Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a383030303a3a2f33342d3334203d3e20323731343738.roa
File:                     323830343a376332343a383030303a3a2f33342d3334203d3e20323731343738.roa (raw, json)
Hash identifier:          9w8DPA1oGgE95/xJVZ3yUoiVLozbTehc8DNCmIRJGMk=
Subject key identifier:   A0:37:36:03:E8:67:7F:73:4F:75:44:40:6B:44:8F:6D:12:E2:AB:A9
Certificate issuer:       /CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400
Certificate serial:       2FE5ADBD04BE3DA3160ECB70AB5AFEDECBEC0776
Authority key identifier: E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a383030303a3a2f33342d3334203d3e20323731343738.roa
Signing time:             Fri 13 Dec 2024 15:43:23 +0000
ROA not before:           Fri 13 Dec 2024 15:38:23 +0000
ROA not after:            Fri 12 Dec 2025 15:43:23 +0000
asID:                     271478
IP address blocks:        2804:7c24:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl
                          rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 10:10:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e5:ad:bd:04:be:3d:a3:16:0e:cb:70:ab:5a:fe:de:cb:ec:07:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400
        Validity
            Not Before: Dec 13 15:38:23 2024 GMT
            Not After : Dec 12 15:43:23 2025 GMT
        Subject: CN=A0373603E8677F734F7544406B448F6D12E2ABA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4e:48:c4:b6:90:2c:41:c0:29:06:b9:6c:99:
                    6e:d2:07:25:01:d1:ca:b7:2c:ae:c2:73:2d:22:99:
                    e4:37:09:99:a6:e5:29:e0:e0:d4:47:8b:88:ed:0a:
                    fb:86:d3:7c:8a:b4:11:25:ca:7b:45:70:c6:42:15:
                    74:6d:5f:34:a3:3b:3f:5a:62:5e:49:98:d8:cc:67:
                    c3:48:88:7b:e3:8d:92:72:d7:05:58:85:68:30:56:
                    8d:89:69:2d:f4:19:9e:9e:ad:7d:09:e3:65:7d:50:
                    ad:87:65:98:6e:d8:a1:17:98:b0:52:38:43:6f:fe:
                    02:26:d0:b6:17:67:22:19:95:c7:27:b2:26:fa:59:
                    f6:f3:e3:74:0c:05:55:a7:c0:86:47:98:66:eb:04:
                    38:3b:17:9c:76:17:8d:56:1e:d3:05:0f:f0:3a:5d:
                    16:25:9a:ad:00:f9:45:25:03:89:92:e8:b5:d6:1b:
                    f3:8e:77:45:5c:0c:d4:c1:60:7d:e2:54:61:b2:3c:
                    2a:b7:99:04:2f:d0:3f:2b:20:9b:c2:b8:72:53:ce:
                    72:82:29:20:44:84:36:7d:25:55:e7:ab:da:e7:fa:
                    8b:d1:56:eb:0b:6e:7b:72:f2:c9:b9:57:01:fe:dd:
                    77:95:a5:f8:41:0d:ba:01:02:e6:2d:17:f9:ac:fb:
                    94:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:37:36:03:E8:67:7F:73:4F:75:44:40:6B:44:8F:6D:12:E2:AB:A9
            X509v3 Authority Key Identifier:
                keyid:E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a383030303a3a2f33342d3334203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c24:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4c:28:d2:56:e9:05:c7:28:df:e3:f6:19:3f:ea:bb:47:78:0f:
         52:1d:43:82:8b:67:2a:72:b1:75:51:fb:30:89:ce:58:b6:a3:
         b2:19:39:3b:fb:92:0c:88:68:28:db:03:d8:40:c5:6c:16:5b:
         75:87:cb:f2:f0:da:07:79:ac:91:3d:4d:7a:64:0e:0a:25:ab:
         c3:a0:05:41:63:5c:2d:77:89:f5:61:2d:25:5a:12:33:9c:d0:
         99:d3:fa:bd:18:2d:84:71:20:f4:a8:32:1d:ef:5d:a9:3a:f5:
         88:99:33:14:c9:6f:f1:40:84:96:b1:f0:41:52:48:e4:4b:ca:
         07:7e:33:d0:a8:17:79:0f:29:7b:08:fc:e6:e2:7f:44:00:e4:
         fd:6c:12:5b:67:31:b3:d0:f0:44:3e:68:93:b5:f4:1e:be:73:
         a5:5f:1f:b7:09:6b:32:17:71:8b:29:08:e0:ea:52:2f:8c:bf:
         41:eb:a5:e8:70:40:82:1f:49:94:7a:a5:a4:39:2f:15:0c:bf:
         fe:2a:a4:d3:b1:31:f0:15:8b:d6:17:fd:ed:8b:8e:1a:8d:1d:
         f1:ca:81:d1:d7:c2:1c:15:54:79:80:56:8e:3d:b5:db:bc:7e:
         e9:bd:91:36:5a:37:10:83:d9:47:4e:6a:ab:a1:3e:67:ef:bb:
         a3:f0:35:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:00 2025 by rpki-client