00:23:54:75:59:11:4d:d5:3c:e5:0c:e8:
                    89:54:e3:5d:e9:cd:59:61:72:70:e5:ab:a7:f6:b6:
                    30:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D6:47:0C:D3:22:B3:14:50:0D:0E:9A:E5:2E:B2:1E:6D:B9:8D:1B
            X509v3 Authority Key Identifier:
                keyid:B1:74:1A:97:BC:33:81:12:39:71:E5:01:CF:06:70:4D:BC:D8:97:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/1/B1741A97BC3381123971E501CF06704DBCD89710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1741A97BC3381123971E501CF06704DBCD89710.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/1/323830343a366232383a3a2f33322d3332203d3e20323730333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b28::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:2f:29:0f:6d:80:f8:b4:c8:79:58:b0:52:f8:a2:cb:6d:00:
         dd:65:55:4c:65:e0:70:58:e6:cb:29:a2:c2:97:ea:4e:57:b5:
         88:74:65:1f:55:8e:bc:f1:6d:65:31:f7:c3:0a:85:9c:45:46:
         3a:e4:0f:42:eb:49:61:ba:2f:99:fe:05:21:a2:a1:76:30:8c:
         1f:33:89:8f:30:b6:77:49:38:b4:6d:6c:40:b0:0f:a6:03:dc:
         20:f3:c1:80:66:3f:9a:d8:02:04:10:d8:32:f9:5b:e8:3e:6a:
         80:76:86:d1:c5:67:fe:85:e9:38:b6:a2:ad:c7:25:1d:68:91:
         76:62:65:87:44:f9:92:02:96:ea:8e:46:7a:07:fc:49:6d:93:
         42:be:6b:c7:f6:21:9e:f5:e5:c2:43:64:54:47:6f:f5:42:56:
         ef:9c:df:3b:0f:bf:96:a0:51:fa:9d:1a:b9:ae:56:6d:ef:9a:
         63:e3:3b:ac:e8:fa:53:70:4b:33:5e:42:63:9d:22:54:bd:a6:
         a8:d1:45:7f:79:ce:86:44:d1:5f:22:a3:47:af:7f:be:e2:c6:
         5f:78:53:17:3b:00:cc:b4:9a:a4:f2:b6:d3:15:92:e8:7c:96:
         42:95:17:b3:7b:0f:4b:8e:f4:50:08:39:ba:28:2c:c0:52:ed:
         77:d8:f9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:15:23 2024 by rpki-client on console-fra.rpki-client.org