Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a343030303a3a2f33342d3334203d3e20323731343738.roa
File:                     323830343a376332343a343030303a3a2f33342d3334203d3e20323731343738.roa (raw, json)
Hash identifier:          xime1ESlDmcU/ubogi3o0TEFsGjGvoctB7eLEvLJlHI=
Subject key identifier:   29:24:9F:90:42:9B:91:83:1B:42:0E:D5:89:A8:DD:04:59:DA:84:01
Certificate issuer:       /CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400
Certificate serial:       340782CEE14635DA0ADBE28FF4BF0F0BEDDD6081
Authority key identifier: E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a343030303a3a2f33342d3334203d3e20323731343738.roa
Signing time:             Fri 13 Dec 2024 15:43:21 +0000
ROA not before:           Fri 13 Dec 2024 15:38:21 +0000
ROA not after:            Fri 12 Dec 2025 15:43:21 +0000
asID:                     271478
IP address blocks:        2804:7c24:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl
                          rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:07:82:ce:e1:46:35:da:0a:db:e2:8f:f4:bf:0f:0b:ed:dd:60:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400
        Validity
            Not Before: Dec 13 15:38:21 2024 GMT
            Not After : Dec 12 15:43:21 2025 GMT
        Subject: CN=29249F90429B91831B420ED589A8DD0459DA8401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:48:c7:08:e4:fe:51:7a:47:e2:d8:d4:47:29:
                    4a:22:38:e3:33:6c:8b:81:1f:7e:6f:d3:57:9e:99:
                    46:79:3b:02:13:31:0c:85:95:7e:98:4b:21:6a:57:
                    b2:d8:a5:d8:c6:72:0e:72:d8:37:6f:19:9d:01:04:
                    f4:3e:5b:5e:8c:af:d9:3b:cc:43:73:70:bf:9a:6a:
                    a2:ec:c4:95:ae:f9:20:bb:32:59:6d:e5:d5:de:e2:
                    85:13:3f:9e:d9:22:c0:29:96:27:73:8a:ef:5c:df:
                    8b:31:ba:50:2e:b6:8c:59:ec:25:dd:44:3a:6e:a6:
                    d0:f1:ff:41:4b:d2:65:89:14:ae:d4:fb:88:80:e5:
                    e0:05:7c:49:17:03:be:6a:a6:47:e0:33:1d:ca:fc:
                    4e:35:b5:4a:7a:7a:03:7a:2f:6d:66:d4:b0:44:6f:
                    92:bc:86:ba:42:8d:fa:1d:75:ea:5c:ba:4c:e1:83:
                    a8:12:02:8c:79:23:38:a2:90:a4:83:35:64:a8:57:
                    d2:04:82:83:b3:cf:d1:be:63:d3:8c:59:09:d3:6d:
                    32:0f:0b:36:57:8b:31:1a:e1:80:28:95:d2:8c:c0:
                    a7:0c:4f:6c:c8:f7:64:f5:7a:a6:21:13:be:61:75:
                    75:ac:38:8e:71:c6:9a:32:b6:bb:9c:4a:c4:d4:29:
                    02:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:24:9F:90:42:9B:91:83:1B:42:0E:D5:89:A8:DD:04:59:DA:84:01
            X509v3 Authority Key Identifier:
                keyid:E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a343030303a3a2f33342d3334203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c24:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2c:17:c3:a0:1b:ba:45:5f:77:c0:55:24:e9:53:d0:c6:de:a5:
         08:87:02:7c:c3:91:2c:e4:fd:4b:1d:7e:64:0e:66:17:c7:b0:
         83:77:d7:ec:53:1a:34:91:3a:bc:98:bd:ee:f4:ff:d3:53:c2:
         3c:39:4e:43:71:5a:2a:7c:2f:d6:c7:fd:7d:5a:89:20:4a:13:
         f4:fb:e8:c0:a1:23:47:35:ff:a4:9d:ef:f2:6b:fd:d6:75:e7:
         bb:6b:b3:28:18:1f:9d:c8:96:2a:fc:2d:9e:eb:c0:ad:a2:93:
         58:78:2a:db:49:f0:5d:39:6d:96:5a:3f:eb:7b:23:5b:cc:0a:
         aa:a5:cb:fd:d0:a7:ef:32:bb:bd:65:5a:1e:79:68:53:ba:5e:
         d5:b3:0b:5f:4c:3c:09:97:42:6c:49:60:b3:74:d6:bf:6a:26:
         c4:54:ee:4b:f3:5b:03:d1:16:82:bb:ae:4c:5f:69:8e:aa:a7:
         8e:9a:4a:da:e6:6d:da:f8:8d:f3:d1:be:96:02:c0:d6:58:30:
         b3:ea:98:98:7e:b5:dc:8b:c8:88:e1:a2:f4:9d:ff:d2:3c:c0:
         d2:d6:66:a0:c8:9b:59:9b:c8:96:6b:cb:a9:aa:f5:5c:1c:6e:
         f8:a8:07:dc:b2:16:b6:62:39:4e:cc:ed:c5:4f:12:36:25:83:
         02:84:98:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:01:15 2025 by rpki-client