Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/323830343a383937383a323030303a3a2f33352d3335203d3e20323733363036.roa
File:                     323830343a383937383a323030303a3a2f33352d3335203d3e20323733363036.roa (raw, json)
Hash identifier:          +Z0NXX+K93tyd/D4eNbLZRp93P1KqH8HTBErrX6fnvM=
Subject key identifier:   81:0E:67:88:D8:E7:23:B2:A1:77:25:31:6E:38:72:27:E0:27:1A:21
Certificate issuer:       /CN=391294F0484586F9131E6D65BFFAE01A3E7BDCC4
Certificate serial:       5C89B22F7A3885E0D3CC9D2AEEDF4E2310F8320D
Authority key identifier: 39:12:94:F0:48:45:86:F9:13:1E:6D:65:BF:FA:E0:1A:3E:7B:DC:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/323830343a383937383a323030303a3a2f33352d3335203d3e20323733363036.roa
Signing time:             Mon 08 Apr 2024 20:38:48 +0000
ROA not before:           Mon 08 Apr 2024 20:33:48 +0000
ROA not after:            Mon 07 Apr 2025 20:38:48 +0000
asID:                     273606
IP address blocks:        2804:8978:2000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.crl
                          rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:89:b2:2f:7a:38:85:e0:d3:cc:9d:2a:ee:df:4e:23:10:f8:32:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391294F0484586F9131E6D65BFFAE01A3E7BDCC4
        Validity
            Not Before: Apr  8 20:33:48 2024 GMT
            Not After : Apr  7 20:38:48 2025 GMT
        Subject: CN=810E6788D8E723B2A17725316E387227E0271A21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:33:20:3a:1b:4e:46:71:ff:00:d3:53:9a:a0:
                    f3:2c:68:83:fe:cb:4a:36:a4:c5:08:98:0f:36:5d:
                    54:6b:ee:a6:17:2c:33:0f:c4:37:7a:80:94:00:09:
                    83:f7:ed:45:2f:42:bc:92:c1:4b:7a:9c:79:55:01:
                    ad:b9:5d:ad:7c:6a:58:13:bf:93:4c:4e:5f:ad:9f:
                    27:1f:f0:09:35:a2:14:d9:38:00:00:20:ee:b0:10:
                    35:a0:e2:df:b3:44:59:f1:ab:a5:31:02:dd:8c:5e:
                    c5:1e:fb:d1:5e:f9:9f:75:84:8e:26:91:80:ae:87:
                    d9:f3:ec:61:f0:58:b4:76:34:23:96:ac:17:44:0d:
                    f8:f2:d0:3e:91:b6:cb:22:f5:a6:3c:87:56:b0:a5:
                    00:f9:9b:26:e4:70:17:5d:cf:50:18:1f:b6:0a:f6:
                    71:56:38:d6:d1:48:59:d8:1c:55:5e:7b:f7:70:c3:
                    15:c3:09:b3:83:1c:e0:73:a1:8b:2a:23:4c:12:06:
                    a5:1a:7b:2c:6d:06:9d:23:5a:6c:d3:82:4f:16:98:
                    01:c6:0d:de:da:7c:fe:b0:43:ca:0f:27:6f:b8:5c:
                    57:2c:41:5d:4f:e3:2e:c2:13:b0:ca:16:67:95:f6:
                    36:45:4f:42:0c:60:66:42:b7:3f:d0:ae:85:fd:e7:
                    cd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0E:67:88:D8:E7:23:B2:A1:77:25:31:6E:38:72:27:E0:27:1A:21
            X509v3 Authority Key Identifier:
                keyid:39:12:94:F0:48:45:86:F9:13:1E:6D:65:BF:FA:E0:1A:3E:7B:DC:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/323830343a383937383a323030303a3a2f33352d3335203d3e20323733363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8978:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         1e:89:ee:5b:e2:1d:29:e7:df:10:96:fe:4f:9a:77:37:c4:99:
         59:d6:06:59:aa:3e:10:a0:58:98:12:be:35:e0:de:bd:8a:1b:
         54:f5:7d:4b:22:bc:05:85:07:8d:f7:87:30:60:05:c9:1b:43:
         de:6b:fd:1a:1a:1f:37:18:f7:6d:b8:14:10:d5:b8:50:91:64:
         7f:e6:c1:9f:40:29:5f:48:a9:df:b8:32:f5:0c:71:a0:8b:aa:
         e3:6e:f6:2b:40:8e:b3:3d:df:53:aa:a2:07:80:62:3a:7e:e4:
         5d:ab:7a:a1:30:11:14:d6:97:6a:c8:ab:4f:82:53:1e:79:53:
         5e:25:c7:92:44:7a:bc:dc:17:f2:90:6e:51:57:94:a4:55:d3:
         42:06:9e:51:c2:a0:09:e5:8f:06:91:df:1e:d6:75:7e:4c:d0:
         9c:5c:f0:96:8b:42:38:71:d4:a1:81:ad:70:89:29:f3:64:f7:
         1a:be:b9:8e:4f:08:d1:04:8c:6f:1e:a6:d7:34:2e:28:fe:c3:
         c5:5f:0c:c5:1d:f1:7f:7c:b4:fd:ea:f4:ca:85:19:cd:3b:e6:
         f1:74:a1:02:84:e0:64:61:99:81:67:ff:c6:35:50:3b:f4:47:
         8f:f2:28:26:37:6c:86:86:0a:24:9f:56:46:d6:a1:5d:f0:23:
         94:e5:68:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:26 2024 by rpki-client on console-ams.rpki-client.org