Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/323830343a376332343a383030303a3a2f33342d3334203d3e20323731343738.roa
File:                     323830343a376332343a383030303a3a2f33342d3334203d3e20323731343738.roa (raw, json)
Hash identifier:          j98GwBOXAhhS3/Bpj8MyGwPJ4PjkNi1EyVZvu/MIPTE=
Subject key identifier:   41:F7:41:D5:E0:77:27:AE:E5:48:91:2C:6F:86:F5:AB:C3:06:F3:48
Certificate issuer:       /CN=2F773A485ECF8F91222BAD172BC73063B0C9107A
Certificate serial:       0F17B828048CF0767BCEAF94829E26F3C6AA8E8F
Authority key identifier: 2F:77:3A:48:5E:CF:8F:91:22:2B:AD:17:2B:C7:30:63:B0:C9:10:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F773A485ECF8F91222BAD172BC73063B0C9107A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/323830343a376332343a383030303a3a2f33342d3334203d3e20323731343738.roa
Signing time:             Thu 04 Apr 2024 17:02:47 +0000
ROA not before:           Thu 04 Apr 2024 16:57:47 +0000
ROA not after:            Thu 03 Apr 2025 17:02:47 +0000
asID:                     271478
IP address blocks:        2804:7c24:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/2F773A485ECF8F91222BAD172BC73063B0C9107A.crl
                          rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/2F773A485ECF8F91222BAD172BC73063B0C9107A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F773A485ECF8F91222BAD172BC73063B0C9107A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:17:b8:28:04:8c:f0:76:7b:ce:af:94:82:9e:26:f3:c6:aa:8e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F773A485ECF8F91222BAD172BC73063B0C9107A
        Validity
            Not Before: Apr  4 16:57:47 2024 GMT
            Not After : Apr  3 17:02:47 2025 GMT
        Subject: CN=41F741D5E07727AEE548912C6F86F5ABC306F348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e4:40:35:f0:e6:9c:93:d4:22:3a:d9:5e:6c:
                    41:3d:0b:e4:77:d0:0e:34:3d:88:67:b5:b1:9f:19:
                    53:ed:0f:6d:ac:30:e8:b4:dd:98:d4:ed:7c:2f:78:
                    67:b7:38:21:49:d4:ce:31:ba:d6:dc:12:6b:a5:34:
                    d6:01:fb:ee:c8:df:e6:6b:fc:ac:47:b0:7c:ee:d6:
                    5b:6c:cd:9c:1c:eb:1f:08:da:a4:f0:d0:02:e5:b7:
                    dc:2d:80:31:10:6b:10:3b:65:1d:7f:0e:72:d3:ed:
                    bb:55:85:9c:e3:a4:f3:ef:72:57:ed:bb:15:bc:2b:
                    0f:98:6d:d7:11:9f:03:41:15:83:9d:47:7a:87:64:
                    e3:b2:ff:b6:9d:a9:05:69:f4:01:1d:dc:ff:8c:f0:
                    62:83:05:3f:55:a1:a4:eb:22:4d:81:57:82:88:01:
                    ce:83:9e:76:10:2f:36:c7:7f:e4:ff:1b:e7:0a:ec:
                    1a:d2:08:14:54:3d:9c:b9:74:44:77:8c:b3:c1:1b:
                    9d:9d:d0:52:32:64:e5:b3:2e:5d:c6:a6:44:85:19:
                    34:1d:71:ae:34:cc:8d:d7:9c:8c:77:ca:b6:b6:c3:
                    3b:bb:8a:b2:d8:be:65:62:bf:f0:6b:be:c9:2f:63:
                    f6:99:b5:f6:3d:07:3f:75:1a:18:c8:4d:50:e4:4f:
                    f8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F7:41:D5:E0:77:27:AE:E5:48:91:2C:6F:86:F5:AB:C3:06:F3:48
            X509v3 Authority Key Identifier:
                keyid:2F:77:3A:48:5E:CF:8F:91:22:2B:AD:17:2B:C7:30:63:B0:C9:10:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/2F773A485ECF8F91222BAD172BC73063B0C9107A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F773A485ECF8F91222BAD172BC73063B0C9107A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/323830343a376332343a383030303a3a2f33342d3334203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c24:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         45:83:70:ec:5d:c8:80:05:01:6d:ef:9c:e2:06:f3:b5:34:20:
         99:6f:e4:f8:79:54:2c:43:4c:da:1e:0c:d3:e9:36:a8:65:2a:
         04:ab:04:27:e5:83:54:b0:f9:77:4c:29:b0:ed:fe:fc:9e:63:
         14:78:3c:f0:48:07:f9:bf:cb:f1:15:b4:df:0e:66:e4:b1:4e:
         74:9c:cc:0c:cc:0e:44:26:4d:3f:f8:7e:0e:5b:f1:fb:04:8a:
         6c:a2:d7:5d:6e:2f:ee:58:f4:94:39:64:fa:19:f6:80:20:02:
         8c:60:9c:c6:f5:42:b4:5a:35:11:d3:87:7b:d0:b6:73:61:bb:
         ce:39:b6:d1:f7:cc:bf:16:11:0f:6a:2b:44:23:8f:a9:56:e2:
         ff:36:3c:08:c8:b9:c5:9e:d2:96:08:e7:88:17:3e:c6:54:7b:
         72:37:75:68:db:0e:e5:e6:99:4a:10:8a:48:aa:62:a3:0e:ba:
         73:03:f5:87:3d:b4:b0:26:eb:b6:a2:ae:99:23:83:54:ca:9e:
         72:b0:23:48:1b:47:c3:9d:23:d0:ee:25:6f:66:55:00:40:07:
         0e:92:1c:2a:d0:39:c9:f8:4b:70:72:39:bb:7d:71:81:67:16:
         3c:7c:78:60:87:74:e9:cf:e7:dc:75:48:a3:cb:a8:51:70:e2:
         da:24:28:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:56 2024 by rpki-client on console-ams.rpki-client.org