Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/323830343a383937383a383030303a3a2f33342d3334203d3e20323733363036.roa
File:                     323830343a383937383a383030303a3a2f33342d3334203d3e20323733363036.roa (raw, json)
Hash identifier:          LTnQgi9RC/Kk+N4N1FXMXeHOwBRVAjeGdmoJyg+edho=
Subject key identifier:   85:1F:AA:B6:12:32:B7:35:97:7C:6E:A9:81:3E:9B:76:E3:48:EA:DE
Certificate issuer:       /CN=391294F0484586F9131E6D65BFFAE01A3E7BDCC4
Certificate serial:       1C7B5585C507043578120511A5B40E6122819B85
Authority key identifier: 39:12:94:F0:48:45:86:F9:13:1E:6D:65:BF:FA:E0:1A:3E:7B:DC:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/323830343a383937383a383030303a3a2f33342d3334203d3e20323733363036.roa
Signing time:             Mon 08 Apr 2024 20:38:48 +0000
ROA not before:           Mon 08 Apr 2024 20:33:48 +0000
ROA not after:            Mon 07 Apr 2025 20:38:48 +0000
asID:                     273606
IP address blocks:        2804:8978:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.crl
                          rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:7b:55:85:c5:07:04:35:78:12:05:11:a5:b4:0e:61:22:81:9b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391294F0484586F9131E6D65BFFAE01A3E7BDCC4
        Validity
            Not Before: Apr  8 20:33:48 2024 GMT
            Not After : Apr  7 20:38:48 2025 GMT
        Subject: CN=851FAAB61232B735977C6EA9813E9B76E348EADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:61:c5:59:5c:3b:61:69:d5:b2:02:95:cc:a3:
                    6c:4d:0b:d8:41:3f:fa:c1:4a:51:6b:29:9e:c9:3a:
                    d4:6e:af:46:44:c4:00:12:64:22:a5:cc:1d:9d:fa:
                    0a:24:60:1f:85:d3:4c:65:1d:bf:3e:3f:65:96:6b:
                    a1:2e:65:1c:20:34:ad:6d:a1:62:45:1e:ae:72:97:
                    9f:df:a4:81:30:98:38:5e:b3:d3:32:05:1b:13:09:
                    ef:c9:18:ef:b7:10:dc:d2:36:7e:75:bc:73:81:11:
                    8f:5a:b1:32:3a:7b:3a:13:1f:c8:36:ba:da:25:ee:
                    57:04:3d:ff:d2:4c:40:08:3f:ac:81:e5:61:21:9d:
                    bf:01:d2:b2:5d:b4:54:31:29:66:7a:d4:30:e1:01:
                    2d:55:c7:cc:40:cd:49:50:ac:2c:74:c7:3a:eb:c7:
                    1f:b5:64:9e:2f:17:59:c1:f3:94:79:d3:d8:62:61:
                    13:d3:f0:39:43:0c:cc:13:3a:fe:b4:57:df:76:ca:
                    52:00:03:76:57:49:f1:d8:b6:56:33:8e:f2:a4:2d:
                    03:a3:73:ab:fe:b5:b5:a5:ba:7d:d9:00:47:de:c0:
                    87:1d:c2:eb:22:91:6d:bc:3b:86:43:32:63:c9:01:
                    70:ce:de:15:46:7e:b3:5d:d7:d9:71:e3:67:4b:b0:
                    1d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1F:AA:B6:12:32:B7:35:97:7C:6E:A9:81:3E:9B:76:E3:48:EA:DE
            X509v3 Authority Key Identifier:
                keyid:39:12:94:F0:48:45:86:F9:13:1E:6D:65:BF:FA:E0:1A:3E:7B:DC:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/323830343a383937383a383030303a3a2f33342d3334203d3e20323733363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8978:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         22:e7:26:66:29:66:8f:e8:2a:f0:7c:5f:3d:ba:c9:6a:62:21:
         c3:40:ac:0b:3c:e7:91:f3:34:27:8d:00:d1:2b:39:1a:b5:49:
         29:80:16:1c:5d:c6:48:06:62:9f:95:99:c6:31:e4:8b:3a:8d:
         27:d8:1a:fc:d0:a5:b3:74:0b:bc:36:ff:2d:49:0d:a8:c2:1c:
         30:e9:6e:1f:dc:e2:46:cc:02:69:48:f5:a9:dc:4b:12:62:7a:
         ec:19:cc:04:25:c9:9c:2a:cc:92:27:5b:5f:1b:57:7c:ca:1f:
         3a:25:17:d3:b0:75:8a:9b:1a:c5:c0:c7:6d:05:1a:b3:31:97:
         d4:6d:56:af:b0:fa:87:99:c9:98:cb:5a:b2:08:89:3b:e8:9f:
         23:97:70:15:bc:9c:ab:49:94:ac:fd:8c:a9:da:7b:a7:92:4f:
         23:7b:e2:4c:c5:2a:3e:db:b2:d2:c0:ab:fe:ca:ba:72:54:15:
         a2:20:e0:56:56:c6:b0:83:13:9f:31:45:3e:b7:ce:b3:c2:19:
         85:3e:63:36:ec:cf:4e:08:ca:09:8b:4e:9e:61:88:07:14:1d:
         df:74:94:3d:44:93:60:19:91:dc:07:af:de:af:0c:74:2c:e5:
         d3:08:20:b4:55:2d:50:68:c4:b2:c0:9f:c7:3c:24:4b:9b:16:
         7c:98:15:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:08 2024 by rpki-client on console-fra.rpki-client.org