Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/323830343a376539303a3a2f33382d3338203d3e20323731363332.roa
File:                     323830343a376539303a3a2f33382d3338203d3e20323731363332.roa (raw, json)
Hash identifier:          4OMmWuIeze3ATbaVQy0FmtV/DL5TwfBYS32mdvfWaOo=
Subject key identifier:   87:7A:AB:E2:FC:2D:C6:7B:C5:99:04:C0:86:D2:96:F7:B5:97:B0:0D
Certificate issuer:       /CN=450D2460BB579B573599E83A5DA3018696A0F8F6
Certificate serial:       6C0FD04F3D3CCCF12783F10CDC1F923494DAE2A2
Authority key identifier: 45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/323830343a376539303a3a2f33382d3338203d3e20323731363332.roa
Signing time:             Thu 04 Apr 2024 17:08:23 +0000
ROA not before:           Thu 04 Apr 2024 17:03:23 +0000
ROA not after:            Thu 03 Apr 2025 17:08:23 +0000
asID:                     271632
IP address blocks:        2804:7e90::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl
                          rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0f:d0:4f:3d:3c:cc:f1:27:83:f1:0c:dc:1f:92:34:94:da:e2:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450D2460BB579B573599E83A5DA3018696A0F8F6
        Validity
            Not Before: Apr  4 17:03:23 2024 GMT
            Not After : Apr  3 17:08:23 2025 GMT
        Subject: CN=877AABE2FC2DC67BC59904C086D296F7B597B00D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4e:97:96:de:51:44:02:54:85:a4:ef:0c:7a:
                    06:ac:49:5c:b9:77:2b:8f:7e:f9:d3:95:e3:c5:37:
                    29:3f:cb:c7:53:6c:21:34:38:ee:29:f5:55:d6:f1:
                    48:52:18:d6:a6:9a:41:2e:01:6d:8f:7f:63:a8:28:
                    30:a5:c7:3c:26:3e:3f:24:38:8a:b5:b1:0d:86:c4:
                    60:e8:10:15:73:cd:60:84:dc:9b:bd:b9:da:16:b7:
                    0f:12:0f:c0:fc:12:da:75:44:3e:13:5f:3c:cb:4e:
                    04:b9:f0:33:b6:84:fa:61:53:a4:7d:bc:0b:98:8e:
                    59:f4:cf:c5:79:48:40:09:75:5a:20:0d:0e:07:12:
                    84:c3:f0:70:3e:74:26:96:ef:fa:61:26:f4:f3:a6:
                    12:c8:b8:84:74:73:9f:91:bf:80:4d:83:ab:ee:2f:
                    36:54:66:e6:70:58:77:82:72:0c:e1:6e:e6:37:1a:
                    03:3a:06:19:bd:00:95:5e:dd:41:ec:6e:3e:ba:87:
                    6c:27:ea:54:bd:dd:ea:a0:bd:c3:fa:d4:a2:06:dc:
                    7c:0e:be:ef:f2:f8:46:e4:38:ad:95:0b:33:83:41:
                    de:78:80:ee:6f:be:9c:90:07:24:48:b0:41:b7:6a:
                    29:7b:52:7f:21:08:6f:e1:32:85:c7:03:5b:f7:12:
                    f8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7A:AB:E2:FC:2D:C6:7B:C5:99:04:C0:86:D2:96:F7:B5:97:B0:0D
            X509v3 Authority Key Identifier:
                keyid:45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/323830343a376539303a3a2f33382d3338203d3e20323731363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e90::/38

    Signature Algorithm: sha256WithRSAEncryption
         8c:5a:cf:4b:3f:b2:89:ab:68:08:7f:04:77:93:1d:1e:1b:3c:
         10:b1:35:bf:39:35:10:ce:e3:79:26:24:79:a0:36:6f:67:76:
         d2:fe:3b:52:39:f4:95:b8:d3:f4:c5:75:48:fd:6e:7f:4f:ed:
         f0:d5:96:f7:14:ee:7b:30:ca:67:20:bc:6b:31:c1:31:96:43:
         45:e5:78:f6:4a:dc:49:fb:cd:e8:06:9c:98:cb:c5:79:d0:d6:
         32:8a:71:7b:99:0e:8c:7b:e5:ce:ed:65:87:fb:15:0e:04:3e:
         05:c2:d6:c2:da:f7:90:ac:5d:ff:b9:93:0a:d7:02:57:01:9a:
         6f:f4:bf:b3:b8:95:35:ee:9d:14:ee:4e:ef:e0:1c:80:4d:43:
         3c:2e:3b:c7:93:93:38:71:a6:d5:6d:01:e0:80:2b:b2:9b:25:
         ff:65:20:94:d0:4d:9f:ff:38:7e:a1:fd:d6:a1:0b:0c:29:4d:
         34:a0:01:71:a0:04:b3:cf:b6:77:81:72:5e:54:82:31:3f:42:
         57:e7:70:75:34:90:5b:e4:5d:56:d7:3f:29:ff:88:ec:93:66:
         74:31:20:ec:ee:2e:47:79:76:c3:1e:04:4c:5e:d8:d4:1b:a4:
         ce:9e:7a:1c:6d:8e:ff:44:be:9c:83:1f:a2:45:5b:a9:93:95:
         ad:e7:af:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:45 2024 by rpki-client on console-ams.rpki-client.org