Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/323830343a316237303a343030303a3a2f33342d3334203d3e203631373238.roa
File:                     323830343a316237303a343030303a3a2f33342d3334203d3e203631373238.roa (raw, json)
Hash identifier:          VEuaDXYugq4hf1xo+CwVR+W0UX7piA5ceyJixQpNiok=
Subject key identifier:   C7:F4:1E:08:AE:B1:F5:41:66:A2:56:2D:DA:85:9D:C6:3A:A5:FC:61
Certificate issuer:       /CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
Certificate serial:       0254A48737F55CE04E30268E7C67E3FAA3423EDC
Authority key identifier: DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/323830343a316237303a343030303a3a2f33342d3334203d3e203631373238.roa
Signing time:             Thu 16 May 2024 21:09:51 +0000
ROA not before:           Thu 16 May 2024 21:04:51 +0000
ROA not after:            Thu 15 May 2025 21:09:51 +0000
asID:                     61728
IP address blocks:        2804:1b70:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl
                          rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:54:a4:87:37:f5:5c:e0:4e:30:26:8e:7c:67:e3:fa:a3:42:3e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
        Validity
            Not Before: May 16 21:04:51 2024 GMT
            Not After : May 15 21:09:51 2025 GMT
        Subject: CN=C7F41E08AEB1F54166A2562DDA859DC63AA5FC61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4f:45:ae:0f:88:63:c3:13:b9:b5:5f:80:cc:
                    76:b7:32:35:52:e8:dd:d5:8d:ca:44:5e:58:d3:46:
                    4c:39:4d:55:0b:23:d7:f9:81:d0:81:64:8d:ac:6a:
                    5c:12:48:58:82:96:ee:8b:64:2a:bb:60:23:2a:52:
                    fb:d4:31:3d:f7:1d:21:c5:05:ee:85:0f:94:c1:d6:
                    8c:91:0b:4f:64:73:da:a5:3d:88:44:3a:7b:21:17:
                    1c:93:30:a9:86:f8:32:95:6b:df:c0:7e:31:a1:6c:
                    13:c8:ea:e5:93:49:71:c9:80:0b:7b:d4:d7:6b:f6:
                    0d:3e:6c:0e:d3:d8:be:4b:c7:68:be:84:d3:2c:81:
                    91:6e:12:23:81:6e:a9:d4:2e:c8:82:8c:19:a0:47:
                    3f:7d:9f:77:e9:ea:e4:80:d4:5e:49:5f:61:c9:1f:
                    81:67:87:21:ca:cd:ad:99:0e:b8:bd:d8:a4:98:b4:
                    c7:46:e2:89:c2:ef:52:71:f3:13:48:1a:30:55:53:
                    23:25:fa:35:06:d4:8e:e6:76:f6:ed:64:33:21:0f:
                    b8:65:9f:7d:8e:66:92:6b:d2:4b:d3:e4:be:d5:f5:
                    4a:61:2a:3a:e4:5b:7d:c9:b5:5f:1d:51:44:ca:71:
                    f8:33:e2:37:d8:25:50:5a:4a:52:a9:81:0d:ee:78:
                    fb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F4:1E:08:AE:B1:F5:41:66:A2:56:2D:DA:85:9D:C6:3A:A5:FC:61
            X509v3 Authority Key Identifier:
                keyid:DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/323830343a316237303a343030303a3a2f33342d3334203d3e203631373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b70:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         57:1a:d4:46:8b:5d:46:40:6e:14:70:46:92:b5:1d:7b:4c:5c:
         95:34:d0:52:a5:fe:b7:0f:5e:0d:97:f6:e3:63:5a:75:db:89:
         00:1f:b2:0a:3f:e5:a0:f7:63:60:e1:bc:bf:f6:47:26:fa:e5:
         1e:b3:bc:81:f2:9f:a1:04:05:9a:23:63:37:18:c6:33:7e:36:
         64:c9:f7:fa:72:05:1c:30:37:e8:9a:9f:f9:83:83:c0:a4:df:
         29:67:be:91:77:5d:1c:f5:de:88:7c:f9:aa:2b:32:71:66:8f:
         47:2e:e8:ab:da:47:d2:54:4d:6c:b2:02:5b:68:bd:b5:3f:b7:
         0e:17:49:74:25:e7:87:25:91:7e:66:be:73:41:ea:17:60:48:
         fd:a4:26:5c:f1:90:96:9f:10:c7:e8:c8:5e:07:0d:9f:76:97:
         5f:97:0c:9c:5b:6f:89:d7:fa:ef:d9:05:5d:dd:27:9d:60:66:
         30:29:22:cd:6b:07:89:85:ff:2a:fb:1a:86:67:e6:60:9d:25:
         50:ec:c7:0d:37:62:63:09:7b:dc:f8:f2:d3:cb:4b:41:88:cc:
         7c:9d:35:99:fe:57:02:74:83:6c:4d:c1:51:0c:64:74:30:15:
         64:73:27:a2:fe:39:30:60:18:e7:ae:e9:f5:00:4b:46:c2:d5:
         75:94:ef:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:52 2024 by rpki-client on console-fra.rpki-client.org