Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/323830343a373361343a3a2f33322d3438203d3e20323730393238.roa
File:                     323830343a373361343a3a2f33322d3438203d3e20323730393238.roa (raw, json)
Hash identifier:          jpgwsncLESxYxpRT8Zk44lFvx7XLpSbtyn32iL0Z1kQ=
Subject key identifier:   5D:DF:CD:26:B7:B8:48:6B:3D:B1:5B:DC:EE:8A:E6:E6:DA:E6:7C:CC
Certificate issuer:       /CN=679A17C4EAF3C5219242E0F4694C02B28502C2BE
Certificate serial:       66D1A70CC64AB3C788B596B574067C4C971CDB69
Authority key identifier: 67:9A:17:C4:EA:F3:C5:21:92:42:E0:F4:69:4C:02:B2:85:02:C2:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/679A17C4EAF3C5219242E0F4694C02B28502C2BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/323830343a373361343a3a2f33322d3438203d3e20323730393238.roa
Signing time:             Wed 23 Oct 2024 22:03:30 +0000
ROA not before:           Wed 23 Oct 2024 21:58:30 +0000
ROA not after:            Wed 22 Oct 2025 22:03:30 +0000
asID:                     270928
IP address blocks:        2804:73a4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/679A17C4EAF3C5219242E0F4694C02B28502C2BE.crl
                          rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/679A17C4EAF3C5219242E0F4694C02B28502C2BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/679A17C4EAF3C5219242E0F4694C02B28502C2BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d1:a7:0c:c6:4a:b3:c7:88:b5:96:b5:74:06:7c:4c:97:1c:db:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679A17C4EAF3C5219242E0F4694C02B28502C2BE
        Validity
            Not Before: Oct 23 21:58:30 2024 GMT
            Not After : Oct 22 22:03:30 2025 GMT
        Subject: CN=5DDFCD26B7B8486B3DB15BDCEE8AE6E6DAE67CCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:45:f2:ec:ae:f7:09:65:e1:4d:c9:2a:d4:e6:
                    80:77:48:80:b5:97:a6:54:cb:3c:56:7c:c7:bb:64:
                    0c:8a:a8:21:83:9a:65:37:9c:44:5c:81:0a:33:cd:
                    7f:e2:91:42:b2:5a:92:00:25:87:41:d6:a6:46:64:
                    1c:f5:56:77:e4:48:75:00:8a:03:9c:83:f1:62:ce:
                    c4:1d:f1:be:2a:e6:d5:85:62:d0:c9:27:53:7f:06:
                    86:26:68:4c:65:c9:20:7e:ba:a1:d8:04:93:4d:df:
                    d9:2a:21:a4:bf:6f:2b:b6:00:9c:eb:40:7f:49:37:
                    af:14:f6:95:40:1c:97:e7:80:5d:b2:4a:db:e3:a0:
                    23:c3:af:e2:38:d2:7f:a7:75:53:e6:21:4d:b1:30:
                    9e:d1:02:e4:0b:d4:55:29:67:6e:fa:cf:af:2c:d1:
                    ad:cb:a5:44:c3:43:3a:3c:91:23:0d:52:5a:c7:e0:
                    f9:3f:78:57:bb:53:f6:62:6a:02:91:39:cb:06:eb:
                    de:70:32:9c:b0:54:e5:50:fe:3d:b5:12:4f:ab:12:
                    30:35:8f:85:8e:b0:3b:4b:7e:90:d9:60:db:56:e0:
                    31:5e:78:72:ed:12:4d:3c:17:50:99:54:6f:73:eb:
                    94:89:88:4c:bb:ce:6c:5e:83:98:e3:79:44:b8:67:
                    94:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DF:CD:26:B7:B8:48:6B:3D:B1:5B:DC:EE:8A:E6:E6:DA:E6:7C:CC
            X509v3 Authority Key Identifier:
                keyid:67:9A:17:C4:EA:F3:C5:21:92:42:E0:F4:69:4C:02:B2:85:02:C2:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/679A17C4EAF3C5219242E0F4694C02B28502C2BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/679A17C4EAF3C5219242E0F4694C02B28502C2BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/323830343a373361343a3a2f33322d3438203d3e20323730393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:8f:21:61:3d:aa:31:cf:be:5f:36:99:9a:f5:7d:6c:a8:f9:
         28:99:b3:9c:c9:42:3a:d5:c9:8b:90:fe:9c:32:35:3b:f0:6c:
         a4:b1:ea:e2:89:2b:ca:2a:2c:8f:f8:49:a2:d9:00:a6:8c:e5:
         c9:cb:47:d9:d9:84:6d:06:30:c9:14:b8:91:e6:d4:c9:90:66:
         45:04:68:b7:56:37:2f:e6:d4:bc:74:cc:d2:dd:f0:5e:d1:8b:
         c1:5a:2d:31:ec:25:7d:40:35:05:ad:47:eb:de:a7:a1:ce:f8:
         01:a9:e7:78:3e:f6:cc:a0:be:49:b2:10:59:08:2b:9b:99:92:
         43:82:92:c5:8c:b6:41:be:36:59:d6:72:2c:cd:80:cf:09:11:
         47:c5:02:6b:65:ee:f2:6d:14:71:cc:4d:a6:2f:93:d9:22:ce:
         e7:7a:71:ed:e4:ba:bc:71:48:7b:5c:56:b9:d5:86:fb:7b:c1:
         e8:11:df:17:81:df:ca:b5:c2:b0:d7:30:26:3f:9c:e1:cb:f3:
         a8:2b:ad:c0:7c:3b:48:aa:a5:4a:40:e4:93:eb:a6:0d:09:5d:
         46:47:a2:16:3f:62:0f:a2:1d:b3:c4:66:43:7f:62:e9:77:27:
         69:9a:89:d9:36:dc:aa:d9:b6:b6:19:2d:a1:61:bb:0d:11:06:
         f1:c3:1a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:12 2024 by rpki-client on console-fra.rpki-client.org