Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/323830343a376134303a3a2f33342d3334203d3e20323731333538.roa
File:                     323830343a376134303a3a2f33342d3334203d3e20323731333538.roa (raw, json)
Hash identifier:          nIDwmvBlx2zwJRAsbnHzbaqL496GA+RfECw/gbNEaLY=
Subject key identifier:   EE:9C:18:A9:30:11:4F:12:FD:69:1C:5E:67:3C:F5:6C:98:4B:8F:42
Certificate issuer:       /CN=DBEBCDAE269710D73241E51692395DA587CA9198
Certificate serial:       42518388A9386FF1804CC12B543889956C71522D
Authority key identifier: DB:EB:CD:AE:26:97:10:D7:32:41:E5:16:92:39:5D:A5:87:CA:91:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBEBCDAE269710D73241E51692395DA587CA9198.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/323830343a376134303a3a2f33342d3334203d3e20323731333538.roa
Signing time:             Thu 21 Nov 2024 13:11:20 +0000
ROA not before:           Thu 21 Nov 2024 13:06:20 +0000
ROA not after:            Thu 20 Nov 2025 13:11:20 +0000
asID:                     271358
IP address blocks:        2804:7a40::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/DBEBCDAE269710D73241E51692395DA587CA9198.crl
                          rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/DBEBCDAE269710D73241E51692395DA587CA9198.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBEBCDAE269710D73241E51692395DA587CA9198.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:51:83:88:a9:38:6f:f1:80:4c:c1:2b:54:38:89:95:6c:71:52:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBEBCDAE269710D73241E51692395DA587CA9198
        Validity
            Not Before: Nov 21 13:06:20 2024 GMT
            Not After : Nov 20 13:11:20 2025 GMT
        Subject: CN=EE9C18A930114F12FD691C5E673CF56C984B8F42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fc:3f:45:17:e2:3a:27:6c:b8:f7:5d:55:25:
                    ea:63:65:ed:e6:ba:97:c2:52:d4:ae:ad:db:42:48:
                    d9:fb:a3:84:09:18:00:b9:43:32:7a:86:12:68:23:
                    a5:ed:67:80:e6:26:7e:88:c1:c9:0f:fa:e4:bb:8c:
                    91:5e:90:79:c8:9c:45:53:bc:04:32:c0:a9:fb:1b:
                    4f:05:3d:5c:c6:60:27:c8:4f:3a:91:2d:8c:b7:37:
                    a3:b0:ac:d3:7d:bf:58:f7:4f:68:4d:ce:54:8e:cf:
                    17:4b:1c:80:3c:ec:6f:5a:30:38:07:96:3f:30:89:
                    46:14:3a:bc:e2:cf:3b:c8:85:76:8c:ef:1c:8b:c7:
                    c9:3e:85:90:47:45:52:2a:3c:4a:65:95:c2:59:cd:
                    9a:0e:87:45:26:be:31:33:19:4c:b5:67:8c:1b:34:
                    d3:e7:7c:a0:12:a8:ca:71:be:bc:12:c5:51:6d:72:
                    3f:12:96:4a:85:52:bc:cb:ab:e4:1d:b6:c8:45:ea:
                    8b:68:b7:a2:30:b5:91:4b:b5:7c:95:60:61:16:69:
                    ee:75:65:4b:cf:dd:35:64:78:11:c0:c9:60:5d:b5:
                    4b:ee:6d:ff:5d:8e:e7:f6:03:7a:8c:d4:07:61:d1:
                    c7:08:08:38:32:c2:d6:50:14:76:f9:78:54:58:a2:
                    be:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9C:18:A9:30:11:4F:12:FD:69:1C:5E:67:3C:F5:6C:98:4B:8F:42
            X509v3 Authority Key Identifier:
                keyid:DB:EB:CD:AE:26:97:10:D7:32:41:E5:16:92:39:5D:A5:87:CA:91:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/DBEBCDAE269710D73241E51692395DA587CA9198.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBEBCDAE269710D73241E51692395DA587CA9198.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/323830343a376134303a3a2f33342d3334203d3e20323731333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a40::/34

    Signature Algorithm: sha256WithRSAEncryption
         5c:97:6a:ec:49:83:01:a3:48:4e:88:7d:70:96:56:ca:1d:ad:
         8b:84:9f:1e:2b:62:36:6d:36:c6:a0:84:7f:4b:4e:12:f9:91:
         a4:d7:e0:fc:a8:5b:67:92:7f:83:a2:ac:62:58:5c:75:3d:8d:
         18:d0:35:9c:be:d7:0d:19:16:5a:cd:b1:3d:50:d5:c0:52:31:
         1e:49:92:4b:49:8a:ae:c9:9f:a4:5d:6f:b5:9d:37:4d:03:9d:
         57:1d:e3:69:b0:7b:90:70:c8:56:af:65:a6:f1:ae:15:c2:f9:
         e7:82:e0:5e:36:c3:1d:6a:f4:03:02:ea:d8:fb:c2:bb:df:4c:
         30:42:3e:58:d5:3f:5d:2b:88:9f:46:87:99:57:13:58:b0:39:
         10:3f:e9:0e:00:95:5c:aa:ae:4d:63:f0:7a:2b:78:58:47:67:
         c8:d3:97:77:20:d0:57:80:96:f9:16:5a:f4:ad:13:24:ab:b1:
         48:98:0e:02:f5:f3:86:4b:7e:2f:01:d1:e0:6d:0a:6a:72:9e:
         01:1e:03:fe:ba:27:0e:0c:1d:0b:ac:34:10:60:4d:24:dd:17:
         92:48:bf:fd:7b:a4:be:b4:ea:fe:40:39:db:74:a0:7d:da:55:
         ee:6e:ad:a1:cf:3f:09:c4:17:7c:57:e8:fd:7b:91:2e:64:50:
         a1:61:e6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:03 2024 by rpki-client on console-fra.rpki-client.org