Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a633030303a3a2f33342d3334203d3e20323639343136.roa
File:                     323830343a363434303a633030303a3a2f33342d3334203d3e20323639343136.roa (raw, json)
Hash identifier:          n037Jel2MXDAoJ86NeifCYAI491r1VzSA4gvFHBI9I4=
Subject key identifier:   6D:B0:53:88:2B:52:E4:9F:D8:1E:C8:06:24:D3:16:FA:0E:D0:BD:98
Certificate issuer:       /CN=2431B91B2498F01C25C009C9345EE622B155100B
Certificate serial:       2282FB617055A62C57999AD1D3F92039D609E57E
Authority key identifier: 24:31:B9:1B:24:98:F0:1C:25:C0:09:C9:34:5E:E6:22:B1:55:10:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a633030303a3a2f33342d3334203d3e20323639343136.roa
Signing time:             Wed 30 Oct 2024 15:02:54 +0000
ROA not before:           Wed 30 Oct 2024 14:57:54 +0000
ROA not after:            Wed 29 Oct 2025 15:02:54 +0000
asID:                     269416
IP address blocks:        2804:6440:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.crl
                          rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:82:fb:61:70:55:a6:2c:57:99:9a:d1:d3:f9:20:39:d6:09:e5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2431B91B2498F01C25C009C9345EE622B155100B
        Validity
            Not Before: Oct 30 14:57:54 2024 GMT
            Not After : Oct 29 15:02:54 2025 GMT
        Subject: CN=6DB053882B52E49FD81EC80624D316FA0ED0BD98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7a:2f:ef:fa:2c:d7:07:f0:1b:b4:1c:0d:7e:
                    63:87:25:64:53:be:40:99:75:bb:c2:b5:6d:ab:ab:
                    ac:b9:29:e8:fe:56:2b:d8:72:5e:c5:8b:f2:d1:e2:
                    7b:04:fa:f1:e9:f4:22:30:d7:c8:7a:5e:36:84:b1:
                    2c:22:df:5f:93:b9:95:20:c2:d4:5f:7f:46:1c:07:
                    74:d7:51:7c:91:88:48:47:65:fd:0c:76:b2:b0:81:
                    13:0c:49:f2:e4:f5:ca:df:5b:67:bb:ab:af:52:c4:
                    33:8e:09:45:f7:07:e3:e8:76:da:be:36:bc:98:ef:
                    a0:d6:4f:c5:b0:9f:b6:4a:42:fb:38:f5:5d:ed:59:
                    fa:b7:ba:a2:92:41:bf:85:82:ca:23:8c:49:cd:a8:
                    2c:92:49:ab:cb:df:f0:a4:ad:0e:59:79:e5:19:ae:
                    5f:3c:ad:1d:97:e7:45:d9:0e:db:27:86:46:26:86:
                    2d:0f:75:38:f6:d9:f2:f3:98:50:95:ad:7b:5d:f4:
                    3e:fd:42:d3:87:73:ee:dc:72:3b:46:8e:b2:6e:8a:
                    9d:1f:e5:24:e1:09:63:70:99:46:45:a3:a1:90:68:
                    4f:8b:a4:ae:67:61:b4:e8:58:1f:b2:97:18:6c:65:
                    86:79:d3:d5:4c:4b:57:45:ae:8e:9d:9f:18:ac:9e:
                    62:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B0:53:88:2B:52:E4:9F:D8:1E:C8:06:24:D3:16:FA:0E:D0:BD:98
            X509v3 Authority Key Identifier:
                keyid:24:31:B9:1B:24:98:F0:1C:25:C0:09:C9:34:5E:E6:22:B1:55:10:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a633030303a3a2f33342d3334203d3e20323639343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6440:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         55:04:18:49:70:a9:88:a2:dc:2f:5b:16:27:96:97:1e:b6:d0:
         91:97:9c:46:c5:e2:98:d2:4b:d7:3a:23:e4:15:28:58:d6:82:
         1b:8a:f4:c7:be:a6:77:c1:a3:a3:bd:52:f7:53:7b:67:22:95:
         f5:d8:80:ba:17:41:a3:8c:0e:24:35:8a:01:6c:ff:39:7a:61:
         d5:66:21:b8:0d:9a:d7:35:c5:2c:33:51:ac:cc:b1:4b:33:91:
         ef:88:6b:2b:bf:a9:21:6a:32:a0:0d:19:dc:5d:e7:92:89:64:
         62:26:9e:13:0a:d8:2b:7f:9c:70:7f:d1:ae:e3:b4:fc:45:43:
         28:0e:76:2f:15:b0:7f:2f:82:29:6e:80:9e:bd:e4:6b:b7:97:
         d4:1a:ea:47:81:00:4a:47:eb:a4:31:53:cd:64:ee:dd:31:59:
         91:5a:37:cc:2d:29:99:f4:0f:7f:c4:9a:02:13:b6:2d:1b:52:
         80:77:c4:e0:2b:0d:91:42:6e:93:9d:58:53:2f:7b:08:49:95:
         fc:bb:22:d1:8a:1c:a5:b5:06:03:73:75:b5:07:ba:fe:51:c0:
         1a:9e:b8:78:7d:97:c1:98:1e:35:8e:c9:70:3a:f8:6c:a3:e3:
         07:7d:8b:75:19:2c:86:4d:89:b5:1c:ce:39:3d:9d:02:a5:6b:
         bb:3d:1c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:53 2024 by rpki-client on console-fra.rpki-client.org