Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/323830343a383937383a3a2f33352d3335203d3e20323733363036.roa
File:                     323830343a383937383a3a2f33352d3335203d3e20323733363036.roa (raw, json)
Hash identifier:          ShXlSqmwdZZUTid8MsZ+K+q5dYxGbllYZtglyKg3lS0=
Subject key identifier:   AE:15:AD:D7:3B:D8:7E:B0:79:B3:CB:32:B5:48:64:17:62:A6:FE:82
Certificate issuer:       /CN=391294F0484586F9131E6D65BFFAE01A3E7BDCC4
Certificate serial:       731E8873E041F325469068A5203C82EC055B8DD0
Authority key identifier: 39:12:94:F0:48:45:86:F9:13:1E:6D:65:BF:FA:E0:1A:3E:7B:DC:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/323830343a383937383a3a2f33352d3335203d3e20323733363036.roa
Signing time:             Mon 08 Apr 2024 20:38:49 +0000
ROA not before:           Mon 08 Apr 2024 20:33:49 +0000
ROA not after:            Mon 07 Apr 2025 20:38:49 +0000
asID:                     273606
IP address blocks:        2804:8978::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.crl
                          rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 05:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:1e:88:73:e0:41:f3:25:46:90:68:a5:20:3c:82:ec:05:5b:8d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391294F0484586F9131E6D65BFFAE01A3E7BDCC4
        Validity
            Not Before: Apr  8 20:33:49 2024 GMT
            Not After : Apr  7 20:38:49 2025 GMT
        Subject: CN=AE15ADD73BD87EB079B3CB32B548641762A6FE82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e6:dd:39:52:89:c9:c4:7a:08:a4:1b:44:80:
                    76:82:64:a8:49:b6:7f:40:da:00:e8:76:96:7d:cc:
                    b4:93:7e:9d:35:17:66:ee:70:34:9d:dc:53:0d:79:
                    7d:c5:87:a9:36:6d:68:55:16:c7:d9:08:79:3a:bc:
                    0b:ad:a7:59:1a:ec:44:2d:07:06:0f:65:bc:5b:be:
                    1f:49:44:33:6b:4b:ed:c3:c2:6c:1a:0d:f9:ad:66:
                    98:b0:5a:d9:bd:07:89:5c:b5:67:16:0c:a4:5e:f6:
                    c3:46:d5:60:e2:50:3f:d5:ff:04:fa:b9:c2:23:b4:
                    ca:f9:f8:f3:81:59:64:a5:89:4e:a0:85:82:94:7f:
                    e9:f3:fc:79:19:76:8a:9c:a4:7a:30:c4:b3:8b:e1:
                    a5:dc:0d:59:04:af:95:17:10:a7:3a:a5:63:1d:b0:
                    a1:80:e5:69:7b:21:86:03:22:63:6c:70:6d:12:e5:
                    6b:f7:6f:c8:67:3a:b0:e6:c8:4a:5e:bd:af:a6:08:
                    c7:89:9d:3d:da:5d:02:b0:cc:75:0d:b2:f8:69:f3:
                    6b:b3:bd:eb:7f:75:0e:64:c9:69:99:f6:0d:29:ed:
                    55:d3:59:06:6a:04:f5:b4:ef:05:5f:f6:79:ec:32:
                    1f:bf:5f:72:d7:26:2b:7c:c8:14:35:04:49:4c:b3:
                    62:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:15:AD:D7:3B:D8:7E:B0:79:B3:CB:32:B5:48:64:17:62:A6:FE:82
            X509v3 Authority Key Identifier:
                keyid:39:12:94:F0:48:45:86:F9:13:1E:6D:65:BF:FA:E0:1A:3E:7B:DC:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/323830343a383937383a3a2f33352d3335203d3e20323733363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8978::/35

    Signature Algorithm: sha256WithRSAEncryption
         07:52:f3:4a:9c:61:c5:8e:e0:41:75:47:35:de:70:db:1d:77:
         04:c4:07:d6:96:5e:72:09:f5:24:03:37:4b:0c:90:91:94:46:
         72:3c:c5:4d:39:9b:07:1d:87:8c:b2:4d:79:53:16:c2:b9:44:
         f9:f8:21:2e:4a:b9:3d:60:9b:72:7f:18:a7:4d:5b:93:de:ab:
         38:44:d4:78:41:e2:be:06:9e:b6:0c:29:8b:0a:32:44:1a:61:
         f4:f1:c9:02:62:95:fa:7d:e4:51:fa:df:7e:86:0c:d3:00:8c:
         58:ee:55:c2:ea:d0:67:3a:a9:44:0f:83:ef:da:de:7f:5a:be:
         11:a0:08:94:97:5f:53:15:c2:90:29:d4:24:4a:72:d6:a2:29:
         a5:51:00:8f:ef:92:da:52:8c:7c:fd:ac:0a:6f:f9:a2:07:48:
         66:64:97:44:cc:24:23:9e:e9:f5:e9:b9:dc:78:d3:9e:fb:c7:
         dc:b0:a6:27:9a:5e:c6:4e:24:80:e8:d1:56:2e:44:d0:f8:df:
         40:1e:27:43:0b:58:75:49:f7:83:72:f5:49:6d:b3:64:d4:08:
         b0:e2:b6:88:2e:0e:9e:ca:6b:2e:77:b3:09:d9:23:d3:20:d3:
         1c:d2:e6:a6:20:a2:14:99:73:d8:40:9c:c6:b7:4d:29:e8:2b:
         04:42:75:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:43 2024 by rpki-client on console-fra.rpki-client.org