Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a643030303a3a2f33362d3336203d3e20323731343738.roa
File:                     323830343a376332343a643030303a3a2f33362d3336203d3e20323731343738.roa (raw, json)
Hash identifier:          V3QXKyf7ii/DRxVZN61e+wpAGr09iTV+QXWivZQlRsM=
Subject key identifier:   22:B7:DB:DD:0D:A8:AB:BD:FF:23:27:EF:EC:DA:B3:D9:39:03:E0:B9
Certificate issuer:       /CN=996B4ACF19CC682F1B6E4549A9A3A004BC03137D
Certificate serial:       467AADD69771EC1D3DA344897D4128C4752E2619
Authority key identifier: 99:6B:4A:CF:19:CC:68:2F:1B:6E:45:49:A9:A3:A0:04:BC:03:13:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a643030303a3a2f33362d3336203d3e20323731343738.roa
Signing time:             Thu 12 Sep 2024 15:11:05 +0000
ROA not before:           Thu 12 Sep 2024 15:06:05 +0000
ROA not after:            Thu 11 Sep 2025 15:11:05 +0000
asID:                     271478
IP address blocks:        2804:7c24:d000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.crl
                          rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7a:ad:d6:97:71:ec:1d:3d:a3:44:89:7d:41:28:c4:75:2e:26:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=996B4ACF19CC682F1B6E4549A9A3A004BC03137D
        Validity
            Not Before: Sep 12 15:06:05 2024 GMT
            Not After : Sep 11 15:11:05 2025 GMT
        Subject: CN=22B7DBDD0DA8ABBDFF2327EFECDAB3D93903E0B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c3:54:a8:bd:42:4a:3e:dd:d0:bf:f0:14:58:
                    3e:ef:66:86:43:cc:db:37:9b:b4:50:c4:f3:e2:59:
                    05:dd:2e:a0:c5:9d:a7:6d:c1:75:ad:8b:89:2b:79:
                    36:fc:c4:92:8d:d0:f2:0e:8e:90:b1:5e:ee:e0:46:
                    a1:79:fa:19:96:8d:c7:23:f8:d1:f9:b7:a3:10:94:
                    a0:c2:63:48:12:61:5f:ed:5d:6b:7a:47:ff:22:f3:
                    ee:e8:a3:e7:9a:55:be:c1:bb:c6:0f:f9:8d:2c:c8:
                    f7:6a:fc:7c:5d:d1:a0:50:0f:4c:04:67:e1:67:2d:
                    e6:22:8e:7e:23:a2:06:42:bb:c0:b3:89:db:f8:b9:
                    42:d4:e1:df:c9:6b:94:38:92:fb:31:cc:25:27:74:
                    2d:08:31:bd:c2:4f:43:38:5b:f1:5e:c2:10:32:a1:
                    83:51:e6:83:98:5e:04:04:88:0c:eb:96:5d:09:e0:
                    da:11:a2:6c:0b:15:d1:3d:c0:81:c5:fc:f4:55:6c:
                    98:67:82:16:b3:d6:13:bd:49:41:73:19:c2:6b:e4:
                    ac:29:30:d7:c2:73:72:90:89:64:10:69:dc:c5:cd:
                    8f:56:f7:a2:36:4a:c7:cf:0e:87:05:3f:9e:49:70:
                    b3:12:11:22:02:93:01:2e:4a:4a:2f:86:25:b0:ca:
                    a7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B7:DB:DD:0D:A8:AB:BD:FF:23:27:EF:EC:DA:B3:D9:39:03:E0:B9
            X509v3 Authority Key Identifier:
                keyid:99:6B:4A:CF:19:CC:68:2F:1B:6E:45:49:A9:A3:A0:04:BC:03:13:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a643030303a3a2f33362d3336203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c24:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6d:f5:94:a9:30:b8:5b:5b:98:9c:40:35:f9:a4:f0:bf:8f:67:
         69:75:12:46:57:0a:c3:86:d5:85:78:59:dd:dd:d8:7c:88:27:
         d7:d3:1f:f6:2a:d7:5e:cc:be:a6:53:4d:91:a4:f1:d4:2b:41:
         c6:ff:e1:8e:35:de:76:30:89:46:b6:1b:cc:4f:b6:2d:46:91:
         d8:fd:2f:90:c4:03:e1:cb:d7:7a:86:bf:fe:c6:db:99:c7:59:
         53:66:d3:05:8f:72:c7:e8:d6:3d:7d:67:f7:2c:63:c4:42:8e:
         1c:c3:41:66:c1:4e:92:92:0b:91:9b:aa:be:19:50:29:b7:7b:
         6e:84:ce:80:55:05:cc:ec:52:52:7c:29:4b:84:04:1c:f2:26:
         ab:dc:a7:89:e2:9f:f6:a4:6e:0f:69:f8:70:a1:cd:5c:a7:94:
         71:43:5f:51:50:e5:fd:8d:25:55:77:4c:cf:fb:05:7f:29:cf:
         e9:e0:21:43:c1:8d:9f:58:5c:b9:b3:a8:cb:47:40:0f:3f:17:
         e4:13:6a:d0:53:b2:77:1f:3a:ff:10:b2:ae:08:53:32:c8:5f:
         8e:7e:d4:93:6a:a4:7e:41:71:2e:aa:d4:7c:31:20:9a:da:e7:
         6f:5c:7b:7e:58:14:dc:05:1e:eb:6a:5f:3d:cd:b5:14:1f:ca:
         ef:2c:9e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:13:40 2024 by rpki-client on console-fra.rpki-client.org