Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a343030303a3a2f33342d3334203d3e20323639343136.roa
File:                     323830343a363434303a343030303a3a2f33342d3334203d3e20323639343136.roa (raw, json)
Hash identifier:          7HN/TSkjzYgeWsK9gIzKGBBiTt1Od6sKt9oDfErKNU0=
Subject key identifier:   22:7E:49:2C:FE:8C:18:0A:94:EF:09:E6:DC:51:C8:2B:2F:34:33:0A
Certificate issuer:       /CN=2431B91B2498F01C25C009C9345EE622B155100B
Certificate serial:       5787B786853259A1FA99C75C18BF8036FA0E919B
Authority key identifier: 24:31:B9:1B:24:98:F0:1C:25:C0:09:C9:34:5E:E6:22:B1:55:10:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a343030303a3a2f33342d3334203d3e20323639343136.roa
Signing time:             Wed 30 Oct 2024 15:02:53 +0000
ROA not before:           Wed 30 Oct 2024 14:57:53 +0000
ROA not after:            Wed 29 Oct 2025 15:02:53 +0000
asID:                     269416
IP address blocks:        2804:6440:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.crl
                          rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:87:b7:86:85:32:59:a1:fa:99:c7:5c:18:bf:80:36:fa:0e:91:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2431B91B2498F01C25C009C9345EE622B155100B
        Validity
            Not Before: Oct 30 14:57:53 2024 GMT
            Not After : Oct 29 15:02:53 2025 GMT
        Subject: CN=227E492CFE8C180A94EF09E6DC51C82B2F34330A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6f:ae:c7:8c:96:23:1d:de:f6:ad:af:21:fa:
                    82:21:e3:c6:17:f0:8d:b2:68:05:9b:08:22:81:9b:
                    25:71:b9:8d:49:4b:ae:e3:bb:51:09:fe:69:8b:28:
                    04:16:05:ce:48:4d:02:77:90:94:aa:c7:a7:82:48:
                    0f:cd:88:31:0d:83:47:3b:a9:d2:be:2b:8d:42:a7:
                    17:66:07:4f:1f:65:3d:3e:64:a2:59:6b:02:39:28:
                    ec:c5:3d:ac:fd:b6:ce:41:79:d1:7f:02:38:2e:aa:
                    cf:48:e2:4e:49:df:59:65:ef:3f:db:e0:28:78:3e:
                    98:c6:76:2b:72:76:1c:de:b1:e9:6e:73:c1:46:b2:
                    e2:f3:be:6a:7e:03:57:ff:c2:f1:5c:6f:65:e8:29:
                    fd:c0:74:90:58:23:2a:e4:c8:55:43:7e:a6:1f:de:
                    23:cc:00:af:5c:08:09:b6:08:b2:af:93:62:ec:08:
                    25:01:0b:ea:d9:67:ca:6c:6b:f3:a9:c5:bb:1b:e1:
                    dc:79:a6:72:a9:a9:2d:6d:c6:d3:de:7b:62:93:c2:
                    47:52:4a:0d:51:8f:ee:45:78:2d:77:d9:47:c2:81:
                    13:f3:0c:80:88:f2:88:7a:71:41:8a:4f:5d:3e:df:
                    87:a2:0f:06:c7:a4:e0:2e:10:a5:27:98:43:66:6b:
                    ca:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7E:49:2C:FE:8C:18:0A:94:EF:09:E6:DC:51:C8:2B:2F:34:33:0A
            X509v3 Authority Key Identifier:
                keyid:24:31:B9:1B:24:98:F0:1C:25:C0:09:C9:34:5E:E6:22:B1:55:10:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a343030303a3a2f33342d3334203d3e20323639343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6440:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         64:bd:ac:a1:00:5d:e9:22:a8:c8:74:81:40:06:64:9c:76:74:
         15:1f:fb:aa:58:4e:38:73:29:f4:6f:27:1c:de:d1:97:81:73:
         5b:c3:9f:c2:2c:3f:6d:cd:35:17:14:e6:a4:58:b4:92:4f:cc:
         c0:13:79:00:c8:46:f3:a6:56:0e:c3:c1:61:32:8e:da:f3:65:
         d2:ab:60:94:34:41:9a:a0:ac:cb:1a:75:9d:1a:b7:3e:fa:bc:
         c4:be:3b:c3:49:fd:ef:3a:ed:55:89:86:6c:fc:c6:18:b7:65:
         2a:f6:32:02:d4:98:ff:57:07:fb:a5:07:2b:fe:fd:ec:4c:8e:
         c4:e2:ec:1c:80:3d:83:49:33:88:3c:a8:1b:f0:51:b8:d5:e1:
         78:3a:01:46:ca:4c:2f:a2:33:44:08:06:27:77:26:a5:77:e0:
         27:4b:09:87:25:8c:6c:dc:e1:d1:99:81:a5:e7:26:09:66:15:
         ff:a5:70:6c:e9:a0:e0:06:ad:8b:e2:eb:97:5b:26:7c:7f:18:
         c2:27:64:5e:bc:ea:7a:f6:19:4d:21:74:cf:f0:c8:6c:60:22:
         65:8b:4a:5a:32:11:be:07:75:3c:a8:80:c2:1d:e1:71:c1:f3:
         fd:e3:1a:02:19:b1:50:aa:05:a7:5b:0b:e0:2e:4b:b2:5d:10:
         b3:f3:52:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:39 2024 by rpki-client on console-ams.rpki-client.org