Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/323830343a376539303a3430303a3a2f33382d3338203d3e20323731363332.roa
File:                     323830343a376539303a3430303a3a2f33382d3338203d3e20323731363332.roa (raw, json)
Hash identifier:          Ba9bU3KpItF0RgGguIYIKrV5CQ0oZqFeo71v3JakV5Y=
Subject key identifier:   6D:D6:BB:72:BF:EA:2E:B2:2A:40:CE:98:59:A4:57:56:F5:C4:08:68
Certificate issuer:       /CN=450D2460BB579B573599E83A5DA3018696A0F8F6
Certificate serial:       34C427CE600548636F8B54CFA13FCB4DCE69CBB1
Authority key identifier: 45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/323830343a376539303a3430303a3a2f33382d3338203d3e20323731363332.roa
Signing time:             Thu 04 Apr 2024 17:08:23 +0000
ROA not before:           Thu 04 Apr 2024 17:03:23 +0000
ROA not after:            Thu 03 Apr 2025 17:08:23 +0000
asID:                     271632
IP address blocks:        2804:7e90:400::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl
                          rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c4:27:ce:60:05:48:63:6f:8b:54:cf:a1:3f:cb:4d:ce:69:cb:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450D2460BB579B573599E83A5DA3018696A0F8F6
        Validity
            Not Before: Apr  4 17:03:23 2024 GMT
            Not After : Apr  3 17:08:23 2025 GMT
        Subject: CN=6DD6BB72BFEA2EB22A40CE9859A45756F5C40868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f4:db:5a:39:3c:d9:2e:73:ed:1d:82:b0:ff:
                    57:41:b7:10:11:62:46:9d:18:07:8c:38:f3:95:f5:
                    88:d2:32:dd:a2:50:a3:f5:b3:d8:e3:e5:8a:28:6d:
                    4f:10:c1:60:f2:68:97:f2:c7:dd:3c:96:31:a4:a1:
                    b6:10:e6:3f:c8:3d:77:da:02:ba:ee:9e:4e:92:3a:
                    f0:4d:8a:59:77:f0:1c:b6:e9:40:26:f0:7f:18:d2:
                    32:9d:ad:3a:b1:bf:11:03:1c:21:ae:dc:e1:29:65:
                    87:98:ed:11:a3:2e:40:16:9b:01:e5:c8:cd:41:03:
                    02:b2:f5:01:12:5d:56:3d:92:88:8f:5d:59:f9:38:
                    fe:ed:55:50:ae:c4:6b:a8:f3:85:ae:70:cb:91:24:
                    f5:6e:d9:ab:c2:62:b8:1a:82:a7:83:0d:2e:17:e0:
                    74:64:d1:2c:6e:cf:8c:6e:50:2b:e0:79:4d:3d:76:
                    15:52:60:25:9c:30:71:e0:77:70:65:4f:5c:2a:05:
                    aa:62:cc:d9:2d:12:e1:48:85:0c:8d:72:a1:6b:7a:
                    9f:f0:78:3f:0d:21:02:ad:1c:75:e4:40:70:c0:63:
                    ef:81:c5:53:5b:33:09:1f:13:64:c6:7a:07:93:b8:
                    0c:79:ce:33:cc:d6:6c:81:1c:39:02:b3:1d:58:82:
                    2f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D6:BB:72:BF:EA:2E:B2:2A:40:CE:98:59:A4:57:56:F5:C4:08:68
            X509v3 Authority Key Identifier:
                keyid:45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/323830343a376539303a3430303a3a2f33382d3338203d3e20323731363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e90:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         10:5d:ee:54:67:e1:0e:3b:fa:c1:2a:2c:97:db:a4:65:9e:f3:
         ac:bc:f1:3b:03:35:59:fa:df:82:0e:f3:c4:f1:98:f3:f2:20:
         56:25:65:e1:8b:75:be:bb:04:2c:2d:f6:2d:fb:51:2d:24:f2:
         67:78:e0:bb:2b:5e:6c:60:03:2c:7c:03:2b:50:82:08:6b:b4:
         15:0d:eb:70:31:80:7f:66:fd:85:ff:d0:28:50:ad:18:a6:7a:
         be:e8:7b:a6:1b:83:d4:a8:c4:2b:a2:8e:49:7a:15:ad:07:df:
         0e:1d:24:64:8f:a4:11:1c:cd:9d:5f:88:44:13:b0:4e:b4:c7:
         55:4a:ae:03:e3:ec:58:b2:b2:60:55:de:5b:83:9b:15:5f:5e:
         ef:3f:c0:a8:9f:4f:4a:83:25:94:b6:cc:1a:c3:0c:60:0a:22:
         7b:36:f9:83:24:2d:7a:75:a9:a4:b2:b5:94:e8:40:5b:b5:1d:
         8d:ab:74:17:59:7f:e5:0d:fc:44:67:ca:0e:28:8b:d0:97:71:
         9e:0a:b5:d9:11:4e:ac:1d:90:15:3a:49:59:4f:0b:8a:60:3a:
         1b:ea:24:04:f8:f6:cf:5a:41:98:7d:9d:0d:10:8f:cc:f2:22:
         62:2c:a4:56:d3:85:9b:9b:f6:8a:ed:7f:36:92:43:80:fa:e1:
         95:49:44:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:43 2024 by rpki-client on console-fra.rpki-client.org